infra/roles/cloud-backups/templates/rclone.conf.j2

[b2-unencrypted]
type = b2
account = {{ b2_account_key }}
key = {{ b2_key_id }}
hard_delete = true

[wasabi-unencrypted]
type = s3
provider = Wasabi
env_auth = false
access_key_id = {{ wasabi_access_key }}
secret_access_key = {{ wasabi_secret_access_key }}
endpoint = s3.us-west-1.wasabisys.com

{% if backups == 'all' or 'full_images' in backups %}
[b2-backups]
type = crypt
remote = b2-unencrypted:{{ b2_backups_bucket }}
filename_encryption = standard
password = {{ b2_backups_config_encryption_password }}
password2 = {{ b2_backups_config_encryption_salt }}

[wasabi-backups]
type = crypt
remote = wasabi-unencrypted:{{ wasabi_backups_bucket }}
filename_encryption = standard
password = {{ b2_backups_config_encryption_password }}
password2 = {{ b2_backups_config_encryption_salt }}

{% endif %}
{% if backups == 'all' or 'nasdata' in backups %}
[b2-data]
type = crypt
remote = b2-unencrypted:{{ b2_data_bucket }}
filename_encryption = standard
directory_name_encryption = true
password = {{ b2_data_config_encryption_password }}
password2 = {{ b2_data_config_encryption_salt }}

[b2-music]
type = crypt
remote = b2-unencrypted:{{ b2_music_bucket }}
filename_encryption = standard
directory_name_encryption = true
password = {{ b2_music_config_encryption_password }}
password2 = {{ b2_music_config_encryption_salt }}

[b2-photos]
type = crypt
remote = b2-unencrypted:{{ b2_photos_bucket }}
filename_encryption = standard
directory_name_encryption = true
password = {{ b2_photos_config_encryption_password }}
password2 = {{ b2_photos_config_encryption_salt }}

{% endif %}
{% if backups == 'all' or 'containers' in backups %}
[b2-container-data]
type=crypt
remote = b2-unencrypted:{{ b2_container_data_bucket }}
filename_encryption = standard
directory_name_encryption = true
password = {{ b2_container_data_encryption_password }}
password2 = {{ b2_container_data_encryption_salt }}
{% endif %}