roles/minecraft/defaults/main.yaml

@@ -11,8 +11,8 @@ minecraft_port: 25565
 minecraft_user: minecraft
 minecraft_group: minecraft
 
-minecraft_jar_url: https://launcher.mojang.com/v1/objects/4d1826eebac84847c71a77f9349cc22afd0cf0a1/server.jar
-minecraft_jar_checksum: sha256:a0c062686bee5a92d60802ca74d198548481802193a70dda6d5fe7ecb7207993
+minecraft_jar_url: https://launcher.mojang.com/v1/objects/e9f105b3c5c7e85c7b445249a93362a22f62442d/server.jar
+minecraft_jar_checksum: sha256:e0fe1749263b5ec211b358b598b46e787645bffa8411414f0c812a92bdc70c84
 
 minecraft_opt_path: /opt/minecraft
 minecraft_var_path: "{{ minecraft_opt_path }}/var"

roles/restic/files/restic-job.sh

@@ -1,75 +0,0 @@
-#!/bin/bash
-
-# Ansible managed
-
-error_exit() {
-    printf "%s\n" "$1"
-    exit 1
-}
-
-RESTIC_ETC_PATH=${RESTIC_ETC_PATH:-/etc/restic}
-RESTIC_PATH=${RESTIC_PATH:-/usr/local/bin/restic}
-
-MAX_ATTEMPTS=60
-NICE="ionice -c2 nice -n19"
-JOB=$1
-
-if [ -z "$JOB" ]; then
-    error_exit "job is missing"
-fi
-
-JOB_PATH="${RESTIC_ETC_PATH}/jobs/${JOB}"
-JOB_ENV="${JOB_PATH}/env.sh"
-
-if [ ! -r "$JOB_ENV" ]; then
-    error_exit "${JOB_ENV} does not exist"
-fi
-
-# shellcheck disable=SC1090
-. "$JOB_ENV"
-
-if [ -z "${REPO+x}" ]; then
-    error_exit "\$REPO is not set"
-fi
-
-REPO_PATH="${RESTIC_ETC_PATH}/repos/${REPO}"
-REPO_ENV="${REPO_PATH}/env.sh"
-
-if [ ! -r "$REPO_ENV" ]; then
-    error_exit "${REPO_ENV} does not exist"
-fi
-
-# shellcheck disable=SC1090
-. "$REPO_ENV"
-
-EXCLUDE_PATH="${JOB_PATH}/exclude.txt"
-
-if [ -z "${PATHS+x}" ]; then
-    error_exit "\$PATHS is not set"
-fi
-
-counter=0
-sleep=1
-rc=1
-
-until [ $counter -eq "$MAX_ATTEMPTS" ] || [ $rc -eq 0 ]; do
-    if [ -r "$EXCLUDE_PATH" ]; then
-        $NICE "$RESTIC_PATH" backup -q --exclude-file="${EXCLUDE_PATH}" "${PATHS}"
-    else
-        $NICE "$RESTIC_PATH" backup -q "${PATHS}"
-    fi
-
-    rc=$?
-
-    if [ $rc -ne 0 ]; then
-      sleep=$((counter * 5))
-      printf "sleeping for %d seconds (%d)\n" $sleep $counter
-      sleep $sleep
-    fi
-
-    (( counter++ ))
-done
-
-if [ $rc -ne 0 ] && [ $counter -eq "$MAX_ATTEMPTS" ]; then
-  printf "restic job timed out, exiting\n"
-fi

roles/restic/files/restic-repo.sh

@@ -1,30 +0,0 @@
-#!/bin/bash
-
-# Ansible managed
-
-error_exit() {
-    printf "%s\n" "$1"
-    exit 1
-}
-
-RESTIC_ETC_PATH=${RESTIC_ETC_PATH:-/etc/restic}
-RESTIC_PATH=${RESTIC_PATH:-/usr/local/bin/restic}
-
-if [ $# -lt 2 ]; then
-    error_exit "missing arguments"
-fi
-
-REPO=$1
-shift
-
-REPO_PATH="${RESTIC_ETC_PATH}/repos/${REPO}"
-REPO_ENV="${REPO_PATH}/env.sh"
-
-if [ ! -r "$REPO_ENV" ]; then
-    error_exit "${REPO_ENV} does not exist"
-fi
-
-# shellcheck disable=SC1090
-. "$REPO_ENV"
-
-$RESTIC_PATH "$@"

roles/restic/files/restic-tidy.sh

@@ -1,68 +0,0 @@
-#!/bin/bash
-
-# {{ ansible_managed }}
-
-error_exit() {
-    printf "%s\n" "$1"
-    exit 1
-}
-
-RESTIC_ETC_PATH=${RESTIC_ETC_PATH:-/etc/restic}
-RESTIC_PATH=${RESTIC_PATH:-/usr/local/bin/restic}
-
-MAX_ATTEMPTS=60
-MAX_SLEEP=43200  # 12 hours
-REPO=$1
-
-if [ -z "$REPO" ]; then
-    error_exit "repo is missing"
-fi
-
-REPO_PATH="${RESTIC_ETC_PATH}/repos/${REPO}"
-REPO_ENV="${REPO_PATH}/env.sh"
-
-if [ ! -r "$REPO_ENV" ]; then
-    error_exit "${REPO_ENV} does not exist"
-fi
-
-# shellcheck disable=SC1090
-. "$REPO_ENV"
-
-KEEP_HOURLY=${KEEP_HOURLY:-24}
-KEEP_DAILY=${KEEP_DAILY:-7}
-KEEP_WEEKLY=${KEEP_WEEKLY:-5}
-KEEP_MONTHLY=${KEEP_MONTHLY:-12}
-KEEP_YEARLY=${KEEP_YEARLY:-10}
-
-# initial sleep
-sleep "$(((RANDOM % MAX_SLEEP) + 1))s"
-
-counter=0
-sleep=1
-rc=1
-
-until [ $counter -eq "$MAX_ATTEMPTS" ] || [ $rc -eq 0 ]; do
-    $RESTIC_PATH forget \
-        --quiet \
-        --host "$(hostname -f)" \
-        --keep-hourly "$KEEP_HOURLY" \
-        --keep-daily "$KEEP_DAILY" \
-        --keep-weekly "$KEEP_WEEKLY" \
-        --keep-monthly "$KEEP_MONTHLY" \
-        --keep-yearly "$KEEP_YEARLY" \
-        --prune
-
-    rc=$?
-
-    if [ $rc -ne 0 ]; then
-      sleep=$((counter * 5))
-      printf "sleeping for %d seconds (%d)\n" $sleep $counter
-      sleep $sleep
-    fi
-
-    (( counter++ ))
-done
-
-if [ $rc -ne 0 ] && [ $counter -eq "$MAX_ATTEMPTS" ]; then
-    printf "tidy timed out, exiting\n"
-fi

roles/restic/tasks/main.yaml

@@ -65,17 +65,21 @@
     - "{{ restic_etc_path }}/repos"
     - "{{ restic_etc_path }}/jobs"
 
-- name: copy restic helper scripts
-  copy:
-    src: "{{ item }}"
-    dest: "{{ restic_bin_path }}/{{ item | basename | splitext | first }}"
+- name: create restic job wrapper script
+  template:
+    src: restic-job.sh.j2
+    dest: "{{ restic_bin_path }}/restic-job"
+    owner: root
+    group: root
+    mode: 0755
+
+- name: create restic tidy wrapper
+  template:
+    src: restic-tidy.sh.j2
+    dest: "{{ restic_bin_path }}/restic-tidy"
     owner: root
     group: root
     mode: 0755
-  loop:
-    - restic-tidy.sh
-    - restic-repo.sh
-    - restic-job.sh
 
 - name: manage repos
   include: repo.yaml

roles/restic/tasks/repo.yaml

@@ -36,23 +36,6 @@
     group: root
     mode: 0400
 
-- name: symlink default repo
-  block:
-    - name: explicit default
-      file:
-        src: "{{ restic_etc_path }}/repos/{{ item.name }}"
-        dest: "{{ restic_etc_path }}/repos/default"
-        state: link
-        force: yes
-      when: item.default is defined and item.default == True
-    - name: implicit default
-      file:
-        src: "{{ restic_etc_path }}/repos/{{ item.name }}"
-        dest: "{{ restic_etc_path }}/repos/default"
-        state: link
-        force: yes
-      when: restic_repos | count == 1
-
 - name: create cron
   cron:
     name: "restic {{ item.name }} tidy"

roles/restic/templates/restic-job.sh.j2

@@ -0,0 +1,50 @@
+#!/bin/bash
+
+# {{ ansible_managed }}
+
+error_exit() {
+    printf "%s\n" "$1"
+    exit 1
+}
+
+NICE="ionice -c2 nice -n19"
+JOB=$1
+
+if [ -z "$JOB" ]; then
+    error_exit "job is missing"
+fi
+
+RESTIC_ETC_PATH="{{ restic_etc_path }}"
+JOB_PATH="${RESTIC_ETC_PATH}/jobs/${JOB}"
+JOB_ENV="${JOB_PATH}/env.sh"
+
+if [ ! -r "$JOB_ENV" ]; then
+    error_exit "${JOB_ENV} does not exist"
+fi
+
+. "$JOB_ENV"
+
+if [ -z "${REPO+x}" ]; then
+    error_exit "\$REPO is not set"
+fi
+
+REPO_PATH="${RESTIC_ETC_PATH}/repos/${REPO}"
+REPO_ENV="${REPO_PATH}/env.sh"
+
+if [ ! -r "$REPO_ENV" ]; then
+    error_exit "${REPO_ENV} does not exist"
+fi
+
+. "$REPO_ENV"
+
+EXCLUDE_PATH="${JOB_PATH}/exclude.txt"
+
+if [ -z "${PATHS+x}" ]; then
+    error_exit "\$PATHS is not set"
+fi
+
+if [ -r "$EXCLUDE_PATH" ]; then
+    $NICE {{ restic_path }} backup -q --exclude-file="${EXCLUDE_PATH}" "${PATHS}"
+else
+    $NICE {{ restic_path }} backup -q "${PATHS}"
+fi

roles/restic/templates/restic-tidy.sh.j2

@@ -0,0 +1,59 @@
+#!/bin/bash
+
+# {{ ansible_managed }}
+
+error_exit() {
+    printf "%s\n" "$1"
+    exit 1
+}
+
+MAX_ATTEMPTS=60
+REPO=$1
+
+if [ -z "$REPO" ]; then
+    error_exit "repo is missing"
+fi
+
+RESTIC_ETC_PATH="{{ restic_etc_path }}"
+REPO_PATH="${RESTIC_ETC_PATH}/repos/${REPO}"
+REPO_ENV="${REPO_PATH}/env.sh"
+
+if [ ! -r "$REPO_ENV" ]; then
+    error_exit "${REPO_ENV} does not exist"
+fi
+
+. "$REPO_ENV"
+
+KEEP_DAILY=${KEEP_DAILY:-7}
+KEEP_WEEKLY=${KEEP_WEEKLY:-5}
+KEEP_MONTHLY=${KEEP_MONTHLY:-12}
+KEEP_YEARLY=${KEEP_YEARLY:-10}
+
+counter=0
+sleep=1
+rc=1
+
+until [ $counter -eq $MAX_ATTEMPTS ] || [ $rc -eq 0 ]; do
+  {{ restic_path }} forget \
+      --quiet \
+      --host $(hostname -f) \
+      --keep-daily "$KEEP_DAILY" \
+      --keep-weekly "$KEEP_WEEKLY" \
+      --keep-monthly "$KEEP_MONTHLY" \
+      --keep-yearly "$KEEP_YEARLY" \
+      --prune
+
+  rc=$?
+
+  if [ $rc -ne 0 ]; then
+    sleep=$((counter * 5))
+    printf "sleeping for %d seconds (%d)\n" $sleep $counter
+    sleep $sleep
+  fi
+
+  let counter+=1
+done
+
+if [ $rc -ne 0 ] && [ $counter -eq $MAX_ATTEMPTS ]; then
+  printf "tidy timed out, exiting\n"
+fi

roles/rsyslog/defaults/main.yaml

@@ -17,8 +17,6 @@ rsyslog_load_modules:
   - name: imklog
     params:
       permitnonkernelfacility: "on"
-  - name: imtcp
-  - name: imudp
 
 rsyslog_work_directory: /var/spool/rsyslog
 rsyslog_include_config: /etc/rsyslog.d/*.conf

roles/rsyslog/templates/rsyslog.conf.j2

@@ -13,32 +13,6 @@ module(
 {% endif %}
 {% endfor %}
 
-{% for input in rsyslog_inputs | default([]) %}
-{% if input.enabled | default(true) %}
-input(
-  type="{{ input.name }}"
-{% if input.params is defined and input.params is mapping %}
-{% for k, v in input.params.items() | default({}) %}
-  {{ k }}="{{ v }}"
-{% endfor %}
-{% endif %}
-)
-{% endif %}
-{% endfor %}
-
-{% for output in rsyslog_outputs | default([]) %}
-{% if output.enabled | default(true) %}
-action(
-  type="{{ output.name }}"
-{% if output.params is defined and output.params is mapping %}
-{% for k, v in output.params.items() | default({}) %}
-  {{ k }}="{{ v }}"
-{% endfor %}
-{% endif %}
-)
-{% endif %}
-{% endfor %}
-
 {% if rsyslog_action_file_default_template is defined %}
 $ActionFileDefaultTemplate {{ rsyslog_action_file_default_template }}
 {% endif %}

roles/util/defaults/main.yaml

@@ -29,7 +29,3 @@ util_packages:
   security:
     - gnupg
     - pass
-    - pwgen
-  text:
-    - jq
-    - crudini