inventory, roles: update group_vars/all.yaml and set service files to centralize subuid for containers

ansible/roles/app/tasks/services/set_actual-budget.yaml

@@ -1,13 +1,9 @@
 ---
-- name: Set actual budget container subuid
-  ansible.builtin.set_fact:
-    actualbudget_subuid: "101000"
-
 - name: Create actual budget directory
   ansible.builtin.file:
     path: "{{ node['home_path'] }}/data/containers/actual-budget"
     state: "directory"
-    owner: "{{ actualbudget_subuid }}"
+    owner: "{{ services['actualbudget']['subuid'] }}"
     group: "svadmins"
     mode: "0770"
   become: true

ansible/roles/app/tasks/services/set_gitea.yaml

@@ -1,13 +1,9 @@
 ---
-- name: Set gitea container subuid
-  ansible.builtin.set_fact:
-    gitea_subuid: "100999"
-
 - name: Create gitea directory
   ansible.builtin.file:
     path: "{{ node['home_path'] }}/{{ item }}"
     state: "directory"
-    owner: "{{ gitea_subuid }}"
+    owner: "{{ services['gitea']['subuid'] }}"
     group: "svadmins"
     mode: "0770"
   loop:
@@ -21,7 +17,7 @@
     content: |
       {{ hostvars['console']['ca']['root']['crt'] }}
     dest: "{{ node['home_path'] }}/containers/gitea/ssl/{{ root_cert_filename }}"
-    owner: "{{ gitea_subuid }}"
+    owner: "{{ services['gitea']['subuid'] }}"
     group: "svadmins"
     mode: "0440"
   become: true

ansible/roles/app/tasks/services/set_immich.yaml

@@ -2,13 +2,12 @@
 - name: Set redis service name
   ansible.builtin.set_fact:
     redis_service: "immich"
-    redis_subuid: "100998"
 
 - name: Create redis_immich directory
   ansible.builtin.file:
     path: "{{ node['home_path'] }}/{{ item }}"
     state: "directory"
-    owner: "{{ redis_subuid }}"
+    owner: "{{ services['redis']['subuid'] }}"
     group: "svadmins"
     mode: "0770"
   loop:

ansible/roles/app/tasks/services/set_paperless.yaml

@@ -2,13 +2,12 @@
 - name: Set redis service name
   ansible.builtin.set_fact:
     redis_service: "paperless"
-    redis_subuid: "100998"
 
 - name: Create redis_paperless directory
   ansible.builtin.file:
     path: "{{ node['home_path'] }}/{{ item }}"
     state: "directory"
-    owner: "{{ redis_subuid }}"
+    owner: "{{ services['redis']['subuid'] }}"
     group: "svadmins"
     mode: "0770"
   loop:
@@ -44,15 +43,11 @@
     scope: "user"
   when: is_redis_conf.changed or is_redis_containerfile.changed # noqa: no-handler
 
-- name: Set paperless subuid
-  ansible.builtin.set_fact:
-    paperless_subuid: "100999"
-
 - name: Create paperless directory
   ansible.builtin.file:
     path: "{{ node['home_path'] }}/{{ item }}"
     state: "directory"
-    owner: "{{ paperless_subuid }}"
+    owner: "{{ services['paperless']['subuid'] }}"
     group: "svadmins"
     mode: "0770"
   loop:
@@ -70,7 +65,7 @@
     content: |
       {{ hostvars['console']['ca']['root']['crt'] }}
     dest: "{{ node['home_path'] }}/containers/paperless/ssl/{{ root_cert_filename }}"
-    owner: "{{ paperless_subuid }}"
+    owner: "{{ services['paperless']['subuid'] }}"
     group: "svadmins"
     mode: "0440"
   become: true

ansible/roles/app/tasks/services/set_vikunja.yaml

@@ -1,13 +1,9 @@
 ---
-- name: Set vikunja subuid
-  ansible.builtin.set_fact:
-    vikunja_subuid: "100999"
-
 - name: Create vikunja directory
   ansible.builtin.file:
     path: "{{ node['home_path'] }}/{{ item }}"
     state: "directory"
-    owner: "{{ vikunja_subuid }}"
+    owner: "{{ services['vikunja']['subuid'] }}"
     group: "svadmins"
     mode: "0770"
   loop:
@@ -21,7 +17,7 @@
     content: |
       {{ hostvars['console']['ca']['root']['crt'] }}
     dest: "{{ node['home_path'] }}/containers/vikunja/ssl/{{ root_cert_filename }}"
-    owner: "{{ vikunja_subuid }}"
+    owner: "{{ services['vikunja']['subuid'] }}"
     group: "svadmins"
     mode: "0440"
   become: true