refactor: harden restic configuration

move secrets to .env file so they work on their own, initialize restic repo on fresh deployments
2026-07-12 23:46:29 +02:00
parent c4c8d6de7f
commit 71a02e0f86
5 changed files with 47 additions and 11 deletions
@@ -0,0 +1,5 @@
+# Ansible managed
+RESTIC_REPOSITORY="{{ vault_restic_repo_url }}"
+RESTIC_PASSWORD="{{ vault_restic_password }}"
+AWS_ACCESS_KEY_ID="{{ vault_aws_access_key }}"
+AWS_SECRET_ACCESS_KEY="{{ vault_aws_secret_key }}"