fist working backup script

restic/files/backup.sh.jinja

@@ -0,0 +1,44 @@
+#!/bin/bash
+{%- if pillar.restic.repository is defined %}
+export RESTIC_REPOSITORY={{ pillar.restic.mount }}{{ pillar.restic.suffix }}
+{%- else %}
+export RESTIC_REPOSITORY="stfp:{{ pillar.restic.user }}@{{ pillar.restic.host }}:{{ pillar.restic.mount }}{{ pillar.restic.suffix }}"
+{%- endif %}
+export RESTIC_PASSWORD={{ pillar.restic.password }}
+
+restic backup \
+  --exclude="*.tmp" \
+  --exclude="lost+found" \
+  --exclude="Cache" \
+  --exclude="cache" \
+  --exclude=".cache" \
+  --exclude="tmp" \
+  --exclude="temp" \
+  --exclude="Temp" \
+  --exclude="/home/*/go" \
+  --exclude="/home/*/.local/share/virtualenv" \
+  --exclude="/home/*/.local/share/virtualenvs" \
+  --exclude="/home/*/VirtualBox VMs" \
+  --exclude="/home/*/.mozillla/firefox/*/minidumps" \
+  --exclude="/home/*/.mozillla/firefox/*/storage" \
+  --exclude="/home/*/.mozillla/firefox/*/extensions.sqlite" \
+  --exclude="/home/*/.mozillla/firefox/*/urlclassifier3.sqlite" \
+  --exclude="/home/*/.config/google-chrome/*/Local Storage" \
+  --exclude="/home/*/.config/google-chrome/*/Session Storage" \
+  --exclude="/home/*/.config/google-chrome/*/Application Cache" \
+  --exclude="/home/*/.config/google-chrome/*/History" \
+  --exclude="/home/*/.config/google-chrome/*/History-journal" \
+  --exclude="/home/*/.config/google-chrome/*/History Provider Cache" \
+  --exclude="/home/*/.local/share/flatpak" \
+  --exclude="/home/*/.var/app/com.slack.Slack" \
+  --exclude="/home/*/.local/share/Trash" \
+  --exclude="/home/*/.config/Microsoft/Microsoft Teams" \
+  --exclude="/home/*/.wine" \
+  --exclude="/home/*/.vim/bundle" \
+  --exclude="/home/*/snap" \
+  --exclude="/home/*/Downloads" \
+  --exclude="/home/*/Nextcloud" \
+  --exclude="/home/*/git" \
+  --verbose \
+  {% if pillar.podman is defined %}{{ salt['cmd.run']('podman info -f "{{.Store.VolumePath}}"', runas=pillar.podman.user ) }} \{% endif %}
+  /home

restic/files/restic.automount.jinja

@@ -2,7 +2,7 @@
 Description=Automount for restic repository
 
 [Automount]
-Where={{ pillar['restic']['repository']['mount'] }}
+Where={{ pillar['restic']['mount'] }}
 
 [Install]
 WantedBy=multi-user.target

restic/files/restic.mount.jinja

@@ -3,7 +3,7 @@ Description=Mount the USB disk used as restic repository
 
 [Mount]
 What=/dev/disk/by-uuid/{{ pillar['restic']['repository']['disk_uuid'] }}
-Where={{ pillar['restic']['repository']['mount'] }}
+Where={{ pillar['restic']['mount'] }}
 Type=auto
 Options=defaults
 

restic/init.sls

@@ -0,0 +1,19 @@
+{% if pillar.restic.repository is defined %}
+include:
+  - restic.repository
+{% endif %}
+
+Install restic packages:
+  pkg.installed:
+    - pkgs:
+      - restic
+      - restic-bash-completion
+
+Copy backup script for {{ pillar.restic.user }}:
+  file.managed:
+    - name: {{ salt['user.info'](pillar.restic.user).home }}/bin/backup.sh
+    - source: salt://restic/files/backup.sh.jinja
+    - template: jinja
+    - user: {{ pillar.restic.user }}
+    - group: root
+    - mode: "0740"

restic/repository.sls

@@ -1,4 +1,4 @@
-{% set escape_command = [ "systemd-escape -p", pillar['restic']['repository']['mount']]|join(" ") %}
+{% set escape_command = [ "systemd-escape -p", pillar['restic']['mount']]|join(" ") %}
 {% set unit_name = salt['cmd.shell'](escape_command) %}
 
 Create restic repository mount unit:

top.sls

@@ -7,7 +7,7 @@ base:
 
   'poblano.rre.nu':
     - podman
-    - restic.repository
+    - restic
     - cockpit
 
   'pepper.rre.nu':