feat(papra, romm): add feature

ansible/roles/app/tasks/services/set_booklogr.yaml

@@ -0,0 +1,112 @@
+---
+- name: Create booklogr directory
+  ansible.builtin.file:
+    path: "{{ node['home_path'] }}/{{ item }}"
+    state: "directory"
+    owner: "{{ ansible_user }}"
+    group: "{{ node['group'] }}"
+    mode: "0770"
+  loop:
+    - "data/containers/booklogr"
+    - "data/containers/booklogr/profile_pictures"
+    - "data/containers/booklogr/export_data"
+    - "containers/booklogr"
+    - "containers/booklogr/ssl"
+  become: true
+
+
+- name: Deploy root certificate
+  ansible.builtin.copy:
+    content: |
+      {{ hostvars['console']['ca']['root']['crt'] }}
+    dest: "{{ node['home_path'] }}/containers/booklogr/ssl/{{ root_cert_filename }}"
+    owner: "{{ ansible_user }}"
+    group: "{{ node['group'] }}"
+    mode: "0440"
+  become: true
+  notify: "notification_restart_booklogr"
+  no_log: true
+
+- name: Register secret value to podman secret
+  containers.podman.podman_secret:
+    name: "{{ item.name }}"
+    data: "{{ item.value }}"
+    state: "present"
+    force: true
+  loop:
+    - name: "BOOKLOGR_AUTH_SECRET_KEY"
+      value: "{{ hostvars['console']['booklogr']['secret_key'] }}"
+    - name: "BOOKLOGR_POSTGRES_PASSWORD"
+      value: "{{ hostvars['console']['postgresql']['password']['booklogr'] }}"
+    - name: "BOOKLOGR_OIDC_CLIENT_SECRET"
+      value: "{{ hostvars['console']['booklogr']['oidc']['secret'] }}"
+  notify: "notification_restart_booklogr"
+  no_log: true
+
+- name: Pull image
+  containers.podman.podman_image:
+    name: "{{ item }}"
+    tag: "{{ version['containers']['booklogr'] }}"
+    state: "present"
+    pull: true
+  loop:
+    - "docker.io/mozzo/booklogr"
+    - "docker.io/mozzo/booklogr-web"
+
+- name: Deploy booklogr.container file
+  ansible.builtin.template:
+    src: "{{ hostvars['console']['node']['config_path'] }}/services/containers/app/booklogr/{{ item }}.j2"
+    dest: "{{ node['home_path'] }}/.config/containers/systemd/{{ item }}"
+    owner: "{{ ansible_user }}"
+    group: "{{ node['group'] }}"
+    mode: "0644"
+  loop:
+    - "booklogr-api.container"
+    - "booklogr-web.container"
+  notify: "notification_restart_booklogr"
+
+- name: Enable booklogr.service
+  ansible.builtin.systemd:
+    name: "{{ item }}"
+    state: "started"
+    enabled: true
+    daemon_reload: true
+    scope: "user"
+  loop:
+    - "booklogr-api.service"
+    - "booklogr-web.service"
+
+- name: Check container archive images
+  ansible.builtin.stat:
+    path: "{{ node['home_path'] }}/archives/containers/{{ item.file }}.tar"
+  loop:
+    - name: "booklogr"
+      image: "docker.io/mozzo/booklogr:{{ version['containers']['booklogr'] }}"
+      file: "docker.io_mozzo_booklogr_{{ version['containers']['booklogr'] }}"
+    - name: "booklogr-web"
+      image: "docker.io/mozzo/booklogr-web:{{ version['containers']['booklogr'] }}"
+      file: "docker.io_mozzo_booklogr-web_{{ version['containers']['booklogr'] }}"
+  loop_control:
+    label: "{{ item.name }}"
+  register: container_archive_images
+
+- name: Save container archive images
+  containers.podman.podman_save:
+    image:
+      - "{{ item.item.image }}"
+    dest: "{{ node['home_path'] }}/archives/containers/{{ item.item.file }}.tar"
+    format: "oci-archive"
+    force: false
+  loop: "{{ container_archive_images.results }}"
+  loop_control:
+    label: "{{ item.item.file }}"
+  when: not item.stat.exists
+
+- name: Fetch container archive images
+  ansible.builtin.fetch:
+    src: "{{ node['home_path'] }}/archives/containers/{{ item.item.file }}.tar"
+    dest: "{{ hostvars['console']['node']['data_path'] }}/images/containers/"
+    flat: true
+  loop: "{{ container_archive_images.results }}"
+  loop_control:
+    label: "{{ item.item.file }}"

ansible/roles/app/tasks/services/set_nextcloud.yaml

@@ -157,7 +157,7 @@
 
 - name: Deploy nextcloud-cron service
   ansible.builtin.copy:
-    src: "{{ hostvars['console']['node']['config_path'] }}/services/containers/app/nextcloud/systemd/{{ item }}"
+    src: "{{ hostvars['console']['node']['config_path'] }}/services/containers/app/nextcloud/services/{{ item }}"
     dest: "{{ node['home_path'] }}/.config/systemd/user/{{ item }}"
     owner: "{{ ansible_user }}"
     group: "{{ node['group'] }}"

ansible/roles/app/tasks/services/set_papra.yaml

@@ -0,0 +1,111 @@
+---
+- name: Create papra directory
+  ansible.builtin.file:
+    path: "{{ node['home_path'] }}/{{ item }}"
+    state: "directory"
+    owner: "{{ services['papra']['subuid'] }}"
+    group: "{{ node['group'] }}"
+    mode: "0770"
+  loop:
+    - "data/containers/papra"
+    - "data/containers/papra/data"
+    - "data/containers/papra/backup"
+  become: true
+
+- name: Pull image
+  containers.podman.podman_image:
+    name: "ghcr.io/papra-hq/papra"
+    tag: "{{ version['containers']['papra'] }}"
+    state: "present"
+    pull: true
+
+- name: Register secret value to podman secret
+  containers.podman.podman_secret:
+    name: "{{ item.name }}"
+    data: "{{ item.value }}"
+    state: "present"
+    force: true
+  loop:
+    - name: "PAPRA_AUTH_SECRET"
+      value: "{{ hostvars['console']['papra']['secret_key'] }}"
+    - name: "PAPRA_AUTH_PROVIDERS_CUSTOMS"
+      value: |
+        [
+          {
+            "providerId": "authelia",
+            "providerName": "Authelia",
+            "providerIconUrl": "https://www.authelia.com/images/branding/logo-cropped.png",
+            "clientId": "papra",
+            "clientSecret": "{{ hostvars['console']['papra']['oidc']['secret'] }}",
+            "type": "oidc",
+            "discoveryUrl": "https://{{ services['authelia']['domain']['public'] }}.{{ domain['public'] }}/.well-known/openid-configuration",
+            "scopes": ["openid", "profile", "email"]
+          }
+        ]
+  notify: "notification_restart_papra"
+  no_log: true
+
+- name: Deploy papra.container file
+  ansible.builtin.template:
+    src: "{{ hostvars['console']['node']['config_path'] }}/services/containers/app/papra/papra.container.j2"
+    dest: "{{ node['home_path'] }}/.config/containers/systemd/papra.container"
+    owner: "{{ ansible_user }}"
+    group: "{{ node['group'] }}"
+    mode: "0644"
+  become: true
+  notify: "notification_restart_papra"
+
+- name: Deploy papra-backup service
+  ansible.builtin.copy:
+    src: "{{ hostvars['console']['node']['config_path'] }}/services/containers/app/papra/services/{{ item }}"
+    dest: "{{ node['home_path'] }}/.config/systemd/user/{{ item }}"
+    owner: "{{ ansible_user }}"
+    group: "{{ node['group'] }}"
+    mode: "0644"
+  loop:
+    - "papra-backup.service"
+    - "papra-backup.timer"
+
+- name: Deploy papra exporter
+  ansible.builtin.copy:
+    src: "{{ hostvars['console']['node']['config_path'] }}/services/containers/app/papra/script/papra-exporter.sh"
+    dest: "{{ node['home_path'] }}/data/containers/papra/"
+    owner: "{{ ansible_user }}"
+    group: "{{ node['group'] }}"
+    mode: "0755"
+
+- name: Enable papra.service
+  ansible.builtin.systemd:
+    name: "papra.service"
+    state: "started"
+    enabled: true
+    daemon_reload: true
+    scope: "user"
+
+- name: Enable papra-backup.timer
+  ansible.builtin.systemd:
+    name: "papra-backup.timer"
+    state: "started"
+    enabled: true
+    daemon_reload: true
+    scope: "user"
+
+- name: Check container archive images
+  ansible.builtin.stat:
+    path: "{{ node['home_path'] }}/archives/containers/ghcr.io_papra-hq_papra_{{ version['containers']['papra'] }}.tar"
+  register: container_archive_images
+
+- name: Save container archive images
+  containers.podman.podman_save:
+    image:
+      - "ghcr.io/papra-hq/papra:{{ version['containers']['papra'] }}"
+    dest: "{{ node['home_path'] }}/archives/containers/ghcr.io_papra-hq_papra_{{ version['containers']['papra'] }}.tar"
+    format: "oci-archive"
+    force: false
+  when: not container_archive_images.stat.exists
+
+- name: Fetch container archive images
+  ansible.builtin.fetch:
+    src: "{{ node['home_path'] }}/archives/containers/ghcr.io_papra-hq_papra_{{ version['containers']['papra'] }}.tar"
+    dest: "{{ hostvars['console']['node']['data_path'] }}/images/containers/"
+    flat: true

ansible/roles/app/tasks/services/set_romm.yaml

@@ -1,9 +1,9 @@
 ---
 - name: Set redis service name
   ansible.builtin.set_fact:
-    redis_service: "paperless"
+    redis_service: "romm"
 
-- name: Create redis_paperless directory
+- name: Create redis_romm directory
   ansible.builtin.file:
     path: "{{ node['home_path'] }}/{{ item }}"
     state: "directory"
@@ -43,58 +43,33 @@
     scope: "user"
   when: is_redis_conf.changed or is_redis_containerfile.changed # noqa: no-handler
 
-- name: Create paperless directory
+- name: Create romm directory
   ansible.builtin.file:
     path: "{{ node['home_path'] }}/{{ item }}"
     state: "directory"
-    owner: "{{ services['paperless']['subuid'] }}"
+    owner: "{{ services['romm']['subuid'] }}"
     group: "{{ node['group'] }}"
     mode: "0770"
   loop:
-    - "data/containers/paperless"
-    - "data/containers/paperless/data"
-    - "data/containers/paperless/media"
-    - "data/containers/paperless/consume"
-    - "containers/paperless"
-    - "containers/paperless/ssl"
-    - "containers/paperless/build"
+    - "data/containers/romm"
+    - "data/containers/romm/library"
+    - "data/containers/romm/resources"
+    - "data/containers/romm/assets"
+    - "containers/romm"
+    - "containers/romm/ssl"
   become: true
 
-- name: Deploy containerfile for build
-  ansible.builtin.template:
-    src: "{{ hostvars['console']['node']['config_path'] }}/services/containers/app/paperless/build/paperless.containerfile.j2"
-    dest: "{{ node['home_path'] }}/containers/paperless/build/Containerfile"
-    owner: "{{ ansible_user }}"
-    group: "{{ node['group'] }}"
-    mode: "0640"
-  register: "is_paperless_containerfile"
-  notify: "notification_restart_paperless"
-
 - name: Deploy root certificate
   ansible.builtin.copy:
     content: |
       {{ hostvars['console']['ca']['root']['crt'] }}
-    dest: "{{ node['home_path'] }}/containers/paperless/ssl/{{ root_cert_filename }}"
-    owner: "{{ services['paperless']['subuid'] }}"
+    dest: "{{ node['home_path'] }}/containers/romm/ssl/{{ root_cert_filename }}"
+    owner: "{{ ansible_user }}"
     group: "{{ node['group'] }}"
     mode: "0440"
-  become: true
-  notify: "notification_restart_paperless"
+  notify: "notification_restart_romm"
   no_log: true
 
-- name: Build paperless container image
-  containers.podman.podman_image:
-    name: "{{ domain['internal'] }}/{{ node['name'] }}/paperless-ngx"
-    # check tags from container file
-    tag: "{{ version['containers']['paperless'] }}"
-    state: "build"
-    path: "{{ node['home_path'] }}/containers/paperless/build"
-    force: "{{ is_paperless_containerfile.changed }}"
-
-- name: Prune paperless dangling images
-  containers.podman.podman_prune:
-    image: true
-
 - name: Register secret value to podman secret
   containers.podman.podman_secret:
     name: "{{ item.name }}"
@@ -102,45 +77,34 @@
     state: "present"
     force: true
   loop:
-    - name: "PAPERLESS_SECRET_KEY"
-      value: "{{ hostvars['console']['paperless']['session_secret'] }}"
-    - name: "PAPERLESS_DBPASS"
-      value: "{{ hostvars['console']['postgresql']['password']['paperless'] }}"
-    - name: "PAPERLESS_SOCIALACCOUNT_PROVIDERS"
-      value: |-
-        {
-          "openid_connect": {
-            "SCOPE": ["openid", "profile", "email"],
-            "OAUTH_PKCE_ENABLED": true,
-            "APPS": [
-              {
-                "provider_id": "authelia",
-                "name": "Authelia",
-                "client_id": "paperless",
-                "secret": "{{ hostvars['console']['paperless']['oidc']['secret'] }}",
-                "settings": {
-                  "server_url": "https://{{ services['authelia']['domain']['public'] }}.{{ domain['public'] }}/.well-known/openid-configuration",
-                  "token_auth_method": "client_secret_post"
-                }
-              }
-            ]
-          }
-        }
-  notify: "notification_restart_paperless"
+    - name: "ROMM_AUTH_SECRET_KEY"
+      value: "{{ hostvars['console']['romm']['secret_key'] }}"
+    - name: "ROMM_DATABASE_PASSWORD"
+      value: "{{ hostvars['console']['postgresql']['password']['romm'] }}"
+    - name: "ROMM_OIDC_CLIENT_SECRET"
+      value: "{{ hostvars['console']['romm']['oidc']['secret'] }}"
+  notify: "notification_restart_romm"
   no_log: true
 
-- name: Deploy paperless.container file
+- name: Pull image
+  containers.podman.podman_image:
+    name: "docker.io/rommapp/romm"
+    tag: "{{ version['containers']['romm'] }}"
+    state: "present"
+    pull: true
+
+- name: Deploy romm.container file
   ansible.builtin.template:
-    src: "{{ hostvars['console']['node']['config_path'] }}/services/containers/app/paperless/paperless.container.j2"
-    dest: "{{ node['home_path'] }}/.config/containers/systemd/paperless.container"
+    src: "{{ hostvars['console']['node']['config_path'] }}/services/containers/app/romm/romm.container.j2"
+    dest: "{{ node['home_path'] }}/.config/containers/systemd/romm.container"
     owner: "{{ ansible_user }}"
     group: "{{ node['group'] }}"
     mode: "0644"
-  notify: "notification_restart_paperless"
+  notify: "notification_restart_romm"
 
-- name: Enable paperless.service
+- name: Enable romm.service
   ansible.builtin.systemd:
-    name: "paperless.service"
+    name: "romm.service"
     state: "started"
     enabled: true
     daemon_reload: true
@@ -153,9 +117,9 @@
     - name: "redis"
       image: "docker.io/library/redis:{{ version['containers']['redis'] }}"
       file: "docker.io_library_redis_{{ version['containers']['redis'] }}"
-    - name: "paperless"
-      image: "{{ domain['internal'] }}/{{ node['name'] }}/paperless-ngx:{{ version['containers']['paperless'] }}"
-      file: "{{ domain['internal'] }}_{{ node['name'] }}_paperless-ngx_{{ version['containers']['paperless'] }}"
+    - name: "romm"
+      image: "docker.io/rommapp/romm:{{ version['containers']['romm'] }}"
+      file: "docker.io_rommapp_romm_{{ version['containers']['romm'] }}"
   loop_control:
     label: "{{ item.name }}"
   register: container_archive_images
@@ -166,11 +130,11 @@
       - "{{ item.item.image }}"
     dest: "{{ node['home_path'] }}/archives/containers/{{ item.item.file }}.tar"
     format: "oci-archive"
-    force: "{{ is_paperless_containerfile.changed }}"
+    force: false
   loop: "{{ container_archive_images.results }}"
   loop_control:
     label: "{{ item.item.file }}"
-  when: not item.stat.exists or (item.item.name == 'paperless' and is_paperless_containerfile.changed)
+  when: not item.stat.exists
 
 - name: Fetch container archive images
   ansible.builtin.fetch: