roles/backup/tasks/main.yml

@@ -3,6 +3,7 @@
   ansible.builtin.apt:
     name: restic
     state: present
+    update_cache: true
 
 - name: Initialize restic repository
   environment:
@@ -11,11 +12,11 @@
     AWS_ACCESS_KEY_ID: "{{ vault_aws_access_key }}"
     AWS_SECRET_ACCESS_KEY: "{{ vault_aws_secret_key }}"
   block:
-    - name: Check if already initialized
+    - name: Check if repository is initialized
-      ansible.builtin.command: restic snapshots
+      command: restic cat config
       register: restic_check
-      failed_when: false
       changed_when: false
+      failed_when: false
 
     - name: Initialize repository
       ansible.builtin.command: restic init

roles/backup/templates/restic-backup.sh.j2

@@ -3,11 +3,7 @@
 
 set -e
 
-# Source environment variables if running manually/outside Systemd
+## Environment is injected by the systemd unit via EnvironmentFile=/etc/restic-backup.env. Run manually with: systemctl start restic-backup.service
-if [ -f /etc/restic-backup.env ]; then
-  # shellcheck source=/dev/null
-  . /etc/restic-backup.env
-fi
 
 echo "Starting Restic Backup at $(date)"