add daily ldap database dumps to ldap master

roles/ldap/server/tasks/main.yml

@@ -28,6 +28,38 @@
     follow: false
   when: ldap_datadir != "/srv/ldap"
 
+- block:
+  - name: create backup directory
+    file:
+      path: /export/backup
+      state: directory
+      mode: 0750
+      owner: ldap
+      group: ldap
+  - name: link backup directory
+    file:
+      path: /srv/backup
+      src: /export/backup
+      state: link
+      owner: root
+      group: "{{ ansible_wheel }}"
+      follow: false
+  - name: copy backup script
+    copy:
+      dest: /usr/local/sbin/ldap-backup
+      src: ldap-backup.sh
+      mode: 0755
+      owner: root
+      group: "{{ ansible_wheel }}"
+  - name: create backup cron job
+    cron:
+      name: ldap-backup
+      job: /usr/local/sbin/ldap-backup
+      hour: 0
+      minute: 10
+      user: ldap
+  when: ldap_master is defined
+
 - name: remove nss cert databases
   file:
     path: "/etc/openldap/certs/{{ item }}"