Backups: move secrets to config file

Allow run backup script with sudo

files/backups/backup-all.py

@@ -13,6 +13,7 @@ import pwd
 from pathlib import Path
 from typing import List, Tuple, Optional
 import requests
+import configparser
 
 # Configure logging
 logging.basicConfig(
@@ -25,15 +26,17 @@ logging.basicConfig(
 )
 logger = logging.getLogger(__name__)
 
-# Configuration from Ansible template variables
-RESTIC_REPOSITORY = "{{ restic_repository }}"
-RESTIC_PASSWORD = "{{ restic_password }}"
-AWS_ACCESS_KEY_ID = "{{ restic_s3_access_key }}"
-AWS_SECRET_ACCESS_KEY = "{{ restic_s3_access_secret }}"
-AWS_DEFAULT_REGION = "{{ restic_s3_region }}"
-TELEGRAM_BOT_TOKEN = "{{ notifications_tg_bot_token }}"
-TELEGRAM_CHAT_ID = "{{ notifications_tg_chat_id }}"
-NOTIFICATIONS_NAME = "{{ notifications_name }}"
+config = configparser.ConfigParser()
+config.read("/etc/backup/config.ini")
+
+RESTIC_REPOSITORY = config.get("restic", "RESTIC_REPOSITORY")
+RESTIC_PASSWORD = config.get("restic", "RESTIC_PASSWORD")
+AWS_ACCESS_KEY_ID = config.get("restic", "AWS_ACCESS_KEY_ID")
+AWS_SECRET_ACCESS_KEY = config.get("restic", "AWS_SECRET_ACCESS_KEY")
+AWS_DEFAULT_REGION = config.get("restic", "AWS_DEFAULT_REGION")
+TELEGRAM_BOT_TOKEN = config.get("telegram", "TELEGRAM_BOT_TOKEN")
+TELEGRAM_CHAT_ID = config.get("telegram", "TELEGRAM_CHAT_ID")
+NOTIFICATIONS_NAME = config.get("telegram", "NOTIFICATIONS_NAME")
 
 
 class BackupManager:
@@ -137,6 +140,7 @@ class BackupManager:
 
         try:
             logger.info("Starting restic backup")
+            logger.info("Destination: %s", RESTIC_REPOSITORY)
 
             # Set environment variables for restic
             env = os.environ.copy()

files/backups/config.template.ini

@@ -0,0 +1,11 @@
+[restic]
+RESTIC_REPOSITORY={{ restic_repository }}
+RESTIC_PASSWORD={{ restic_password }}
+AWS_ACCESS_KEY_ID={{ restic_s3_access_key }}
+AWS_SECRET_ACCESS_KEY={{ restic_s3_access_secret }}
+AWS_DEFAULT_REGION={{ restic_s3_region }}
+
+[telegram]
+TELEGRAM_BOT_TOKEN={{ notifications_tg_bot_token }}
+TELEGRAM_CHAT_ID={{ notifications_tg_chat_id }}
+NOTIFICATIONS_NAME={{ notifications_name }}