2026-AUG-29

This commit is contained in:
il
2026-08-29 20:31:53 +09:00
parent ea8dfc8c20
commit 9226043696
41 changed files with 426 additions and 264 deletions
+3 -39
View File
@@ -92,17 +92,6 @@
listen: "notification_restart_outline"
ignore_errors: true # noqa: ignore-errors
- name: Restart mealie
ansible.builtin.systemd:
name: "mealie.service"
state: "restarted"
enabled: true
scope: "user"
daemon_reload: true
changed_when: false
listen: "notification_restart_mealie"
ignore_errors: true # noqa: ignore-errors
- name: Restart homebox
ansible.builtin.systemd:
name: "homebox.service"
@@ -151,20 +140,6 @@
listen: "notification_restart_mastodon"
ignore_errors: true # noqa: ignore-errors
- name: Restart booklogr
ansible.builtin.systemd:
name: "{{ item }}"
state: "restarted"
enabled: true
scope: "user"
daemon_reload: true
loop:
- "booklogr-api.service"
- "booklogr-web.service"
changed_when: false
listen: "notification_restart_booklogr"
ignore_errors: true # noqa: ignore-errors
- name: Restart papra
ansible.builtin.systemd:
name: "papra.service"
@@ -176,17 +151,6 @@
listen: "notification_restart_papra"
ignore_errors: true # noqa: ignore-errors
- name: Restart romm
ansible.builtin.systemd:
name: "romm.service"
state: "restarted"
enabled: true
scope: "user"
daemon_reload: true
changed_when: false
listen: "notification_restart_romm"
ignore_errors: true # noqa: ignore-errors
- name: Restart tandoor
ansible.builtin.systemd:
name: "tandoor.service"
@@ -209,13 +173,13 @@
listen: "notification_restart_bookstack"
ignore_errors: true # noqa: ignore-errors
- name: Restart linkwarden
- name: Restart linkding
ansible.builtin.systemd:
name: "linkwarden.service"
name: "linkding.service"
state: "restarted"
enabled: true
scope: "user"
daemon_reload: true
changed_when: false
listen: "notification_restart_linkwarden"
listen: "notification_restart_linkding"
ignore_errors: true # noqa: ignore-errors
@@ -1,110 +0,0 @@
---
- name: Create booklogr directory
ansible.builtin.file:
path: "{{ node['home_path'] }}/{{ item }}"
state: "directory"
owner: "{{ ansible_user }}"
group: "{{ node['group'] }}"
mode: "0770"
loop:
- "data/containers/booklogr"
- "data/containers/booklogr/profile_pictures"
- "data/containers/booklogr/export_data"
- "containers/booklogr"
- "containers/booklogr/ssl"
- name: Deploy root certificate
ansible.builtin.copy:
content: |
{{ hostvars['console']['ca']['root']['crt'] }}
dest: "{{ node['home_path'] }}/containers/booklogr/ssl/{{ root_cert_filename }}"
owner: "{{ ansible_user }}"
group: "{{ node['group'] }}"
mode: "0440"
notify: "notification_restart_booklogr"
no_log: true
- name: Register secret value to podman secret
containers.podman.podman_secret:
name: "{{ item.name }}"
data: "{{ item.value }}"
state: "present"
force: true
loop:
- name: "BOOKLOGR_AUTH_SECRET_KEY"
value: "{{ hostvars['console']['booklogr']['secret_key'] }}"
- name: "BOOKLOGR_POSTGRES_PASSWORD"
value: "{{ hostvars['console']['postgresql']['password']['booklogr'] }}"
- name: "BOOKLOGR_OIDC_CLIENT_SECRET"
value: "{{ hostvars['console']['booklogr']['oidc']['secret'] }}"
notify: "notification_restart_booklogr"
no_log: true
- name: Pull image
containers.podman.podman_image:
name: "{{ item }}"
tag: "{{ version['containers']['booklogr'] }}"
state: "present"
pull: true
loop:
- "docker.io/mozzo/booklogr"
- "docker.io/mozzo/booklogr-web"
- name: Deploy booklogr.container file
ansible.builtin.template:
src: "{{ hostvars['console']['node']['config_path'] }}/services/containers/app/booklogr/{{ item }}.j2"
dest: "{{ node['home_path'] }}/.config/containers/systemd/{{ item }}"
owner: "{{ ansible_user }}"
group: "{{ node['group'] }}"
mode: "0644"
loop:
- "booklogr-api.container"
- "booklogr-web.container"
notify: "notification_restart_booklogr"
- name: Enable booklogr.service
ansible.builtin.systemd:
name: "{{ item }}"
state: "started"
enabled: true
daemon_reload: true
scope: "user"
loop:
- "booklogr-api.service"
- "booklogr-web.service"
- name: Check container archive images
ansible.builtin.stat:
path: "{{ node['home_path'] }}/archives/containers/{{ item.file }}.tar"
loop:
- name: "booklogr"
image: "docker.io/mozzo/booklogr:{{ version['containers']['booklogr'] }}"
file: "docker.io_mozzo_booklogr_{{ version['containers']['booklogr'] }}"
- name: "booklogr-web"
image: "docker.io/mozzo/booklogr-web:{{ version['containers']['booklogr'] }}"
file: "docker.io_mozzo_booklogr-web_{{ version['containers']['booklogr'] }}"
loop_control:
label: "{{ item.name }}"
register: container_archive_images
- name: Save container archive images
containers.podman.podman_save:
image:
- "{{ item.item.image }}"
dest: "{{ node['home_path'] }}/archives/containers/{{ item.item.file }}.tar"
format: "oci-archive"
force: false
loop: "{{ container_archive_images.results }}"
loop_control:
label: "{{ item.item.file }}"
when: not item.stat.exists
- name: Fetch container archive images
ansible.builtin.fetch:
src: "{{ node['home_path'] }}/archives/containers/{{ item.item.file }}.tar"
dest: "{{ hostvars['console']['node']['data_path'] }}/images/containers/"
flat: true
loop: "{{ container_archive_images.results }}"
loop_control:
label: "{{ item.item.file }}"
@@ -14,7 +14,6 @@
- "containers/bookstack/ssl"
become: true
- name: Deploy root certificate
ansible.builtin.copy:
content: |
@@ -1,28 +1,28 @@
---
- name: Create mealie directory
- name: Create linkding directory
ansible.builtin.file:
path: "{{ node['home_path'] }}/{{ item }}"
state: "directory"
owner: "{{ services['mealie']['subuid'] }}"
owner: "{{ services['linkding']['subuid'] }}"
group: "{{ node['group'] }}"
mode: "0770"
loop:
- "data/containers/mealie"
- "data/containers/mealie/data"
- "containers/mealie"
- "containers/mealie/ssl"
- "data/containers/linkding"
- "data/containers/linkding/data"
- "containers/linkding"
- "containers/linkding/ssl"
become: true
- name: Deploy root certificate
ansible.builtin.copy:
content: |
{{ hostvars['console']['ca']['root']['crt'] }}
dest: "{{ node['home_path'] }}/containers/mealie/ssl/{{ root_cert_filename }}"
owner: "{{ services['mealie']['subuid'] }}"
dest: "{{ node['home_path'] }}/containers/linkding/ssl/{{ root_cert_filename }}"
owner: "{{ services['linkding']['subuid'] }}"
group: "{{ node['group'] }}"
mode: "0440"
become: true
notify: "notification_restart_mealie"
notify: "notification_restart_linkding"
no_log: true
- name: Register secret value to podman secret
@@ -32,32 +32,32 @@
state: "present"
force: true
loop:
- name: "MEALIE_POSTGRES_PASSWORD"
value: "{{ hostvars['console']['postgresql']['password']['mealie'] }}"
- name: "MEALIE_OIDC_CLIENT_SECRET"
value: "{{ hostvars['console']['mealie']['oidc']['secret'] }}"
notify: "notification_restart_mealie"
- name: "LINKDING_DB_PASSWORD"
value: "{{ hostvars['console']['postgresql']['password']['linkding'] }}"
- name: "LINKDING_OIDC_CLIENT_SECRET"
value: "{{ hostvars['console']['linkding']['oidc']['secret'] }}"
notify: "notification_restart_linkding"
no_log: true
- name: Pull image
containers.podman.podman_image:
name: "ghcr.io/mealie-recipes/mealie"
tag: "{{ version['containers']['mealie'] }}"
name: "ghcr.io/sissbruecker/linkding"
tag: "{{ version['containers']['linkding'] }}"
state: "present"
pull: true
- name: Deploy mealie.container file
- name: Deploy linkding.container file
ansible.builtin.template:
src: "{{ hostvars['console']['node']['config_path'] }}/services/containers/app/mealie/mealie.container.j2"
dest: "{{ node['home_path'] }}/.config/containers/systemd/mealie.container"
src: "{{ hostvars['console']['node']['config_path'] }}/services/containers/app/linkding/linkding.container.j2"
dest: "{{ node['home_path'] }}/.config/containers/systemd/linkding.container"
owner: "{{ ansible_user }}"
group: "{{ node['group'] }}"
mode: "0644"
notify: "notification_restart_mealie"
notify: "notification_restart_linkding"
- name: Enable mealie.service
- name: Enable linkding.service
ansible.builtin.systemd:
name: "mealie.service"
name: "linkding.service"
state: "started"
enabled: true
daemon_reload: true
@@ -65,20 +65,20 @@
- name: Check container archive images
ansible.builtin.stat:
path: "{{ node['home_path'] }}/archives/containers/ghcr.io_mealie-recipes_mealie_{{ version['containers']['mealie'] }}.tar"
path: "{{ node['home_path'] }}/archives/containers/ghcr.io_sissbruecker_linkding_{{ version['containers']['linkding'] }}.tar"
register: container_archive_images
- name: Save container archive images
containers.podman.podman_save:
image:
- "ghcr.io/mealie-recipes/mealie:{{ version['containers']['mealie'] }}"
dest: "{{ node['home_path'] }}/archives/containers/ghcr.io_mealie-recipes_mealie_{{ version['containers']['mealie'] }}.tar"
- "ghcr.io/sissbruecker/linkding:{{ version['containers']['linkding'] }}"
dest: "{{ node['home_path'] }}/archives/containers/ghcr.io_sissbruecker_linkding_{{ version['containers']['linkding'] }}.tar"
format: "oci-archive"
force: false
when: not container_archive_images.stat.exists
- name: Fetch container archive images
ansible.builtin.fetch:
src: "{{ node['home_path'] }}/archives/containers/ghcr.io_mealie-recipes_mealie_{{ version['containers']['mealie'] }}.tar"
src: "{{ node['home_path'] }}/archives/containers/ghcr.io_sissbruecker_linkding_{{ version['containers']['linkding'] }}.tar"
dest: "{{ hostvars['console']['node']['data_path'] }}/images/containers/"
flat: true
@@ -1,87 +0,0 @@
---
- name: Create linkwarden directory
ansible.builtin.file:
path: "{{ node['home_path'] }}/{{ item }}"
state: "directory"
owner: "{{ ansible_user }}"
group: "{{ node['group'] }}"
mode: "0770"
loop:
- "data/containers/linkwarden"
- "data/containers/linkwarden/data"
- "containers/linkwarden"
- "containers/linkwarden/ssl"
- name: Deploy root certificate
ansible.builtin.copy:
content: |
{{ hostvars['console']['ca']['root']['crt'] }}
dest: "{{ node['home_path'] }}/containers/linkwarden/ssl/{{ root_cert_filename }}"
owner: "{{ ansible_user }}"
group: "{{ node['group'] }}"
mode: "0440"
become: true
notify: "notification_restart_linkwarden"
no_log: true
- name: Register secret value to podman secret
containers.podman.podman_secret:
name: "{{ item.name }}"
data: "{{ item.value }}"
state: "present"
force: true
loop:
- name: "LINKWARDEN_SECRET_KEY"
value: "{{ hostvars['console']['linkwarden']['secret_key'] }}"
- name: "LINKWARDEN_OIDC_CLIENT_SECRET"
value: "{{ hostvars['console']['linkwarden']['oidc']['secret'] }}"
- name: "LINKWARDEN_DATABASE_URL"
value: "postgresql://linkwarden:{{ hostvars['console']['postgresql']['password']['linkwarden'] | urlencode | replace('/', '%2F') }}\
@{{ services['postgresql']['domain']['internal'] }}.{{ domain['internal'] }}/linkwarden_db?sslmode=require&\
sslcert=/etc/ssl/linkwarden/{{ root_cert_filename }}&sslaccept=strict"
notify: "notification_restart_linkwarden"
no_log: true
- name: Pull image
containers.podman.podman_image:
name: "ghcr.io/linkwarden/linkwarden"
tag: "{{ version['containers']['linkwarden'] }}"
state: "present"
pull: true
- name: Deploy container file
ansible.builtin.template:
src: "{{ hostvars['console']['node']['config_path'] }}/services/containers/app/linkwarden/linkwarden.container.j2"
dest: "{{ node['home_path'] }}/.config/containers/systemd/linkwarden.container"
owner: "{{ ansible_user }}"
group: "{{ node['group'] }}"
mode: "0644"
notify: "notification_restart_linkwarden"
- name: Enable linkwarden.service
ansible.builtin.systemd:
name: "linkwarden.service"
state: "started"
enabled: true
daemon_reload: true
scope: "user"
- name: Check container archive images
ansible.builtin.stat:
path: "{{ node['home_path'] }}/archives/containers/ghcr.io_linkwarden_linkwarden_{{ version['containers']['linkwarden'] }}.tar"
register: container_archive_images
- name: Save container archive images
containers.podman.podman_save:
image:
- "ghcr.io/linkwarden/linkwarden:{{ version['containers']['linkwarden'] }}"
dest: "{{ node['home_path'] }}/archives/containers/ghcr.io_linkwarden_linkwarden_{{ version['containers']['linkwarden'] }}.tar"
format: "oci-archive"
force: false
when: not container_archive_images.stat.exists
- name: Fetch container archive images
ansible.builtin.fetch:
src: "{{ node['home_path'] }}/archives/containers/ghcr.io_linkwarden_linkwarden_{{ version['containers']['linkwarden'] }}.tar"
dest: "{{ hostvars['console']['node']['data_path'] }}/images/containers/"
flat: true
@@ -1,146 +0,0 @@
---
- name: Set redis service name
ansible.builtin.set_fact:
redis_service: "romm"
- name: Create redis_romm directory
ansible.builtin.file:
path: "{{ node['home_path'] }}/{{ item }}"
state: "directory"
owner: "{{ services['redis']['subuid'] }}"
group: "{{ node['group'] }}"
mode: "0770"
loop:
- "containers/redis"
- "containers/redis/{{ redis_service }}"
- "containers/redis/{{ redis_service }}/data"
become: true
- name: Deploy redis config file
ansible.builtin.template:
src: "{{ hostvars['console']['node']['config_path'] }}/services/containers/app/redis/redis.conf.j2"
dest: "{{ node['home_path'] }}/containers/redis/{{ redis_service }}/redis.conf"
owner: "{{ ansible_user }}"
group: "{{ node['group'] }}"
mode: "0644"
register: "is_redis_conf"
- name: Deploy redis container file
ansible.builtin.template:
src: "{{ hostvars['console']['node']['config_path'] }}/services/containers/app/redis/redis.container.j2"
dest: "{{ node['home_path'] }}/.config/containers/systemd/redis_{{ redis_service }}.container"
owner: "{{ ansible_user }}"
group: "{{ node['group'] }}"
mode: "0644"
register: "is_redis_containerfile"
- name: Enable (Restart) redis service
ansible.builtin.systemd:
name: "redis_{{ redis_service }}.service"
state: "restarted"
enabled: true
daemon_reload: true
scope: "user"
when: is_redis_conf.changed or is_redis_containerfile.changed # noqa: no-handler
- name: Create romm directory
ansible.builtin.file:
path: "{{ node['home_path'] }}/{{ item }}"
state: "directory"
owner: "{{ services['romm']['subuid'] }}"
group: "{{ node['group'] }}"
mode: "0770"
loop:
- "data/containers/romm"
- "data/containers/romm/library"
- "data/containers/romm/resources"
- "data/containers/romm/assets"
- "containers/romm"
- "containers/romm/ssl"
become: true
- name: Deploy root certificate
ansible.builtin.copy:
content: |
{{ hostvars['console']['ca']['root']['crt'] }}
dest: "{{ node['home_path'] }}/containers/romm/ssl/{{ root_cert_filename }}"
owner: "{{ ansible_user }}"
group: "{{ node['group'] }}"
mode: "0440"
notify: "notification_restart_romm"
no_log: true
- name: Register secret value to podman secret
containers.podman.podman_secret:
name: "{{ item.name }}"
data: "{{ item.value }}"
state: "present"
force: true
loop:
- name: "ROMM_AUTH_SECRET_KEY"
value: "{{ hostvars['console']['romm']['secret_key'] }}"
- name: "ROMM_DATABASE_PASSWORD"
value: "{{ hostvars['console']['postgresql']['password']['romm'] }}"
- name: "ROMM_OIDC_CLIENT_SECRET"
value: "{{ hostvars['console']['romm']['oidc']['secret'] }}"
notify: "notification_restart_romm"
no_log: true
- name: Pull image
containers.podman.podman_image:
name: "docker.io/rommapp/romm"
tag: "{{ version['containers']['romm'] }}"
state: "present"
pull: true
- name: Deploy romm.container file
ansible.builtin.template:
src: "{{ hostvars['console']['node']['config_path'] }}/services/containers/app/romm/romm.container.j2"
dest: "{{ node['home_path'] }}/.config/containers/systemd/romm.container"
owner: "{{ ansible_user }}"
group: "{{ node['group'] }}"
mode: "0644"
notify: "notification_restart_romm"
- name: Enable romm.service
ansible.builtin.systemd:
name: "romm.service"
state: "started"
enabled: true
daemon_reload: true
scope: "user"
- name: Check container archive images
ansible.builtin.stat:
path: "{{ node['home_path'] }}/archives/containers/{{ item.file }}.tar"
loop:
- name: "redis"
image: "docker.io/library/redis:{{ version['containers']['redis'] }}"
file: "docker.io_library_redis_{{ version['containers']['redis'] }}"
- name: "romm"
image: "docker.io/rommapp/romm:{{ version['containers']['romm'] }}"
file: "docker.io_rommapp_romm_{{ version['containers']['romm'] }}"
loop_control:
label: "{{ item.name }}"
register: container_archive_images
- name: Save container archive images
containers.podman.podman_save:
image:
- "{{ item.item.image }}"
dest: "{{ node['home_path'] }}/archives/containers/{{ item.item.file }}.tar"
format: "oci-archive"
force: false
loop: "{{ container_archive_images.results }}"
loop_control:
label: "{{ item.item.file }}"
when: not item.stat.exists
- name: Fetch container archive images
ansible.builtin.fetch:
src: "{{ node['home_path'] }}/archives/containers/{{ item.item.file }}.tar"
dest: "{{ hostvars['console']['node']['data_path'] }}/images/containers/"
flat: true
loop: "{{ container_archive_images.results }}"
loop_control:
label: "{{ item.item.file }}"