hosts: Migrate remaining hosts to Restic

Gitea and Vaultwarden both have SQLite databases.  We'll need to add
some logic to ensure these are in a consistent state before beginning
the backup.  Fortunately, neither of them are very busy databases, so
the likelihood of an issue is pretty low.  It's definitely more
important to get backups going again sooner, and we can deal with that
later.

group_vars/bitwarden_rs.yml

@@ -5,3 +5,6 @@ burp_backup:
 
 collectd_processes:
 - name: vaultwarden
+
+restic_include:
+- /var/lib/vaultwarden/data

group_vars/file-servers.yml

@@ -1,2 +1,7 @@
 apache_userdir: public_html
 apache_server_name: files.pyrocufflink.blue
+
+restic_include:
+- /home
+- /srv/cifs/Downloads
+- /srv/www

group_vars/gitea.yml

@@ -15,3 +15,6 @@ gitea_smtp:
   from: gitea@pyrocufflink.net
   addr: mail.pyrocufflink.blue
   port: 25
+
+restic_include:
+- /var/lib/gitea

group_vars/nextcloud.yml

@@ -20,3 +20,4 @@ restic_include:
 - /var/lib/nextcloud
 restic_exclude:
 - /var/lib/nextcloud/data/*/files_trashbin
+- /var/lib/nextcloud/.snapshots

group_vars/public-web/main.yml

@@ -1,3 +1,7 @@
+restic_include:
+- /home
+- /srv/www
+
 dchwww_publisher_keys:
 - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJsL5fSylmiJmBtW0DH/viAAmtU2E/2M17GPvysiyRs+ dustin@rosalina
 - ssh-rsa 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 jenkins-web

group_vars/pxe/restic.yml

@@ -0,0 +1,2 @@
+restic_include:
+- /var/lib/tftpboot

host_vars/gw1.pyrocufflink.blue/main.yml

@@ -5,6 +5,12 @@ burp_backup:
 - exclude: /etc/selinux
 - exclude: /etc/udev/hwdb.bin
 
+restic_include:
+- /etc
+restic_exclude:
+- /etc/selinux
+- /etc/udev/hwdb.bin
+
 nut_monitor_password: !vault |
   $ANSIBLE_VAULT;1.1;AES256
   30313966316233643038626638343734356135393436333666353539666633373764343237363764

hosts

@@ -164,7 +164,12 @@ samba-dc
 file0.pyrocufflink.blue
 
 [restic]
+bw0.pyrocufflink.blue
 cloud0.pyrocufflink.blue
+file0.pyrocufflink.blue
+git0.pyrocufflink.blue
+pxe0.pyrocufflink.blue
+web0.pyrocufflink.blue
 
 [rw-root]
 

hosts.gw

@@ -10,5 +10,8 @@ gw1.pyrocufflink.blue
 [nut-monitor]
 gw1.pyrocufflink.blue
 
+[restic]
+gw1.pyrocufflink.blue
+
 [squid]
 gw1.pyrocufflink.blue