refactor(roles): backups for config-templates

CONTRIBUTING.rst

@@ -617,6 +617,7 @@ The handling of the state in the role can look something like this, assuming the
 
     - name: 'Create sites-available vHosts'
       ansible.builtin.template:
+        backup: true
         src: '...'
         dest: '...'
       when:

roles/apache_httpd/tasks/confs.yml

@@ -25,6 +25,7 @@
 
 - name: 'Create conf-available configs'
   ansible.builtin.template:
+    backup: true
     src: 'etc/httpd/conf-available/{{ item["template"]}}.conf.j2'
     dest: '{{ apache_httpd__config_path }}/{{ apache_httpd__config_prefix }}conf-available/{{ item["filename"] }}.conf'
     owner: 'root'

roles/apache_tomcat/tasks/main.yml

@@ -52,6 +52,7 @@
 
   - name: 'Deploy /etc/tomcat/server.xml'
     ansible.builtin.template:
+      backup: true      
       src: 'etc/tomcat/{{ tomcat__installed_version }}-server.xml.j2'
       dest: '/etc/tomcat/server.xml'
       owner: 'root'
@@ -61,6 +62,7 @@
 
   - name: 'Copy tomcat config /etc/sysconfig'
     ansible.builtin.template:
+      backup: true      
       src: 'etc/sysconfig/{{ tomcat__installed_version }}-tomcat.j2'
       dest: '/etc/sysconfig/tomcat'
       owner: 'root'
@@ -69,6 +71,7 @@
 
   - name: 'Deploy /etc/tomcat/context.xml'
     ansible.builtin.template:
+      backup: true      
       src: 'etc/tomcat/{{ tomcat__installed_version }}-context.xml.j2'
       dest: '/etc/tomcat/context.xml'
       owner: 'root'
@@ -78,6 +81,7 @@
 
   - name: 'Deploy /etc/tomcat/logging.properties'
     ansible.builtin.template:
+      backup: true      
       src: 'etc/tomcat/{{ tomcat__installed_version }}-logging.properties.j2'
       dest: '/etc/tomcat/logging.properties'
       owner: 'root'
@@ -87,6 +91,7 @@
 
   - name: 'Copy tomcat logrotate template to /etc/logrotate.d'
     ansible.builtin.template:
+      backup: true      
       src: 'etc/logrotate.d/tomcat.j2'
       dest: '/etc/logrotate.d/tomcat'
       owner: 'root'
@@ -104,6 +109,7 @@
 
   - name: 'Deploy /var/lib/tomcat/webapps/docs/META-INF/context.xml'
     ansible.builtin.template:
+      backup: true      
       src: 'var/lib/tomcat/webapps/docs/META-INF/context.xml.j2'
       dest: '/var/lib/tomcat/webapps/docs/META-INF/context.xml'
       owner: 'root'
@@ -115,6 +121,7 @@
 
   - name: 'Deploy /var/lib/tomcat/webapps/host-manager/META-INF/context.xml'
     ansible.builtin.template:
+      backup: true      
       src: 'var/lib/tomcat/webapps/host-manager/META-INF/context.xml.j2'
       dest: '/var/lib/tomcat/webapps/host-manager/META-INF/context.xml'
       owner: 'root'
@@ -126,6 +133,7 @@
 
   - name: 'Deploy /var/lib/tomcat/webapps/manager/META-INF/context.xml'
     ansible.builtin.template:
+      backup: true      
       src: 'var/lib/tomcat/webapps/manager/META-INF/context.xml.j2'
       dest: '/var/lib/tomcat/webapps/manager/META-INF/context.xml'
       owner: 'root'
@@ -137,6 +145,7 @@
 
   - name: 'Deploy /var/lib/tomcat/webapps/manager/WEB-INF/web.xml'
     ansible.builtin.template:
+      backup: true      
       src: 'var/lib/tomcat/webapps/manager/WEB-INF/web.xml.j2'
       dest: '/var/lib/tomcat/webapps/manager/WEB-INF/web.xml'
       owner: 'root'
@@ -159,6 +168,7 @@
 
   - name: 'Deploy /etc/tomcat/tomcat-users.xml'
     ansible.builtin.template:
+      backup: true      
       src: 'etc/tomcat/{{ tomcat__installed_version }}-tomcat-users.xml.j2'
       dest: '/etc/tomcat/tomcat-users.xml'
       owner: 'root'

roles/audit/tasks/main.yml

@@ -9,6 +9,7 @@
 
   - name: 'Deploy /etc/audit/auditd.conf'
     ansible.builtin.template:
+      backup: true
       src: 'etc/audit/auditd.conf.j2'
       dest: '/etc/audit/auditd.conf'
       owner: 'root'

roles/bind/tasks/main.yml

@@ -15,6 +15,7 @@
 
   - name: 'Deploy /etc/sysconfig/named'
     ansible.builtin.template:
+      backup: true
       src: 'etc/sysconfig/named.j2'
       dest: '/etc/sysconfig/named'
       owner: 'root'
@@ -24,6 +25,7 @@
 
   - name: 'Deploy /etc/named.conf'
     ansible.builtin.template:
+      backup: true
       src: 'etc/named.conf.j2'
       dest: '/etc/named.conf'
       owner: 'root'
@@ -40,6 +42,7 @@
 
   - name: 'Deploy the forward and reverse zones'
     ansible.builtin.template:
+      backup: true
       src: 'var/named/raw.zone.j2'
       dest: '/var/named/{{ item["file"] | d(item["name"] ~ ".zone") }}'
       owner: 'root'

roles/borg_local/tasks/main.yml

@@ -35,6 +35,7 @@
 
   - name: 'Deploy /etc/borg/borg-passphrase'
     ansible.builtin.template:
+      backup: true
       src: 'etc/borg/borg-passphrase.j2'
       dest: '/etc/borg/borg-passphrase'
       owner: 'root'
@@ -43,6 +44,7 @@
 
   - name: 'Deploy /etc/borg/borg.conf'
     ansible.builtin.template:
+      backup: true
       src: 'etc/borg/borg.conf.j2'
       dest: '/etc/borg/borg.conf'
       owner: 'root'

roles/chrony/tasks/main.yml

@@ -7,6 +7,7 @@
 
   - name: 'Deploy /etc/chrony.conf'
     ansible.builtin.template:
+      backup: true
       src: 'etc/chrony.conf.j2'
       dest: '/etc/chrony.conf'
       mode: 0o644

roles/clamav/tasks/main.yml

@@ -15,6 +15,7 @@
 
   - name: 'Deploy /etc/systemd/system/clamav-clamonacc.service.d/fdpass.conf'
     ansible.builtin.template:
+      backup: true
       src: 'etc/systemd/system/clamav-clamonacc.service.d/fdpass.conf.j2'
       dest: '/etc/systemd/system/clamav-clamonacc.service.d/fdpass.conf'
       owner: 'root'
@@ -50,6 +51,7 @@
 
   - name: 'Deploy /etc/logrotate.d/clamav'
     ansible.builtin.template:
+      backup: true
       src: 'etc/logrotate.d/clamav.j2'
       dest: '/etc/logrotate.d/clamav'
       owner: 'root'
@@ -64,6 +66,7 @@
 
   - name: 'Deploy /etc/clamd.d/scan.conf'
     ansible.builtin.template:
+      backup: true
       src: 'etc/clamd.d/scan.conf.j2'
       dest: '/etc/clamd.d/scan.conf'
       owner: 'root'
@@ -82,6 +85,7 @@
 
   - name: 'Deploy /etc/freshclam.conf'
     ansible.builtin.template:
+      backup: true
       src: 'etc/freshclam.conf.j2'
       dest: '/etc/freshclam.conf'
       owner: 'root'
@@ -98,6 +102,7 @@
 
   - name: 'Deploy /var/lib/clamav/lfops_whitelist.ign2'
     ansible.builtin.template:
+      backup: true
       src: 'var/lib/clamav/lfops_whitelist.ign2.j2'
       dest: '/var/lib/clamav/lfops_whitelist.ign2'
       owner: 'root'
@@ -107,6 +112,7 @@
 
   - name: 'Deploy /var/lib/clamav/lfops_whitelist.fp'
     ansible.builtin.template:
+      backup: true
       src: 'var/lib/clamav/lfops_whitelist.fp.j2'
       dest: '/var/lib/clamav/lfops_whitelist.fp'
       owner: 'root'
@@ -116,6 +122,7 @@
 
   - name: 'Deploy /etc/clamd.d/clamdscan.filelist'
     ansible.builtin.template:
+      backup: true
       src: 'etc/clamd.d/clamdscan.filelist.j2'
       dest: '/etc/clamd.d/clamdscan.filelist'
       owner: 'root'

roles/collabora/tasks/main.yml

@@ -38,6 +38,7 @@
 
   - name: 'deploy /etc/coolwsd/coolwsd.xml (v{{ collabora__installed_version }}{{ collabora__use_code | bool | ternary("-code", "") }})'
     ansible.builtin.template:
+      backup: true
       src: 'etc/coolwsd/{{ collabora__installed_version }}-coolwsd{{ collabora__use_code | bool | ternary("-code", "") }}.xml.j2'
       dest: '/etc/coolwsd/coolwsd.xml'
       owner: 'cool'
@@ -54,6 +55,7 @@
 
   - name: 'Deploy /etc/logrotate.d/coolwsd'
     ansible.builtin.template:
+      backup: true
       src: 'etc/logrotate.d/coolwsd.j2'
       dest: '/etc/logrotate.d/coolwsd'
       owner: 'root'

roles/coturn/tasks/main.yml

@@ -7,6 +7,7 @@
 
   - name: 'Deploy /etc/coturn/turnserver.conf'
     ansible.builtin.template:
+      backup: true
       src: 'etc/coturn/turnserver.conf.j2'
       dest: '/etc/coturn/turnserver.conf'
       owner: 'root'

roles/crypto_policy/tasks/main.yml

@@ -2,6 +2,7 @@
 
   - name: 'Deploy /etc/crypto-policies/policies/modules/*.pmod'
     ansible.builtin.template:
+      backup: true
       src: '{{ item }}'
       dest: '/etc/crypto-policies/policies/modules/{{ item | basename | split(".") | first }}.pmod'
       owner: 'root'

roles/docker/tasks/main.yml

@@ -17,6 +17,7 @@
 
   - name: 'Deploy /etc/docker/daemon.json'
     ansible.builtin.template:
+      backup: true
       src: 'etc/docker/daemon.json.j2'
       dest: '/etc/docker/daemon.json'
       mode: 0o640

roles/duplicity/tasks/main.yml

@@ -61,12 +61,14 @@
 
   - name: 'Deploy /etc/duba/duba.json'
     ansible.builtin.template:
+      backup: true
       src: 'etc/duba/duba.json.j2'
       dest: '/etc/duba/duba.json'
       mode: 0o600 # file contains secrets
 
   - name: 'Deploy /etc/systemd/system/duba.service'
     ansible.builtin.template:
+      backup: true
       src: 'etc/systemd/system/duba.service.j2'
       dest: '/etc/systemd/system/duba.service'
       owner: 'root'
@@ -84,6 +86,7 @@
 
   - name: 'Deploy /etc/logrotate.d/duplicity'
     ansible.builtin.template:
+      backup: true
       src: 'etc/logrotate.d/duplicity.j2'
       dest: '/etc/logrotate.d/duplicity'
       owner: 'root'
@@ -98,6 +101,7 @@
 
   - name: 'Deploy /usr/local/bin/duba'
     ansible.builtin.template:
+      backup: true
       src: 'usr/local/bin/duba.j2'
       dest: '/usr/local/bin/duba'
       owner: 'root'

roles/fail2ban/tasks/main.yml

@@ -26,6 +26,7 @@
 
   - name: 'Deploy actions'
     ansible.builtin.template:
+      backup: true
       src: 'etc/fail2ban/action.d/{{ item }}.conf.j2'
       dest: '/etc/fail2ban/action.d/{{ item }}.conf'
       owner: 'root'
@@ -38,6 +39,7 @@
 
   - name: 'Deploy filters'
     ansible.builtin.template:
+      backup: true
       src: 'etc/fail2ban/filter.d/{{ item }}.conf.j2'
       dest: '/etc/fail2ban/filter.d/{{ item }}.conf'
       owner: 'root'
@@ -51,6 +53,7 @@
 
   - name: 'Deploy /etc/fail2ban/jail.d/z00-defaults.conf'
     ansible.builtin.template:
+      backup: true
       src: 'etc/fail2ban/jail.d/z00-defaults.conf.j2'
       dest: '/etc/fail2ban/jail.d/z00-defaults.conf'
       owner: 'root'
@@ -75,6 +78,7 @@
 
   - name: 'Create Jails'
     ansible.builtin.template:
+      backup: true
       src: 'etc/fail2ban/jail.d/z10-{{ item["template"] }}.conf.j2'
       dest: '/etc/fail2ban/jail.d/{{ item["filename"] }}.conf'
       owner: 'root'

roles/fangfrisch/tasks/main.yml

@@ -10,6 +10,7 @@
 
   - name: 'Deploy /etc/fangfrisch.conf'
     ansible.builtin.template:
+      backup: true
       src: 'etc/fangfrisch.conf.j2'
       dest: '/etc/fangfrisch.conf'
       owner: 'clamupdate'

roles/github_project_createrepo/tasks/main.yml

@@ -108,6 +108,7 @@
 
   - name: 'deploy /etc/github-project-createrepo.yml'
     ansible.builtin.template:
+      backup: true
       src: 'etc/github-project-createrepo.yml.j2'
       dest: '/etc/github-project-createrepo.yml'
       owner: 'root'

roles/gitlab_ce/tasks/main.yml

@@ -56,6 +56,7 @@
 
   - name: 'Deploy /etc/gitlab/gitlab.rb'
     ansible.builtin.template:
+      backup: true
       src: 'etc/gitlab/gitlab.rb.j2'
       dest: '/etc/gitlab/gitlab.rb'
       owner: 'root'

roles/glpi_agent/tasks/main.yml

@@ -59,6 +59,7 @@
 
   - name: 'Deploy /etc/glpi-agent/conf.d/z00-linuxfabrik.cfg'
     ansible.builtin.template:
+      backup: true
       src: 'etc/glpi-agent/conf.d/z00-linuxfabrik.cfg.j2'
       dest: '/etc/glpi-agent/conf.d/z00-linuxfabrik.cfg'
       owner: 'root'

roles/grafana/tasks/main.yml

@@ -28,6 +28,7 @@
 
   - name: 'deploy /etc/grafana/grafana.ini'
     ansible.builtin.template:
+      backup: true
       src: 'etc/grafana/grafana.ini.j2'
       dest: '/etc/grafana/grafana.ini'
       owner: 'root'
@@ -44,6 +45,7 @@
 
   - name: 'deploy /etc/grafana/ldap.toml'
     ansible.builtin.template:
+      backup: true
       src: 'etc/grafana/ldap.toml.j2'
       dest: '/etc/grafana/ldap.toml'
       owner: 'root'
@@ -82,6 +84,7 @@
 
   - name: 'deploy the grafana datasource provisioning file'
     ansible.builtin.template:
+      backup: true
       src: 'etc/grafana/provisioning/datasources/linuxfabrik-monitoring-plugins.yml.j2'
       dest: '/etc/grafana/provisioning/datasources/linuxfabrik-monitoring-plugins.yml'
       owner: 'grafana'
@@ -99,6 +102,7 @@
 
   - name: 'deploy the grafana dashboard provisioning file'
     ansible.builtin.template:
+      backup: true
       src: 'etc/grafana/provisioning/dashboards/linuxfabrik-monitoring-plugins.yml.j2'
       dest: '/etc/grafana/provisioning/dashboards/linuxfabrik-monitoring-plugins.yml'
       owner: 'grafana'

roles/graylog_datanode/tasks/main.yml

@@ -22,6 +22,7 @@
 
   - name: 'Deploy /etc/graylog/datanode/datanode.conf (version: {{ graylog_datanode__installed_version[:3] }})'
     ansible.builtin.template:
+      backup: true
       src: 'etc/graylog/datanode/{{ graylog_datanode__installed_version[:3] }}-datanode.conf.j2'
       dest: '/etc/graylog/datanode/datanode.conf'
       owner: 'root'
@@ -38,6 +39,7 @@
 
   - name: 'Deploy /etc/graylog/datanode/jvm.options'
     ansible.builtin.template:
+      backup: true
       src: 'etc/graylog/datanode/jvm.options.j2'
       dest: '/etc/graylog/datanode/jvm.options'
       owner: 'root'