ansible_role_restic/tasks/configure.yml

---
- name: Initialize repository
  command: '{{ restic_install_path }}/restic init'
  environment:
    RESTIC_REPOSITORY: '{{ item.value.location }}'
    RESTIC_PASSWORD: '{{ item.value.password }}'
    AWS_ACCESS_KEY_ID: '{{ item.value.aws_access_key | default("") }}'
    AWS_SECRET_ACCESS_KEY: '{{
      item.value.aws_secret_access_key
      | default("")
    }}'
    AWS_DEFAULT_REGION: '{{ item.value.aws_default_region | default("") }}'
  no_log: true
  register: restic_init
  changed_when: "'created restic repository' in restic_init.stdout"
  failed_when:
    - restic_init.rc != 0
    - not 'config file already exists' in restic_init.stderr
    - not 'config already initialized' in restic_init.stderr
  loop: "{{ restic_repos|dict2items }}"
  when:
    - item.value.init is defined
    - item.value.init