Feature add nginx endpoint that allows downloading encrypted postgres backups

sheetstorm-deployment/configure-sheetstorm-server.yml

@@ -4,6 +4,7 @@
     - consts.yml
     - versions.yml
     - ../../sheetstorm-config/var.yml
+    - ../../sheetstorm-secret/var.yml
   vars:
     server_configuration: remote
   roles:
@@ -48,5 +49,11 @@
             user:   root
             job:    /usr/bin/certbot renew --quiet
 
+        - name: Add secret file that contain credentials to nginx endpoint with postgresql backups
+          copy:
+            src:  "{{ sheetstorm_secret_dir}}/htpasswd"
+            dest: "/etc/nginx/htpasswd"
+            mode: 0644
+
         - include_role:
             name: configure_nginx

sheetstorm-deployment/consts.yml

@@ -9,3 +9,4 @@ static_file_dir:                "{{ sheetstorm_dir }}/sheetstorm/static/"
 django_fixtures_dir:            "{{ sheetstorm_dir }}/sheetstorm/fixtures"
 sheetstorm_virtualenv_dir:      "{{ home_dir }}/virtualenv"
 postgres_backup_public_key_dir: "{{ home_dir }}/.key"
+postgres_backup_dir:            "{{ home_dir }}/postgresql_backup"

sheetstorm-deployment/roles/configure_nginx/templates/sheetstorm-local.j2

@@ -25,6 +25,14 @@ server {
 
     }
 
+    location /postgres-backup/ {
+        allow 172.30.2.1;
+        deny all;
+
+        limit_except GET { deny all; }
+        alias        {{ postgres_backup_dir }}/;
+    }
+
     location /static/ {
         alias {{ static_file_dir }};
     }

sheetstorm-deployment/roles/configure_nginx/templates/sheetstorm-remote.j2

@@ -22,6 +22,17 @@ server {
         proxy_pass                            $sheetstorm_backend;
 
     }
+
+    location /postgres-backup/ {
+        allow                {{ allow_ip_to_postgres_backup_endpoint }};
+        deny                 all;
+        auth_basic           "closed site";
+        auth_basic_user_file htpasswd;
+
+        limit_except GET { deny all; }
+        alias        {{ postgres_backup_dir }}/;
+    }
+
     location /static/ {
         alias {{ static_file_dir }};
     }

sheetstorm-deployment/roles/postgres_backup/templates/pg_backup.sh.j2

@@ -1,7 +1,7 @@
 #!/bin/bash -e
 
 database_name="$1"
-POSTGRESQL_BACKUP_DIR=~/postgresql_backup
+POSTGRESQL_BACKUP_DIR={{ postgres_backup_dir }}
 DATE=$(date +"%Y-%m-%d-%H:%M")
 SHEETSTORM_VERSION="$(cd {{ sheetstorm_dir}}/; git describe --always --abbrev=16)"