1 files changed, 18 insertions, 0 deletions

diff --git a/ansible/inventory/host_vars/mailmash/backup.yml b/ansible/inventory/host_vars/mailmash/backup.yml
new file mode 100644
index 0000000..aa5fcc4
--- /dev/null
+++ b/ansible/inventory/host_vars/mailmash/backup.yml
@@ -0,0 +1,18 @@
+---
+backup:
+  # Define a host in your ~/.ssh/config with username, host, and private key.
+  # Maintaining your ~/.ssh/config is out of scope for our implementation here.
+  host: rsn-backup
+
+  # directories to backup can be amended at any time
+  dirs:
+    - /var/mail
+    - /var/lib/fail2ban
+    - /var/lib/redis
+
+  # phrase is from: borg init --remote-path=borg1 --encryption=repokey-blake2 rsn-backup:mailmash
+  phrase: your phrase goes here
+
+  # your runAs user should be able to ssh to the backup host without a password
+  # (remote login user is configured by Host->User in this user's ~/.ssh/config)
+  runAs: root