initial commit

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

roles/restic/tasks/backend.yml

@@ -0,0 +1,19 @@
+---
+- name: Ensure restic local repo directory exists
+  file:
+    path: "{{ restic_repo }}"
+    state: directory
+    owner: root
+    group: root
+    mode: "0700"
+  when: restic_repo is defined and restic_repo.startswith('/')  # only local path
+
+- name: Ensure restic repo is initialized
+  ansible.builtin.shell: |
+    set -euo pipefail
+    source /etc/restic/restic.env
+    restic snapshots > /dev/null 2>&1 || restic init
+    touch /etc/restic/.initialized
+  args:
+    creates: /etc/restic/.initialized
+