bk node and refactor

config/services/systemd/common/kopia/kopia-backup.service.j2

@@ -28,8 +28,10 @@ BindPaths=/etc/secrets/{{ kopia_uid }}
 BindPaths=/var/cache/kopia
 EnvironmentFile=/etc/secrets/{{ kopia_uid }}/kopia.env
 
+ExecStartPre=/usr/bin/nc -zv {{ services['kopia']['domain']['internal'] }}.{{ domain['internal'] }} 443
+
 ExecStartPre=/usr/bin/kopia repository connect server \
-    --url=https://{{ services['kopia']['domain'] }}.{{ domain['internal'] }}:{{ services['kopia']['ports']['https'] }} \
+    --url=https://{{ services['kopia']['domain']['internal'] }}.{{ domain['internal'] }}:443 \
     --override-username={{ node['name'] }} \
     --override-hostname={{ node['name'] }}.{{ domain['internal'] }}
 

config/services/systemd/common/kopia/kopia-server.service.j2

@@ -0,0 +1,24 @@
+[Unit]
+Description=Kopia repository server
+Wants=network-online.target
+After=network-online.target
+
+[Service]
+# logging
+StandardOutput=journal
+StandardError=journal
+
+EnvironmentFile=/etc/secrets/{{ node['uid'] }}/kopia.env
+
+ExecStartPre=/usr/bin/kopia repository connect filesystem \
+    --path={{ node['home_path'] }}/data/kopia/repository
+
+ExecStart=/usr/bin/kopia server start \
+    --no-ui \
+    --tls-cert-file=/etc/kopia/ssl/kopia.crt \
+    --tls-key-file=/etc/kopia/ssl/kopia.key \
+    --address=0.0.0.0:{{ services['kopia']['ports']['https'] }} \
+    --log-level=info
+
+[Install]
+WantedBy=default.target

config/services/systemd/common/kopia/kopia.env.j2

@@ -1,4 +1,8 @@
+{% if node['name'] == "bk" %}
+KOPIA_PASSWORD={{ hostvars['console']['kopia']['repository'] }}
+{% elif node['name'] in ["infra", "app"] %}
 KOPIA_PASSWORD={{ hostvars['console']['kopia']['users'][node['name']] }}
+{% endif %}
 KOPIA_CONFIG_PATH=/etc/kopia/repository.config
 KOPIA_CACHE_DIRECTORY=/var/cache/kopia
 KOPIA_LOG_DIR=/var/cache/kopia/logs