---
# Restic backup setup — installs restic and deploys the backup script
- name: Install restic
  apt:
    name: restic
    state: present

- name: Create secrets directory
  file:
    path: /srv/secrets
    state: directory
    mode: "0700"

- name: Deploy backup script
  template:
    src: backup.sh.j2
    dest: /usr/local/bin/backup.sh
    mode: "0700"

- name: Setup daily backup cron (3 AM)
  cron:
    name: "restic daily backup"
    hour: "3"
    minute: "0"
    job: "/usr/local/bin/backup.sh >> /var/log/backup.log 2>&1"