README.md

@@ -70,12 +70,6 @@ Phrase de passe de chiffrement de la sauvegarde.
 
 *<span style="text-decoration: underline">Valeur par défaut:</span> aucune*
 
-### borgmatic_ssh_command
-
-Commande SSH utilisée pour la sauvegarde.
-
-*<span style="text-decoration: underline">Valeur par défaut:</span> `ssh -i /etc/borgmatic/id_ed25519`*
-
 ## Exemples
 
 ### host_vars/host1.ykn.local

defaults/main.yml

@@ -23,4 +23,3 @@ borgmatic_retention:
 borgmatic_name: "{{ inventory_hostname }}_{now}"
 borgmatic_compression: none
 borgmatic_passphrase: ""
-borgmatic_ssh_command: ssh -i /etc/borgmatic/id_ed25519

handlers/main.yml

@@ -3,7 +3,7 @@
 
 - name: Créer le dépôt
   ansible.builtin.command:
-    cmd: borgmatic init --encryption repokey
+    cmd: borgmatic init --encryption repokey-blake2
   become: true
 
 - name: Activer la planification

tasks/configuration.yml

@@ -19,6 +19,19 @@
     mode: u=rw,g=r,o=r
   become: true
 
+- name: Déployer la configuration de SSH
+  ansible.builtin.blockinfile:
+    path: /root/.ssh/config
+    create: true
+    marker: "# {mark} ANSIBLE MANAGED BLOCK for role_borgmatic"
+    block: |
+      {% for repository in borgmatic_repositories %}
+      Host {{ repository | ansible.builtin.urlsplit('hostname') }}
+        IdentityFile /etc/borgmatic/id_ed25519
+        IdentitiesOnly yes
+      {% endfor %}
+  become: true
+
 - name: Déployer la configuration
   ansible.builtin.template:
     src: config.yaml.j2

templates/config.yaml.j2

@@ -22,4 +22,3 @@ storage:
   archive_name_format: {{ borgmatic_name }}
   compression: {{ borgmatic_compression }}
   encryption_passphrase: {{ borgmatic_passphrase }}
-  ssh_command: {{ borgmatic_ssh_command }}