chore(app): archive removed stacks from app

archived stacks:
- actual-budget
- ezbookkeeping
- opencloud
- trilium
- vikunja
- wikijs

ansible/roles/app/handlers/main.yaml

@@ -43,17 +43,6 @@
   listen: "notification_restart_immich-ml"
   ignore_errors: true # noqa: ignore-errors
 
-- name: Restart actual-budget
-  ansible.builtin.systemd:
-    name: "actual-budget.service"
-    state: "restarted"
-    enabled: true
-    scope: "user"
-    daemon_reload: true
-  changed_when: false
-  listen: "notification_restart_actual-budget"
-  ignore_errors: true # noqa: ignore-errors
-
 - name: Restart paperless
   ansible.builtin.systemd:
     name: "paperless.service"
@@ -65,29 +54,6 @@
   listen: "notification_restart_paperless"
   ignore_errors: true # noqa: ignore-errors
 
-- name: Restart vikunja
-  ansible.builtin.systemd:
-    name: "vikunja.service"
-    state: "restarted"
-    enabled: true
-    scope: "user"
-    daemon_reload: true
-  changed_when: false
-  listen: "notification_restart_vikunja"
-  ignore_errors: true # noqa: ignore-errors
-
-- name: Restart opencloud
-  ansible.builtin.systemd:
-    name: "opencloud.service"
-    state: "restarted"
-    enabled: true
-    daemon_reload: true
-    scope: "user"
-  when: is_opencloud_init.stat.exists
-  changed_when: false
-  listen: "notification_restart_opencloud"
-  ignore_errors: true # noqa: ignore-errors
-
 - name: Restart affine
   ansible.builtin.systemd:
     name: "affine.service"
@@ -123,17 +89,6 @@
   listen: "notification_restart_collabora"
   ignore_errors: true # noqa: ignore-errors
 
-- name: Restart ezbookkeeping
-  ansible.builtin.systemd:
-    name: "ezbookkeeping.service"
-    state: "restarted"
-    enabled: true
-    scope: "user"
-    daemon_reload: true
-  changed_when: false
-  listen: "notification_restart_ezbookkeeping"
-  ignore_errors: true # noqa: ignore-errors
-
 - name: Restart sure
   ansible.builtin.systemd:
     name: "{{ item }}"
@@ -147,25 +102,3 @@
   changed_when: false
   listen: "notification_restart_sure"
   ignore_errors: true # noqa: ignore-errors
-
-- name: Restart wikijs
-  ansible.builtin.systemd:
-    name: "wikijs.service"
-    state: "restarted"
-    enabled: true
-    scope: "user"
-    daemon_reload: true
-  changed_when: false
-  listen: "notification_restart_wikijs"
-  ignore_errors: true # noqa: ignore-errors
-
-- name: Restart trilium
-  ansible.builtin.systemd:
-    name: "trilium.service"
-    state: "restarted"
-    enabled: true
-    scope: "user"
-    daemon_reload: true
-  changed_when: false
-  listen: "notification_restart_trilium"
-  ignore_errors: true # noqa: ignore-errors

ansible/roles/app/tasks/services/set_actual-budget.yaml

@@ -1,35 +0,0 @@
----
-- name: Create actual budget directory
-  ansible.builtin.file:
-    path: "{{ node['home_path'] }}/data/containers/actual-budget"
-    state: "directory"
-    owner: "{{ services['actualbudget']['subuid'] }}"
-    group: "svadmins"
-    mode: "0770"
-  become: true
-
-- name: Register secret value to podman secret
-  containers.podman.podman_secret:
-    name: "ACTUAL_OPENID_CLIENT_SECRET"
-    data: "{{ hostvars['console']['actualbudget']['oidc']['secret'] }}"
-    state: "present"
-    force: true
-  notify: "notification_restart_actual-budget"
-  no_log: true
-
-- name: Deploy container file
-  ansible.builtin.template:
-    src: "{{ hostvars['console']['node']['config_path'] }}/services/containers/app/actual-budget/actual-budget.container.j2"
-    dest: "{{ node['home_path'] }}/.config/containers/systemd/actual-budget.container"
-    owner: "{{ ansible_user }}"
-    group: "svadmins"
-    mode: "0644"
-  notify: "notification_restart_actual-budget"
-
-- name: Enable actual-budget.service
-  ansible.builtin.systemd:
-    name: "actual-budget.service"
-    state: "started"
-    enabled: true
-    daemon_reload: true
-    scope: "user"

ansible/roles/app/tasks/services/set_ezbookkeeping.yaml

@@ -1,58 +0,0 @@
----
-- name: Create ezbookkeeping directory
-  ansible.builtin.file:
-    path: "{{ node['home_path'] }}/{{ item }}"
-    state: "directory"
-    owner: "{{ services['ezbookkeeping']['subuid'] }}"
-    group: "svadmins"
-    mode: "0770"
-  loop:
-    - "data/containers/ezbookkeeping"
-    - "data/containers/ezbookkeeping/data"
-    - "containers/ezbookkeeping"
-    - "containers/ezbookkeeping/ssl"
-  become: true
-
-
-- name: Deploy root certificate
-  ansible.builtin.copy:
-    content: |
-      {{ hostvars['console']['ca']['root']['crt'] }}
-    dest: "{{ node['home_path'] }}/containers/ezbookkeeping/ssl/{{ root_cert_filename }}"
-    owner: "{{ services['ezbookkeeping']['subuid'] }}"
-    group: "svadmins"
-    mode: "0440"
-  become: true
-  notify: "notification_restart_ezbookkeeping"
-  no_log: true
-
-- name: Register secret value to podman secret
-  containers.podman.podman_secret:
-    name: "{{ item.name }}"
-    data: "{{ item.value }}"
-    state: "present"
-    force: true
-  loop:
-    - name: "EBK_AUTH_OAUTH2_CLIENT_SECRET"
-      value: "{{ hostvars['console']['ezbookkeeping']['oidc']['secret'] }}"
-    - name: "EBK_DATABASE_PASSWD"
-      value: "{{ hostvars['console']['postgresql']['password']['ezbookkeeping'] }}"
-  notify: "notification_restart_ezbookkeeping"
-  no_log: true
-
-- name: Deploy ezbookkeeping.container file
-  ansible.builtin.template:
-    src: "{{ hostvars['console']['node']['config_path'] }}/services/containers/app/ezbookkeeping/ezbookkeeping.container.j2"
-    dest: "{{ node['home_path'] }}/.config/containers/systemd/ezbookkeeping.container"
-    owner: "{{ ansible_user }}"
-    group: "svadmins"
-    mode: "0644"
-  notify: "notification_restart_ezbookkeeping"
-
-- name: Enable ezbookkeeping.service
-  ansible.builtin.systemd:
-    name: "ezbookkeeping.service"
-    state: "started"
-    enabled: true
-    daemon_reload: true
-    scope: "user"

ansible/roles/app/tasks/services/set_opencloud.yaml

@@ -1,76 +0,0 @@
----
-- name: Create opencloud directory
-  ansible.builtin.file:
-    path: "{{ node['home_path'] }}/{{ item }}"
-    state: "directory"
-    owner: "{{ services['opencloud']['subuid'] }}"
-    group: "svadmins"
-    mode: "0770"
-  loop:
-    - "data/containers/opencloud"
-    - "containers/opencloud"
-  become: true
-
-- name: Check data directory empty
-  ansible.builtin.stat:
-    path: "{{ node['home_path'] }}/data/containers/opencloud/.init"
-  become: true
-  register: "is_opencloud_init"
-
-- name: Initialize opencloud
-  when: not is_opencloud_init.stat.exists
-  block:
-    - name: Execute init command (Including pulling image)
-      containers.podman.podman_container:
-        name: "opencloud_init"
-        image: "docker.io/opencloudeu/opencloud:{{ version['containers']['opencloud'] }}"
-        command: "init"
-        state: "started"
-        rm: true
-        detach: false
-        env:
-          IDM_ADMIN_PASSWORD: "{{ hostvars['console']['opencloud']['admin']['password'] }}"
-          # Verify the certificate (Opencloud to Authelia, authelia uses let's encrypt.)
-          OC_INSECURE: "true"
-        volume:
-          - "{{ node['home_path'] }}/containers/opencloud:/etc/opencloud:rw"
-          - "{{ node['home_path'] }}/data/containers/opencloud:/var/lib/opencloud:rw"
-      no_log: true
-
-    - name: Create .init file
-      ansible.builtin.file:
-        path: "{{ node['home_path'] }}/data/containers/opencloud/.init"
-        state: "touch"
-        mode: "0644"
-        owner: "{{ ansible_user }}"
-        group: "svadmins"
-
-- name: Deploy configuration files
-  ansible.builtin.template:
-    src: "{{ hostvars['console']['node']['config_path'] }}/services/containers/app/opencloud/etc/{{ item }}.j2"
-    dest: "{{ node['home_path'] }}/containers/opencloud/{{ item }}"
-    owner: "{{ services['opencloud']['subuid'] }}"
-    group: "svadmins"
-    mode: "0640"
-  loop:
-    - "csp.yaml"
-    - "proxy.yaml"
-  become: true
-  notify: "notification_restart_opencloud"
-
-- name: Deploy container file
-  ansible.builtin.template:
-    src: "{{ hostvars['console']['node']['config_path'] }}/services/containers/app/opencloud/opencloud.container.j2"
-    dest: "{{ node['home_path'] }}/.config/containers/systemd/opencloud.container"
-    owner: "{{ ansible_user }}"
-    group: "svadmins"
-    mode: "0644"
-  notify: "notification_restart_opencloud"
-
-- name: Enable opencloud.service
-  ansible.builtin.systemd:
-    name: "opencloud.service"
-    state: "started"
-    enabled: true
-    daemon_reload: true
-    scope: "user"

ansible/roles/app/tasks/services/set_trilium.yaml

@@ -1,38 +0,0 @@
----
-- name: Create trilium directory
-  ansible.builtin.file:
-    path: "{{ node['home_path'] }}/{{ item }}"
-    state: "directory"
-    owner: "{{ services['trilium']['subuid'] }}"
-    group: "svadmins"
-    mode: "0770"
-  loop:
-    - "data/containers/trilium"
-    - "data/containers/trilium/data"
-  become: true
-
-- name: Register secret value to podman secret
-  containers.podman.podman_secret:
-    name: "TRILIUM_OAUTH_CLIENT_SECRET"
-    data: "{{ hostvars['console']['trilium']['oidc']['secret'] }}"
-    state: "present"
-    force: true
-  notify: "notification_restart_trilium"
-  no_log: true
-
-- name: Deploy trilium.container file
-  ansible.builtin.template:
-    src: "{{ hostvars['console']['node']['config_path'] }}/services/containers/app/trilium/trilium.container.j2"
-    dest: "{{ node['home_path'] }}/.config/containers/systemd/trilium.container"
-    owner: "{{ ansible_user }}"
-    group: "svadmins"
-    mode: "0644"
-  notify: "notification_restart_trilium"
-
-- name: Enable trilium.service
-  ansible.builtin.systemd:
-    name: "trilium.service"
-    state: "started"
-    enabled: true
-    daemon_reload: true
-    scope: "user"

ansible/roles/app/tasks/services/set_vikunja.yaml

@@ -1,58 +0,0 @@
----
-- name: Create vikunja directory
-  ansible.builtin.file:
-    path: "{{ node['home_path'] }}/{{ item }}"
-    state: "directory"
-    owner: "{{ services['vikunja']['subuid'] }}"
-    group: "svadmins"
-    mode: "0770"
-  loop:
-    - "data/containers/vikunja"
-    - "containers/vikunja"
-    - "containers/vikunja/ssl"
-  become: true
-
-- name: Deploy root certificate
-  ansible.builtin.copy:
-    content: |
-      {{ hostvars['console']['ca']['root']['crt'] }}
-    dest: "{{ node['home_path'] }}/containers/vikunja/ssl/{{ root_cert_filename }}"
-    owner: "{{ services['vikunja']['subuid'] }}"
-    group: "svadmins"
-    mode: "0440"
-  become: true
-  notify: "notification_restart_vikunja"
-  no_log: true
-
-- name: Register secret value to podman secret
-  containers.podman.podman_secret:
-    name: "{{ item.name }}"
-    data: "{{ item.value }}"
-    state: "present"
-    force: true
-  loop:
-    - name: "VIKUNJA_SERVICE_JWTSECRET"
-      value: "{{ hostvars['console']['vikunja']['session_secret'] }}"
-    - name: "VIKUNJA_DATABASE_PASSWORD"
-      value: "{{ hostvars['console']['postgresql']['password']['vikunja'] }}"
-    - name: "VIKUNJA_AUTH_OPENID_PROVIDERS_authelia_CLIENTSECRET"
-      value: "{{ hostvars['console']['vikunja']['oidc']['secret'] }}"
-  notify: "notification_restart_vikunja"
-  no_log: true
-
-- name: Deploy vikunja.container file
-  ansible.builtin.template:
-    src: "{{ hostvars['console']['node']['config_path'] }}/services/containers/app/vikunja/vikunja.container.j2"
-    dest: "{{ node['home_path'] }}/.config/containers/systemd/vikunja.container"
-    owner: "{{ ansible_user }}"
-    group: "svadmins"
-    mode: "0644"
-  notify: "notification_restart_vikunja"
-
-- name: Enable vikunja.service
-  ansible.builtin.systemd:
-    name: "vikunja.service"
-    state: "started"
-    enabled: true
-    daemon_reload: true
-    scope: "user"

ansible/roles/app/tasks/services/set_wikijs.yaml

@@ -1,53 +0,0 @@
----
-- name: Create wiki.js directory
-  ansible.builtin.file:
-    path: "{{ node['home_path'] }}/{{ item }}"
-    state: "directory"
-    owner: "{{ services['wikijs']['subuid'] }}"
-    group: "svadmins"
-    mode: "0770"
-  loop:
-    - "data/containers/wikijs"
-    - "data/containers/wikijs/data"
-    - "data/containers/wikijs/export"
-    - "containers/wikijs"
-    - "containers/wikijs/ssl"
-  become: true
-
-- name: Deploy root certificate
-  ansible.builtin.copy:
-    content: |
-      {{ hostvars['console']['ca']['root']['crt'] }}
-    dest: "{{ node['home_path'] }}/containers/wikijs/ssl/{{ root_cert_filename }}"
-    owner: "{{ services['wikijs']['subuid'] }}"
-    group: "svadmins"
-    mode: "0440"
-  become: true
-  notify: "notification_restart_wikijs"
-  no_log: true
-
-- name: Register secret value to podman secret
-  containers.podman.podman_secret:
-    name: "WIKIJS_DB_PASS"
-    data: "{{ hostvars['console']['postgresql']['password']['wikijs'] }}"
-    state: "present"
-    force: true
-  notify: "notification_restart_wikijs"
-  no_log: true
-
-- name: Deploy wikijs.container file
-  ansible.builtin.template:
-    src: "{{ hostvars['console']['node']['config_path'] }}/services/containers/app/wikijs/wikijs.container.j2"
-    dest: "{{ node['home_path'] }}/.config/containers/systemd/wikijs.container"
-    owner: "{{ ansible_user }}"
-    group: "svadmins"
-    mode: "0644"
-  notify: "notification_restart_wikijs"
-
-- name: Enable wikijs.service
-  ansible.builtin.systemd:
-    name: "wikijs.service"
-    state: "started"
-    enabled: true
-    daemon_reload: true
-    scope: "user"