allow access to backups through sftp in ro mode

inventories/host_vars/mastodon.pirateparty.be/main.yml

@@ -11,7 +11,8 @@ borgmatic_config:
       - "{{ mastodon_home }}/elasticsearch"
       - "{{ mastodon_home }}/redis"
   storage:
-    encryption_passphrase: "{{ borg_passphrase }}"
+    umask: "{{ borg_umask }}"
+    encryption_passphrase: "{{ vault_borg_passphrase }}"
     compression: zlib,7
   retention:
     keep_hourly: 24

inventories/host_vars/wiki.pirateparty.be/main.yml

@@ -6,7 +6,8 @@ borgmatic_config:
     repositories:
       - "{{ borg_repository }}"
   storage:
-    encryption_passphrase: "{{ borg_passphrase }}"
+    umask: "{{ borg_umask }}"
+    encryption_passphrase: "{{ vault_borg_passphrase }}"
     compression: zlib,7
   retention:
     keep_hourly: 24