services/roles/backup/vars/main.yml

---
backup_svc:
  name: backup

backup_volumes_service: "{{ host_backup.volumes | map_backup_volumes_service }}"

backup_env:
  HC_UID: "{{ host_backup.hc_uid }}"
  UPTIME_KUMA_TOKEN: "{{ host_backup.uptime_kuma_token }}"

  RESTIC_REPOSITORY: "{{ vault_backup.restic.repository }}"
  RESTIC_PASSWORD: "{{ vault_backup.restic.password }}"

  AWS_ACCESS_KEY_ID: "{{ vault_backup.aws_secret.key_id }}"
  AWS_SECRET_ACCESS_KEY: "{{ vault_backup.aws_secret.access_key }}"

backup_compose:
  watchtower: false
  image: backup
  volumes: "{{ backup_volumes_service }}"
  file:
    services:
      app:
        build:
          context: .
        entrypoint:
          - /usr/bin/restic
          - --retry-lock=1m
        restart: never
        hostname: "{{ ansible_facts.hostname }}"
      mount:
        build:
          context: .
        image: backup
        restart: never
        hostname: "{{ ansible_facts.hostname }}"
        env_file:
          - service.env
        entrypoint:
          - /usr/bin/restic
          - --retry-lock=1m
        command:
          - mount
          - /mnt
        privileged: true
        devices:
          - /dev/fuse

    volumes: "{{ host_backup.volumes | map_backup_volumes }}"