feat: backup and restore

ansible/roles/deploy/tasks/main.yml

@@ -3,6 +3,10 @@
 # used to be generated by OpenTofu (services/<host>/.env and, for dev,
 # Runners/docker-compose.yml) - replaces the null_resource.deploy_services +
 # local_file provisioners previously in infra/modules/<host>/main.tf.
+#
+# Persistent data lives in named Docker volumes now, not on a Hetzner volume -
+# see services/<host>/backup-docker-compose.yml. .env only carries the S3
+# credentials that backup/restore need, rendered for every host.
 
 - name: Ensure services directory exists on the host
   ansible.builtin.file:
@@ -16,28 +20,11 @@
     dest: "/home/{{ deploy_user }}/services/{{ service_group }}/"
     mode: preserve
 
-- name: Look up this host's data volume
-  when: service_group in ['dev', 'prod']
-  delegate_to: localhost
-  become: false
-  hetzner.hcloud.hcloud_volume_info:
-    api_token: "{{ hcloud_token }}"
-    name: "{{ service_group }}-storage"
-  register: _volume_info
-
-# Hetzner's automount tooling always mounts an auto-mounted volume at
-# /mnt/HC_Volume_<volume-id> - deterministic once the volume exists.
-- name: Compute DATA_DIR from the volume's id
-  when: service_group in ['dev', 'prod']
-  ansible.builtin.set_fact:
-    data_dir: "/mnt/HC_Volume_{{ _volume_info.hcloud_volume_info[0].id }}"
-
-- name: Render DATA_DIR into .env (auto-loaded by docker compose)
-  when: service_group in ['dev', 'prod']
+- name: Render S3 backup credentials into .env (auto-loaded by docker compose)
   ansible.builtin.template:
     src: env.j2
     dest: "/home/{{ deploy_user }}/services/{{ service_group }}/.env"
-    mode: "0644"
+    mode: "0600"
 
 - name: Render Gitea Actions runner compose file
   when: service_group == 'dev'
@@ -46,10 +33,11 @@
     dest: "/home/{{ deploy_user }}/services/dev/Runners/docker-compose.yml"
     mode: "0644"
 
-- name: Make spinup/spindown scripts executable
+- name: Make spinup/spindown/restore scripts executable
   ansible.builtin.file:
     path: "/home/{{ deploy_user }}/services/{{ service_group }}/{{ item }}"
     mode: "0755"
   loop:
     - spinup.sh
     - spindown.sh
+    - restore.sh