From e32c6c21b9cdcfaeea008c2682ee6ea4d78cbc1e Mon Sep 17 00:00:00 2001
From: Mark O'Brien <markobri@redhat.com>
Date: Mar 23 2021 18:06:38 +0000
Subject: create daily data only backups of ipa


---

diff --git a/inventory/group_vars/ipa b/inventory/group_vars/ipa
index 628a5c9..25cc4fb 100644
--- a/inventory/group_vars/ipa
+++ b/inventory/group_vars/ipa
@@ -25,3 +25,5 @@ nrpe_procs_crit: 500
 ipa_initial: false
 ipa_dm_password: "{{ ipa_prod_dm_password }}"
 ipa_ldap_socket: ldapi://%2fvar%2frun%2fslapd-FEDORAPROJECT-ORG.socket
+
+host_backup_targets: ['/var/lib/ipa/backup']
diff --git a/roles/ipa/server/files/data-only-backup b/roles/ipa/server/files/data-only-backup
new file mode 100644
index 0000000..f652eaa
--- /dev/null
+++ b/roles/ipa/server/files/data-only-backup
@@ -0,0 +1,2 @@
+# Run data only backups daily
+0 20 * * * root /usr/sbin/ipa-backup --data --online
diff --git a/roles/ipa/server/tasks/main.yml b/roles/ipa/server/tasks/main.yml
index 826bb3f..b64508b 100644
--- a/roles/ipa/server/tasks/main.yml
+++ b/roles/ipa/server/tasks/main.yml
@@ -623,3 +623,10 @@
   tags:
   - ipa/server
   - config
+
+
+- name: Set cron for daily data only backups
+  copy:
+    src: data-only-backup
+    dest: "/etc/cron.d/data-only-backup"
+