2026-AUG-23

ansible/inventory/group_vars/all.yaml

@@ -76,6 +76,14 @@ services:
     subuid: "100998"
     dependency:
       cert: true
+  mariadb:
+    domain:
+      internal: "mariadb"
+    ports:
+      tcp: "3306" # mariadb db connection port
+    subuid: "100998"
+    dependency:
+      cert: true
   ldap:
     domain:
       internal: "ldap"
@@ -251,16 +259,6 @@ services:
     dependency:
       web: "app-public"
       db: "postgresql"
-  memos:
-    domain:
-      public: "memos"
-      internal: "memos.app"
-    ports:
-      http: "3005"
-    subuid: "110000"
-    dependency:
-      web: "app-public"
-      db: "postgresql"
   sure:
     domain:
       public: "sure"
@@ -336,6 +334,8 @@ version:
     ca: "0.30.2"
     ## Postgresql
     postgresql: "18.4"
+    ## Mariadb
+    mariadb: "12.3.2"
     ### For immich - https://github.com/immich-app/base-images/blob/main/postgres/versions.yaml
     vectorchord: "1.1.1"
     ## lldap
@@ -357,7 +357,6 @@ version:
     collabora: "26.04.3.1.1"
     sure: "0.7.3"
     outline: "1.9.2"
-    memos: "0.30.0"
     mealie: "v3.22.0"
     homebox: "0.26.2"
     homepage: "v2.0.0"

ansible/playbooks/app/site.yaml

@@ -234,14 +234,6 @@
           tags: ["site", "outline"]
       tags: ["site", "outline"]
 
-    - name: Set memos
-      ansible.builtin.include_role:
-        name: "app"
-        tasks_from: "services/set_memos"
-        apply:
-          tags: ["site", "memos"]
-      tags: ["site", "memos"]
-
     - name: Set mealie
       ansible.builtin.include_role:
         name: "app"

ansible/playbooks/infra/site.yaml

@@ -162,6 +162,14 @@
           tags: ["site", "postgresql"]
       tags: ["site", "postgresql"]
 
+    - name: Set mariadb
+      ansible.builtin.include_role:
+        name: "infra"
+        tasks_from: "services/set_mariadb"
+        apply:
+          tags: ["site", "mariadb"]
+      tags: ["site", "mariadb"]
+
     - name: Set caddy
       ansible.builtin.include_role:
         name: "common"

ansible/roles/app/handlers/main.yaml

@@ -92,17 +92,6 @@
   listen: "notification_restart_outline"
   ignore_errors: true # noqa: ignore-errors
 
-- name: Restart memos
-  ansible.builtin.systemd:
-    name: "memos.service"
-    state: "restarted"
-    enabled: true
-    scope: "user"
-    daemon_reload: true
-  changed_when: false
-  listen: "notification_restart_memos"
-  ignore_errors: true # noqa: ignore-errors
-
 - name: Restart mealie
   ansible.builtin.systemd:
     name: "mealie.service"

ansible/roles/infra/handlers/main.yaml

@@ -30,6 +30,18 @@
   listen: "notification_restart_postgresql"
   ignore_errors: true # noqa: ignore-errors
 
+- name: Restart mariadb
+  ansible.builtin.systemd:
+    name: "mariadb.service"
+    state: "restarted"
+    enabled: true
+    daemon_reload: true
+    scope: "user"
+  when: is_mariadb_init_marker.stat.exists
+  changed_when: false
+  listen: "notification_restart_mariadb"
+  ignore_errors: true # noqa: ignore-errors
+
 - name: Restart ldap
   ansible.builtin.systemd:
     name: "ldap.service"

ansible/roles/infra/tasks/services/set_mariadb.yaml

@@ -0,0 +1,197 @@
+---
+- name: Initialize connected services list
+  ansible.builtin.set_fact:
+    connected_services: []
+
+- name: Set connected services list
+  ansible.builtin.set_fact:
+    connected_services: >-
+      {{
+        services
+        | dict2items
+        | selectattr('value.dependency.db', 'defined')
+        | selectattr('value.dependency.db', 'equalto', 'mariadb')
+        | map(attribute='key')
+        | list
+      }}
+
+- name: Create mariadb directory
+  ansible.builtin.file:
+    path: "{{ node['home_path'] }}/{{ item }}"
+    state: "directory"
+    owner: "{{ services['mariadb']['subuid'] }}"
+    group: "{{ node['group'] }}"
+    mode: "0770"
+  loop:
+    - "data/containers/mariadb/"
+    - "data/containers/mariadb/backups"
+    - "data/containers/mariadb/backups/sql"
+    - "containers/mariadb"
+    - "containers/mariadb/data"
+    - "containers/mariadb/config"
+    - "containers/mariadb/ssl"
+    - "containers/mariadb/init"
+  become: true
+
+- name: Check mariadb .init marker
+  ansible.builtin.stat:
+    path: "{{ node['home_path'] }}/containers/mariadb/.init"
+  register: "is_mariadb_init_marker"
+
+- name: Pull image
+  containers.podman.podman_image:
+    name: "docker.io/library/mariadb"
+    tag: "{{ version['containers']['mariadb'] }}"
+    state: "present"
+    pull: true
+
+- name: Deploy mariadb configuration files
+  ansible.builtin.template:
+    src: "{{ hostvars['console']['node']['config_path'] }}/services/containers/infra/mariadb/config/mariadb.cnf.j2"
+    dest: "{{ node['home_path'] }}/containers/mariadb/config/mariadb.cnf"
+    owner: "{{ services['mariadb']['subuid'] }}"
+    group: "{{ node['group'] }}"
+    mode: "0600"
+  become: true
+  notify: "notification_restart_mariadb"
+  no_log: true
+
+- name: Deploy mariadb certificate and key
+  ansible.builtin.copy:
+    content: |
+      {{ item.value }}
+    dest: "{{ node['home_path'] }}/containers/mariadb/ssl/{{ item.name }}"
+    owner: "{{ services['mariadb']['subuid'] }}"
+    group: "{{ node['group'] }}"
+    mode: "{{ item.mode }}"
+  loop:
+    - name: "{{ root_cert_filename }}"
+      value: "{{ hostvars['console']['ca']['root']['crt'] }}"
+      mode: "0440"
+    - name: "mariadb.crt"
+      value: |
+        {{ hostvars['console']['mariadb']['crt'] | trim }}
+        {{ hostvars['console']['ca']['intermediate']['crt'] }}
+      mode: "0440"
+    - name: "mariadb.key"
+      value: "{{ hostvars['console']['mariadb']['key'] }}"
+      mode: "0400"
+  become: true
+  notify: "notification_restart_mariadb"
+  no_log: true
+
+- name: Initiating mariadb
+  when: not is_mariadb_init_marker.stat.exists
+  block:
+    - name: Check initiating SQL files
+      ansible.builtin.find:
+        path: "{{ node['home_path'] }}/data/containers/mariadb/backups/sql/"
+        file_type: "file"
+        patterns:
+          - "mariadb_*.sql"
+        hidden: true
+        recurse: false
+      become: true
+      register: "mariadb_init_sql_files"
+
+    - name: Set initiating SQL file lists
+      ansible.builtin.set_fact:
+        mariadb_init_sql_file_list: >-
+          {{
+            mariadb_init_sql_files.files
+            | map(attribute='path')
+            | map('basename')
+            | map('regex_replace', '^mariadb_', '')
+            | map('regex_replace', '[.]sql$', '')
+            | list
+          }}
+
+    - name: Fail on invalid initiating SQL file set
+      ansible.builtin.fail:
+      when:
+        - mariadb_init_sql_files.matched > 0
+        - ((connected_services)
+          | symmetric_difference(mariadb_init_sql_file_list)
+          | length) > 0
+
+    - name: Remote copy the initiating SQL
+      ansible.builtin.copy:
+        src: "{{ node['home_path'] }}/data/containers/mariadb/backups/sql/mariadb_{{ item }}.sql"
+        remote_src: true
+        dest: "{{ node['home_path'] }}/containers/mariadb/init/{{ '%02d' | format(index_num) }}_mariadb_{{ item }}.sql"
+        owner: "{{ services['mariadb']['subuid'] }}"
+        group: "{{ node['group'] }}"
+        mode: "0600"
+      loop: "{{ connected_services }}"
+      loop_control:
+        index_var: index_num
+      become: true
+      when:
+        - ((connected_services)
+          | symmetric_difference(mariadb_init_sql_file_list)
+          | length) == 0
+
+- name: Deploy container file
+  ansible.builtin.template:
+    src: "{{ hostvars['console']['node']['config_path'] }}/services/containers/infra/mariadb/mariadb.container.j2"
+    dest: "{{ node['home_path'] }}/.config/containers/systemd/mariadb.container"
+    owner: "{{ ansible_user }}"
+    group: "{{ node['group'] }}"
+    mode: "0644"
+  notify: "notification_restart_mariadb"
+
+- name: Deploy backup service files
+  ansible.builtin.copy:
+    src: "{{ hostvars['console']['node']['config_path'] }}/services/containers/infra/mariadb/services/{{ item }}"
+    dest: "{{ node['home_path'] }}/.config/systemd/user/{{ item }}"
+    owner: "{{ ansible_user }}"
+    group: "{{ node['group'] }}"
+    mode: "0644"
+  loop:
+    - "mariadb-data-backup@.service"
+    - "mariadb-data-backup@.timer"
+
+- name: Enable mariadb
+  ansible.builtin.systemd:
+    name: "mariadb.service"
+    state: "started"
+    enabled: true
+    daemon_reload: true
+    scope: "user"
+
+- name: Enable data backup timer
+  ansible.builtin.systemd:
+    name: "mariadb-data-backup@{{ item }}.timer"
+    state: "started"
+    enabled: true
+    daemon_reload: true
+    scope: "user"
+  loop: "{{ connected_services }}"
+
+- name: Create .init file
+  ansible.builtin.file:
+    path: "{{ node['home_path'] }}/containers/mariadb/.init"
+    state: "touch"
+    mode: "0644"
+    owner: "{{ ansible_user }}"
+    group: "{{ node['group'] }}"
+  when: not is_mariadb_init_marker.stat.exists
+
+- name: Check container archive images
+  ansible.builtin.stat:
+    path: "{{ node['home_path'] }}/archives/containers/docker.io_library_mariadb_{{ version['containers']['mariadb'] }}"
+  register: container_archive_images
+
+- name: Save container archive images
+  containers.podman.podman_save:
+    image:
+      - "docker.io/library/mariadb:{{ version['containers']['mariadb'] }}"
+    dest: "{{ node['home_path'] }}/archives/containers/docker.io_library_mariadb_{{ version['containers']['mariadb'] }}"
+    format: "oci-archive"
+  when: not container_archive_images.stat.exists
+
+- name: Fetch container archive images
+  ansible.builtin.fetch:
+    src: "{{ node['home_path'] }}/archives/containers/docker.io_library_mariadb_{{ version['containers']['mariadb'] }}"
+    dest: "{{ hostvars['console']['node']['data_path'] }}/images/containers/"
+    flat: true

ansible/roles/infra/tasks/services/set_postgresql.yaml

@@ -122,7 +122,7 @@
             | map(attribute='path')
             | map('basename')
             | map('regex_replace', '^pg_', '')
-            | map('regex_replace', '\\.sql$', '')
+            | map('regex_replace', '[.]sql$', '')
             | list
           }}