class backup::params {
  # backup folder
  $backupdir        = lookup('backup::dir', undef, undef,         "/var/backups")
  $backupdir_remote = lookup('backup::dir::remote', undef, undef, "$backupdir/remote")
  $backupdir_users  = lookup('backup::dir::users', undef, undef,  "$backupdir/users")
  $backupdir_ensure = lookup('backup::dir::ensure', undef, undef, 'directory')

  # for data that's going to be encrypted and signed
  $include_unencrypted = [ "/etc", "/var", "/home", "/root" ]
  $exclude_unencrypted = [ "$backupdir_remote", "$backupdir/duplicity", "$backupdir/borg", "$backupdir/restore", "/var/cache", "/var/log", "/var/vservers", "/var/chroot", "/root/.cache", "/var/lib/dpkg", "/var/lib/apt", "/var/lib/aptitude/", "/var/sites/backups", "/var/data/crypt", "/var/data/backups", "/var/data/cache", "/var/lib/lxcfs" ]

  # for data that were previously encrypted and signed
  $include_encrypted = [ "$backupdir/duplicity", ]
  $exclude_encrypted = [ "$backupdir/duplicity/.ssh", ]

  # ensure the latest backup version
  $backupninja_ensure_version = 'latest'
}