martin/ansible2
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

init

Browse Source
This commit is contained in:
Martin Eichner
2023-06-27 17:36:56 +02:00
commit 8d5852a4fa
46 changed files with 2330 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

38
roles/common/README.md Executable file
View File

@@ -0,0 +1,38 @@
Role Name
=========
A brief description of the role goes here.
Requirements
------------
Any pre-requisites that may not be covered by Ansible itself or the role should be mentioned here. For instance, if the role uses the EC2 module, it may be a good idea to mention in this section that the boto package is required.
Role Variables
--------------
A description of the settable variables for this role should go here, including any variables that are in defaults/main.yml, vars/main.yml, and any variables that can/should be set via parameters to the role. Any variables that are read from other roles and/or the global scope (ie. hostvars, group vars, etc.) should be mentioned here as well.
Dependencies
------------
A list of other roles hosted on Galaxy should go here, plus any details in regards to parameters that may need to be set for other roles, or variables that are used from other roles.
Example Playbook
----------------
Including an example of how to use your role (for instance, with variables passed in as parameters) is always nice for users too:
- hosts: servers
roles:
- { role: username.rolename, x: 42 }
License
-------
BSD
Author Information
------------------
An optional section for the role authors to include contact information, or a website (HTML is not allowed).

3
roles/common/defaults/main.yml Executable file
View File

@@ -0,0 +1,3 @@
---
# leer
...

1
roles/common/files/ansible_rsa.pub Executable file
View File

@@ -0,0 +1 @@
ssh-rsa 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 ansible@LB-DSFS026406

1
roles/common/files/martin_rsa.pub Executable file
View File

@@ -0,0 +1 @@
ssh-rsa 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 martin@martin-NUC10

2
roles/common/handlers/main.yml Executable file
View File

@@ -0,0 +1,2 @@
---
# handlers file for common

52
roles/common/meta/main.yml Executable file
View File

@@ -0,0 +1,52 @@
galaxy_info:
author: your name
description: your role description
company: your company (optional)
# If the issue tracker for your role is not on github, uncomment the
# next line and provide a value
# issue_tracker_url: http://example.com/issue/tracker
# Choose a valid license ID from https://spdx.org - some suggested licenses:
# - BSD-3-Clause (default)
# - MIT
# - GPL-2.0-or-later
# - GPL-3.0-only
# - Apache-2.0
# - CC-BY-4.0
license: license (GPL-2.0-or-later, MIT, etc)
min_ansible_version: 2.1
# If this a Container Enabled role, provide the minimum Ansible Container version.
# min_ansible_container_version:
#
# Provide a list of supported platforms, and for each platform a list of versions.
# If you don't wish to enumerate all versions for a particular platform, use 'all'.
# To view available platforms and versions (or releases), visit:
# https://galaxy.ansible.com/api/v1/platforms/
#
# platforms:
# - name: Fedora
# versions:
# - all
# - 25
# - name: SomePlatform
# versions:
# - all
# - 1.0
# - 7
# - 99.99
galaxy_tags: []
# List tags for your role here, one per line. A tag is a keyword that describes
# and categorizes the role. Users find roles by searching for tags. Be sure to
# remove the '[]' above, if you add tags to this list.
#
# NOTE: A tag is limited to a single word comprised of alphanumeric characters.
# Maximum 20 tags per role.
dependencies: []
# List your role dependencies here, one per line. Be sure to remove the '[]' above,
# if you add dependencies to this list.

46
roles/common/tasks/docker.yml Executable file
View File

@@ -0,0 +1,46 @@
---
- name: Install docker prerequisites
package:
name: "{{ item }}"
state: present
loop:
- ca-certificates
- curl
- gnupg
- lsb-release
- name: One way to avoid apt_key once it is removed from your distro
block:
- name: create keyring folder
file:
path: /etc/apt/keyrings
mode: '0755'
recurse: true
- name: Check if docker key already exists
stat:
path: /etc/apt/keyrings/docker.gpg
register: docker_gpg
- name: docker repo key
shell:
cmd: curl -fsSL https://download.docker.com/linux/ubuntu/gpg | gpg --dearmor -o /etc/apt/keyrings/docker.gpg
when: docker_gpg.stat.exists == false
- name: add docker repo | apt source
ansible.builtin.apt_repository:
repo: "deb [arch=amd64 signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/ubuntu {{ ansible_distribution_release }} stable"
state: present
- name: Install docker
package:
name: "{{ item }}"
state: present
update_cache: true
loop:
- docker-ce
- docker-ce-cli
- containerd.io
- docker-buildx-plugin
- docker-compose-plugin
...

79
roles/common/tasks/main.yml Executable file
View File

@@ -0,0 +1,79 @@
---
- name: Include docker tasks
include_tasks:
file: docker.yml
- name: Create default groups
group:
name: "{{ item }}"
state: present
loop:
- docker
- ansible
- name: Create default user
user:
name: "martin"
uid: "1000"
groups: docker,ansible
append: yes
shell: /bin/bash
state: present
- name: Create appusers
user:
name: "{{ item }}"
shell: /bin/bash
state: present
loop:
- "{{ appusers }}"
- name: create root authorized_keys
template:
src: root_authorized_keys.j2
dest: /root/.ssh/authorized_keys
owner: root
mode: '0600'
#- name: Create user authorized_keys
# authorized_key:
# user: "{{ item }}"
# key: "{{ item }}_rsa.pub"
# loop:
# - '{{ keys }}'
- name: apt update && apt upgrade
apt:
name: "*"
state: latest
update_cache: true
- name: Install default packages
apt:
name: "{{ item }}"
state: present
loop:
- "{{ default_pkgs }}"
- name: create docker/watchtower folder
file:
path: /opt/docker/watchtower
owner: 1000
group: 1000
mode: '0755'
state: directory
- name: Place watchtower docker-compose.yaml
template:
src: docker-compose.yaml.j2
dest: /opt/docker/watchtower/docker-compose.yaml
notify: restart docker-compose
tags: setup,update
- name: Start watchtower
community.docker.docker_compose:
project_src: /opt/docker/watchtower
state: present
pull: true
tags: test
...

17
roles/common/templates/docker-compose.yaml.j2 Executable file
View File

@@ -0,0 +1,17 @@
# ansible managed #
version: '3.3'
services:
watchtower:
image: containrrr/watchtower
volumes:
- /var/run/docker.sock:/var/run/docker.sock
- /etc/localtime:/etc/localtime:ro
environment:
- WATCHTOWER_SCHEDULE=0 0 4 * * *
- WATCHTOWER_CLEANUP=true
- WATCHTOWER_TIMEOUT=30s
- WATCHTOWER_INCLUDE_RESTARTING=true
- WATCHTOWER_ROLLING_RESTART=true
- TZ="Europe/Berlin"
restart: unless-stopped

5
roles/common/templates/root_authorized_keys.j2 Executable file
View File

@@ -0,0 +1,5 @@
{% for user in keys %}
{% if keys[user].ssh_as_root | default(false) %}
{{ keys[user].pub_key }}
{% endif %}
{% endfor %}

3
roles/common/templates/user_authorized_keys.j2 Executable file
View File

@@ -0,0 +1,3 @@
{% for user in users %}
{{ keys[user].pub_key }}
{% endfor %}

2
roles/common/tests/inventory Executable file
View File

@@ -0,0 +1,2 @@
localhost

5
roles/common/tests/test.yml Executable file
View File

@@ -0,0 +1,5 @@
---
- hosts: localhost
remote_user: root
roles:
- common

23
roles/common/vars/main.yml Executable file
View File

@@ -0,0 +1,23 @@
---
appusers:
- ansible
keys:
martin:
ssh_as_root: true
pub_key: "ssh-rsa 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 martin@martin-NUC10"
ansible:
pub_key: "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC0dCYmmRwBGoH1bB3VvYqZOb24EKmSJaNAnDgUusbTCgXlhf1LPDirJS2rJrWaEs4alybChpFPKscvHf6ka2nFN1avWGcXitnSiPzIiBZqmOyL34aqwEIxnDNesw3M18WsySMQDQ8HR+PboQ9SQnxEW2oHukDoxEyeE6xts5mKv5ri69bTBVmvD1F8VNATDR9irjht2zDN0MMp2A6zPwCT5qH+H8Xl6p7nPxq8hsKrTuV5PaAQ0SZWFIczzlgqiDA595KoSFuOV5c0s8nAKjz55YJneo8hfxZ6AEx1/QQPWkTuYiW8xB1O6m6RRq+lMtT6NocI+S9pQWwZNU2ipvxa+EsC5MjMR/NFmef65Ak1ic4GjQwkNmDCxmEeFAtH/oLFtANsEK05y0jx/KKeLB07tQWboqTR9wJz/QmZv3yLZThg2eCi8MO1zxXDmqIAT0XPSwiivyWcki4To9G6EOPcXOLXd4Ap5LcC7qWJHiQ70ddgj+pNv5aLfzuZdh7+5jM= ansible@LB-DSFS026406"
default_pkgs:
- curl
- git
- net-tools
- nfs-common
- nmap
- screen
- tar
- zip
- unzip
...

38
roles/mediaserver/README.md Executable file
View File

@@ -0,0 +1,38 @@
Role Name
=========
A brief description of the role goes here.
Requirements
------------
Any pre-requisites that may not be covered by Ansible itself or the role should be mentioned here. For instance, if the role uses the EC2 module, it may be a good idea to mention in this section that the boto package is required.
Role Variables
--------------
A description of the settable variables for this role should go here, including any variables that are in defaults/main.yml, vars/main.yml, and any variables that can/should be set via parameters to the role. Any variables that are read from other roles and/or the global scope (ie. hostvars, group vars, etc.) should be mentioned here as well.
Dependencies
------------
A list of other roles hosted on Galaxy should go here, plus any details in regards to parameters that may need to be set for other roles, or variables that are used from other roles.
Example Playbook
----------------
Including an example of how to use your role (for instance, with variables passed in as parameters) is always nice for users too:
- hosts: servers
roles:
- { role: username.rolename, x: 42 }
License
-------
BSD
Author Information
------------------
An optional section for the role authors to include contact information, or a website (HTML is not allowed).

2
roles/mediaserver/defaults/main.yml Executable file
View File

@@ -0,0 +1,2 @@
---
# defaults file for mediaserver

128
roles/mediaserver/files/dashy_config.yml Executable file
View File

@@ -0,0 +1,128 @@
appConfig:
theme: material-dark-original
layout: auto
iconSize: medium
language: de
startingView: default
defaultOpeningMethod: newtab
statusCheck: true
statusCheckInterval: 10
faviconApi: faviconkit
routingMode: history
enableMultiTasking: false
webSearch:
disableWebSearch: false
searchEngine: duckduckgo
openingMethod: newtab
searchBangs: {}
enableFontAwesome: true
cssThemes: []
customColors: {}
externalStyleSheet: []
hideComponents:
hideHeading: false
hideNav: false
hideSearch: false
hideSettings: true
hideFooter: false
hideSplashScreen: false
auth:
enableGuestAccess: true
users:
- user: martin
hash: E0B61E6A6E096DCE51E236DF27B32B2D3247F563407F506203355E850F5A6EC2
type: admin
enableKeycloak: false
keycloak: {}
allowConfigEdit: true
enableServiceWorker: false
disableContextMenu: false
disableUpdateChecks: false
disableSmartSort: false
enableErrorReporting: false
pageInfo:
title: Dashy
description: Welcome to your new dashboard!
navLinks:
- title: GitHub
path: https://github.com/Lissy93/dashy
- title: Documentation
path: https://dashy.to/docs
footerText: ''
sections:
- name: Mediaserver
icon: fas fa-rocket
items:
- title: Sonarr
description: TV Series
icon: favicon
url: http://192.168.178.200:8989
target: newtab
id: 0_1143_sonarr
- title: Radarr
description: Movies
url: http://192.168.178.200:7878
icon: favicon
id: 1_1143_radarr
- title: Deluge
description: Torrent
icon: https://deluge-torrent.org/images/deluge-icon.png
url: http://192.168.178.200:8112
id: 2_1143_deluge
- title: prowlarr
icon: favicon
url: http://192.168.178.200:9696
target: newtab
id: 3_1143_prowlarr
- title: sabnzbd
icon: favicon
url: http://192.168.178.200:8080
target: newtab
id: 4_1143_sabnzbd
- title: bazarr
icon: favicon
url: http://192.168.178.200:6767
target: newtab
id: 5_1143_bazarr
- title: Jellyfin
icon: favicon
url: http://192.168.178.200:8096
target: newtab
id: 6_1143_jellyfin
displayData:
sortBy: default
rows: 1
cols: 1
collapsed: false
hideForGuests: false
- name: Adminstuff
displayData:
sortBy: default
rows: 1
cols: 1
collapsed: false
hideForGuests: false
items:
- title: Proxmox
icon: favicon
url: https://192.168.178.210:8006
target: newtab
statusCheckAllowInsecure: 'true'
id: 0_1041_proxmox
- title: TrueNAS
icon: http://192.168.178.201/ui/assets/images/truenas_core_favicon.png
url: http://192.168.178.201/ui/
id: 1_1041_truenas
# - title: Seafile
# icon: https://manual.seafile.com/media/seafile-transparent-1024.png
# url: http://192.168.178.200:8081
# id: 2_1041_seafile
# - title: Django
# icon: favicon
# url: http://192.168.178.200:8000
# id: 3_1041_django
- title: check_mk
icon: >-
http://192.168.178.200:8095/cmk/check_mk/themes/modern-dark/images/tribe29_icon.svg
url: http://192.168.178.200:8095/cmk/check_mk/
id: 4_1041_checkmk

BIN
roles/mediaserver/files/ovpn.tar.gz Executable file
View File

Binary file not shown.

9
roles/mediaserver/handlers/main.yml Executable file
View File

@@ -0,0 +1,9 @@
---
# handlers file for mediaserver
- name: restart docker-compose
community.docker.docker_compose:
project_src: /opt/docker/mediaserver
remove_orphans: true
pull: true
state: present
restarted: true

52
roles/mediaserver/meta/main.yml Executable file
View File

@@ -0,0 +1,52 @@
galaxy_info:
author: your name
description: your role description
company: your company (optional)
# If the issue tracker for your role is not on github, uncomment the
# next line and provide a value
# issue_tracker_url: http://example.com/issue/tracker
# Choose a valid license ID from https://spdx.org - some suggested licenses:
# - BSD-3-Clause (default)
# - MIT
# - GPL-2.0-or-later
# - GPL-3.0-only
# - Apache-2.0
# - CC-BY-4.0
license: license (GPL-2.0-or-later, MIT, etc)
min_ansible_version: 2.1
# If this a Container Enabled role, provide the minimum Ansible Container version.
# min_ansible_container_version:
#
# Provide a list of supported platforms, and for each platform a list of versions.
# If you don't wish to enumerate all versions for a particular platform, use 'all'.
# To view available platforms and versions (or releases), visit:
# https://galaxy.ansible.com/api/v1/platforms/
#
# platforms:
# - name: Fedora
# versions:
# - all
# - 25
# - name: SomePlatform
# versions:
# - all
# - 1.0
# - 7
# - 99.99
galaxy_tags: []
# List tags for your role here, one per line. A tag is a keyword that describes
# and categorizes the role. Users find roles by searching for tags. Be sure to
# remove the '[]' above, if you add tags to this list.
#
# NOTE: A tag is limited to a single word comprised of alphanumeric characters.
# Maximum 20 tags per role.
dependencies: []
# List your role dependencies here, one per line. Be sure to remove the '[]' above,
# if you add dependencies to this list.

94
roles/mediaserver/tasks/main.yml Executable file
View File

@@ -0,0 +1,94 @@
---
- name: Create nfs mounts
become: true
lineinfile:
path: /etc/fstab
line: "{{ item }}"
state: present
loop: "{{ NFS_MOUNTS }}"
tags: setup, test
- name: Add podman repo + gpg key
block:
- name: somerepo |no apt key
ansible.builtin.get_url:
url: "https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/xUbuntu_{{ ansible_distribution_version }}/Release.key"
dest: /etc/apt/trusted.gpg.d/podman.asc
- name: somerepo | apt source
ansible.builtin.apt_repository:
repo: "deb [arch=amd64 signed-by=/etc/apt/trusted.gpg.d/podman.asc] https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/xUbuntu_{{ ansible_distribution_version }}/ /"
state: present
- name: Install mediaserver packages
apt:
name: "{{ item }}"
state: present
update_cache: true
loop:
- python3-docker
- podman
#- podman-plugins
- name: Install pip docker-compose
pip:
name: docker-compose
state: present
- name: Create project dir
file:
state: directory
#mode: '0755'
#owner: 1000
#group: 1000
path: /opt/docker/mediaserver/config/openvpn/unused
recurse: yes
tags: setup
- name: Create sabnzbd conf folder
file:
state: directory
path: /opt/docker/mediaserver/sabnzbd_config/openvpn
recurse: yes
tags: setup
- name: Place ovpn files
unarchive:
src: ovpn.tar.gz
dest: "{{ item }}"
loop:
- /opt/docker/mediaserver/config/openvpn
- /opt/docker/mediaserver/sabnzbd_config/openvpn
changed_when: false
tags: setup, delugevpn
- name: Create dashy config folder
file:
state: directory
path: /opt/docker/mediaserver/dashy_config
tags: setup, dashy
- name: Place dashy config file
copy:
src: dashy_config.yml
dest: /opt/docker/mediaserver/dashy_config/config.yml
notify: restart docker-compose
tags: setup, dashy
- name: Place docker-compose.yaml
template:
src: docker-compose.yaml.j2
dest: /opt/docker/mediaserver/docker-compose.yaml
#owner: 1000
#group: 1000
#mode: '0755'
notify: restart docker-compose
tags: setup
- name: Start mediaserver
community.docker.docker_compose:
project_src: /opt/docker/mediaserver
state: present
pull: true
...

192
roles/mediaserver/templates/docker-compose.yaml.j2 Executable file
View File

@@ -0,0 +1,192 @@
version: '3.3'
services:
arch-delugevpn:
cap_add:
- NET_ADMIN
ports:
- '8112:8112'
- '8118:8118'
- '58846:58846'
- '58946:58946'
container_name: delugevpn
volumes:
- '/mnt/nfs/martin/deluge/data:/data'
- '/mnt/nfs/martin/Downloads:/downloads'
- './config:/config'
- '/etc/localtime:/etc/localtime:ro'
environment:
- VPN_ENABLED=yes
- VPN_USER={{ VPN_USER }}
- VPN_PASS={{ VPN_PASS }}
- VPN_PROV=pia
- VPN_CLIENT=openvpn
- STRICT_PORT_FORWARD=yes
- ENABLE_PRIVOXY=yes
- LAN_NETWORK=192.168.178.0/24
- NAME_SERVERS=84.200.69.80,37.235.1.174,1.1.1.1,37.235.1.177,84.200.70.40,1.0.0.1
- DELUGE_DAEMON_LOG_LEVEL=info
- DELUGE_WEB_LOG_LEVEL=info
- VPN_INPUT_PORTS=1234
- VPN_OUTPUT_PORTS=5678
- DEBUG=false
- UMASK=000
- PUID=0
- PGID=0
image: binhex/arch-delugevpn:2.1.1-1-01
restart: unless-stopped
arch-sabnzbdvpn:
cap_add:
- NET_ADMIN
ports:
- '8080:8080'
- '8090:8090'
- '8119:8118'
container_name: sabnzbdvpn
volumes:
- '/mnt/nfs/martin/Downloads:/downloads'
- './sabnzbd_config:/config'
- '/etc/localtime:/etc/localtime:ro'
environment:
- VPN_ENABLED=yes
- VPN_USER={{ VPN_USER }}
- VPN_PASS={{ VPN_PASS }}
- VPN_PROV=pia
- VPN_CLIENT=openvpn
- STRICT_PORT_FORWARD=yes
- ENABLE_PRIVOXY=yes
- LAN_NETWORK=192.168.178.0/24
- 'NAME_SERVERS=84.200.69.80,37.235.1.174,1.1.1.1,37.235.1.177,84.200.70.40,1.0.0.1'
- VPN_INPUT_PORTS=1234
- VPN_OUTPUT_PORTS=5678
- DEBUG=false
- UMASK=000
- PUID=0
- PGID=0
image: binhex/arch-sabnzbdvpn:3.6.0-2-01
restart: unless-stopped
sonarr:
image: mdhiggins/sonarr-sma
container_name: sonarr
volumes:
- ./sonarr_config:/config
- ./sma:/usr/local/sma/config
- /mnt/nfs/martin/TV:/tv
- /mnt/nfs/martin/Downloads:/downloads
ports:
- 8989:8989
restart: unless-stopped
environment:
- PUID=1000
- PGID=1000
radarr:
image: lscr.io/linuxserver/radarr
container_name: radarr
environment:
- PUID=1000
- PGID=1000
- TZ=Europe/London
volumes:
- ./radarr_config:/config
- /mnt/nfs/martin/movies:/movies
- /mnt/nfs/martin/Downloads:/downloads
ports:
- 7878:7878
restart: unless-stopped
dashy:
image: lissy93/dashy
container_name: Dashy
volumes:
- ./dashy_config/config.yml:/app/public/conf.yml
ports:
- 80:80
environment:
- NODE_ENV=production
restart: unless-stopped
healthcheck:
test: ['CMD', 'node', '/app/services/healthcheck']
interval: 1m30s
timeout: 10s
retries: 3
start_period: 40s
jellyfin:
image: lscr.io/linuxserver/jellyfin
container_name: jellyfin
environment:
- PUID=1000
- PGID=1000
- TZ=Europe/London
- JELLYFIN_PublishedServerUrl=192.168.178.200 #optional
volumes:
- ./jelly_config:/config
- /mnt/nfs/martin/TV:/data/tvshows
- /mnt/nfs/martin/movies:/data/movies
- /mnt/nfs/martin/shows:/data/shows
- /mnt/nfs/martin/rips:/data/test
ports:
- 8096:8096
- 8920:8920 #optional
- 7359:7359/udp #optional
- 1900:1900/udp #optional
restart: unless-stopped
flaresolverr:
# DockerHub mirror flaresolverr/flaresolverr:latest
image: ghcr.io/flaresolverr/flaresolverr:latest
container_name: flaresolverr
environment:
- LOG_LEVEL=${LOG_LEVEL:-info}
- LOG_HTML=${LOG_HTML:-false}
- CAPTCHA_SOLVER=${CAPTCHA_SOLVER:-none}
- TZ=Europe/London
ports:
- "${PORT:-8191}:8191"
restart: unless-stopped
bazarr:
image: ghcr.io/linuxserver/bazarr
container_name: bazarr
environment:
- PUID=1000
- PGID=1000
- TZ=Europe/Berlin
volumes:
- ./bazarr_config:/config
- /mnt/nfs/martin/movies:/movies
- /mnt/nfs/martin/TV:/tv
ports:
- 6767:6767
restart: unless-stopped
prowlarr:
image: lscr.io/linuxserver/prowlarr:latest
container_name: prowlarr
environment:
- PUID=1000
- PGID=1000
- TZ=Europe/Berlin
volumes:
- ./prowlar_config:/config
ports:
- 9696:9696
restart: unless-stopped
# readarr:
# image: lscr.io/linuxserver/readarr:develop
# container_name: readarr
# environment:
# - PUID=1000
# - PGID=1000
# - TZ=Europe/Berlin
# volumes:
# - ./config:/config
# - /mnt/nfs/martin/books:/books
# - /mnt/nfs/martin/Downloads:/downloads
# ports:
# - 8787:8787
# restart: unless-stopped
...

2
roles/mediaserver/tests/inventory Executable file
View File

@@ -0,0 +1,2 @@
localhost

5
roles/mediaserver/tests/test.yml Executable file
View File

@@ -0,0 +1,5 @@
---
- hosts: localhost
remote_user: root
roles:
- mediaserver

8
roles/mediaserver/vars/main.yml Executable file
View File

@@ -0,0 +1,8 @@
---
VPN_USER: "p3754227"
VPN_PASS: "xsZtFdAofY"
NFS_MOUNTS:
- 192.168.178.201:/mnt/main/martin /mnt/nfs/martin nfs defaults 0 0
- 192.168.178.201:/mnt/main/backups /mnt/nfs/backup nfs defaults 0 0
- 192.168.178.201:/mnt/main/martin/transcodes/transcodes /opt/docker/mediaserver/jelly_config/data/transcodes nfs defaults 0 0
...

38
roles/vps/README.md Executable file
View File

@@ -0,0 +1,38 @@
Role Name
=========
A brief description of the role goes here.
Requirements
------------
Any pre-requisites that may not be covered by Ansible itself or the role should be mentioned here. For instance, if the role uses the EC2 module, it may be a good idea to mention in this section that the boto package is required.
Role Variables
--------------
A description of the settable variables for this role should go here, including any variables that are in defaults/main.yml, vars/main.yml, and any variables that can/should be set via parameters to the role. Any variables that are read from other roles and/or the global scope (ie. hostvars, group vars, etc.) should be mentioned here as well.
Dependencies
------------
A list of other roles hosted on Galaxy should go here, plus any details in regards to parameters that may need to be set for other roles, or variables that are used from other roles.
Example Playbook
----------------
Including an example of how to use your role (for instance, with variables passed in as parameters) is always nice for users too:
- hosts: servers
roles:
- { role: username.rolename, x: 42 }
License
-------
BSD
Author Information
------------------
An optional section for the role authors to include contact information, or a website (HTML is not allowed).

2
roles/vps/defaults/main.yml Executable file
View File

@@ -0,0 +1,2 @@
---
# defaults file for mediaserver

2
roles/vps/handlers/main.yml Executable file
View File

@@ -0,0 +1,2 @@
---
# handlers file for mediaserver

52
roles/vps/meta/main.yml Executable file
View File

@@ -0,0 +1,52 @@
galaxy_info:
author: your name
description: your role description
company: your company (optional)
# If the issue tracker for your role is not on github, uncomment the
# next line and provide a value
# issue_tracker_url: http://example.com/issue/tracker
# Choose a valid license ID from https://spdx.org - some suggested licenses:
# - BSD-3-Clause (default)
# - MIT
# - GPL-2.0-or-later
# - GPL-3.0-only
# - Apache-2.0
# - CC-BY-4.0
license: license (GPL-2.0-or-later, MIT, etc)
min_ansible_version: 2.1
# If this a Container Enabled role, provide the minimum Ansible Container version.
# min_ansible_container_version:
#
# Provide a list of supported platforms, and for each platform a list of versions.
# If you don't wish to enumerate all versions for a particular platform, use 'all'.
# To view available platforms and versions (or releases), visit:
# https://galaxy.ansible.com/api/v1/platforms/
#
# platforms:
# - name: Fedora
# versions:
# - all
# - 25
# - name: SomePlatform
# versions:
# - all
# - 1.0
# - 7
# - 99.99
galaxy_tags: []
# List tags for your role here, one per line. A tag is a keyword that describes
# and categorizes the role. Users find roles by searching for tags. Be sure to
# remove the '[]' above, if you add tags to this list.
#
# NOTE: A tag is limited to a single word comprised of alphanumeric characters.
# Maximum 20 tags per role.
dependencies: []
# List your role dependencies here, one per line. Be sure to remove the '[]' above,
# if you add dependencies to this list.

76
roles/vps/tasks/main.yml Executable file
View File

@@ -0,0 +1,76 @@
---
- name: Create nfs mounts
become: true
lineinfile:
path: /etc/fstab
line: "{{ item }}"
state: present
loop: "{{ NFS_MOUNTS }}"
tags: setup, test
- name: Add podman repo + gpg key
block:
- name: somerepo |no apt key
ansible.builtin.get_url:
url: "https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/xUbuntu_{{ ansible_distribution_version }}/Release.key"
dest: /etc/apt/trusted.gpg.d/podman.asc
- name: somerepo | apt source
ansible.builtin.apt_repository:
repo: "deb [arch=amd64 signed-by=/etc/apt/trusted.gpg.d/podman.asc] https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/xUbuntu_{{ ansible_distribution_version }}/ /"
state: present
- name: Install mediaserver packages
apt:
name: "{{ item }}"
state: present
update_cache: true
loop:
- python3-docker
- podman
#- podman-plugins
- name: Install pip docker-compose
pip:
name: docker-compose
state: present
- name: Create docker dirs
file:
state: directory
mode: '0755'
owner: root
group: root
path: "/opt/docker/{{ item }}"
recurse: yes
loop:
#- bullshiteria
#- lisa
#- gitea
#- joplin
#- mailu
#- nextcloud
#- traefik
#- valheim
#- vaultwarden
- "{{ DOCKER_PROJECTS }}"
tags: setup
- name: Place docker-compose.yaml
template:
src: "docker-compose.{{ item }}.yaml.j2"
dest: "/opt/docker/{{ item }}/docker-compose.yaml"
notify: restart docker-compose
tags: setup
loop:
- "{{ DOCKER_PROJECTS }}"
- name: Start docker projects
community.docker.docker_compose:
project_src: "/opt/docker/{{ item }}"
state: present
pull: true
loop:
- "{{ DOCKER_PROJECTS }}"
...

50
roles/vps/templates/docker-compose.bullshiteria.yaml.j2 Normal file
View File

@@ -0,0 +1,50 @@
version: '3'
services:
db:
image: mysql:5.7
volumes:
- ./db_data:/var/lib/mysql
restart: always
environment:
MYSQL_ROOT_PASSWORD: 7bvCwy2Fmta8hSNl
MYSQL_DATABASE: bullshiteria
MYSQL_USER: bullshiteria
MYSQL_PASSWORD: ZSnmQezh66EyOWyc
networks:
- internal
labels:
- "traefik.enable=false"
wordpress:
depends_on:
- db
image: wordpress:latest
volumes:
- ./wordpress_data:/var/www/html
ports:
- "8000:80"
restart: always
environment:
WORDPRESS_DB_HOST: db:3306
WORDPRESS_DB_USER: bullshiteria
WORDPRESS_DB_PASSWORD: ZSnmQezh66EyOWyc
WORDPRESS_DB_NAME: bullshiteria
networks:
- traefik
- internal
labels:
- "traefik.frontend.rule=Host:bullshiteria.de,www.bullshiteria.de"
- "traefik.port=80"
- "traefik.backend=wordpress"
- "traefik.frontend.entryPoints=https"
- "traefik.enable=true"
- "traefik.docker.network=traefik"
volumes:
db_data: {}
wordpress_data: {}
networks:
traefik:
external: true
internal:

53
roles/vps/templates/docker-compose.gitea.yaml.j2 Normal file
View File

@@ -0,0 +1,53 @@
---
version: '2'
services:
gitea:
image: gitea/gitea:latest
container_name: gitea
environment:
- USER_UID=1000
- USER_GID=1000
- GITEA__database__DB_TYPE=postgres
- GITEA__database__HOST=db:5432
- GITEA__database__NAME=gitea
- GITEA__database__USER=gitea
- GITEA__database__PASSWD=y86ene95KGXq%8Bq^9bx^Qme
- DISABLE_REGISTRATION=true
restart: unless-stopped
labels:
- "traefik.frontend.rule=Host:git.eichner.cc"
- "traefik.port=3000"
- "traefik.backend=git"
- "traefik.frontend.entryPoints=https"
- "traefik.enable=true"
- "traefik.docker.network=traefik"
networks:
- gitea
- traefik
volumes:
- ./gitea:/data
- /etc/timezone:/etc/timezone:ro
- /etc/localtime:/etc/localtime:ro
ports:
- "3000:3000"
- "222:22"
depends_on:
- db
db:
image: postgres:14
restart: always
environment:
- POSTGRES_USER=gitea
- POSTGRES_PASSWORD=y86ene95KGXq%8Bq^9bx^Qme
- POSTGRES_DB=gitea
networks:
- gitea
volumes:
- ./postgres:/var/lib/postgresql/data
networks:
gitea:
driver: bridge
traefik:
external: true

47
roles/vps/templates/docker-compose.joplin.yaml.j2 Normal file
View File

@@ -0,0 +1,47 @@
---
version: '3'
services:
db:
image: postgres:13
volumes:
- ./data/postgres:/var/lib/postgresql/data
restart: unless-stopped
environment:
- POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
- POSTGRES_USER=${POSTGRES_USER}
- POSTGRES_DB=${POSTGRES_DATABASE}
networks:
- internal
labels:
- "traefik.enable=false"
app:
image: joplin/server:latest
depends_on:
- db
#ports:
# - "22300:22300"
restart: unless-stopped
environment:
- APP_PORT=22300
- APP_BASE_URL=${APP_BASE_URL}
- DB_CLIENT=pg
- POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
- POSTGRES_DATABASE=${POSTGRES_DATABASE}
- POSTGRES_USER=${POSTGRES_USER}
- POSTGRES_PORT=${POSTGRES_PORT}
- POSTGRES_HOST=db
networks:
- traefik
- internal
labels:
- "traefik.frontend.rule=Host:joplin.eichner.cc"
- "traefik.port=22300"
- "traefik.backend=joplin"
- "traefik.frontend.entryPoints=https"
- "traefik.enable=true"
- "traefik.docker.network=traefik"
networks:
traefik:
external: true
internal:

50
roles/vps/templates/docker-compose.lisa.yaml.j2 Normal file
View File

@@ -0,0 +1,50 @@
version: '3'
services:
db:
image: mysql:latest
volumes:
- ./db_data:/var/lib/mysql
restart: always
environment:
MYSQL_ROOT_PASSWORD: 74T3WXbwbwH0AKQl8VTcQggd
MYSQL_DATABASE: lisa
MYSQL_USER: lisa
MYSQL_PASSWORD: TBPeXEXdu4Kjre81X1veU4zA
networks:
- internal
labels:
- "traefik.enable=false"
wordpress:
depends_on:
- db
image: wordpress:latest
volumes:
- ./wordpress_data:/var/www/html
ports:
- "8001:80"
restart: always
environment:
WORDPRESS_DB_HOST: db:3306
WORDPRESS_DB_USER: lisa
WORDPRESS_DB_PASSWORD: TBPeXEXdu4Kjre81X1veU4zA
WORDPRESS_DB_NAME: lisa
networks:
- traefik
- internal
labels:
- "traefik.frontend.rule=Host:lisa.eichner.cc"
- "traefik.port=80"
- "traefik.backend=lisa"
- "traefik.frontend.entryPoints=https"
- "traefik.enable=true"
- "traefik.docker.network=traefik"
volumes:
db_data: {}
wordpress_data: {}
networks:
traefik:
external: true
internal:

148
roles/vps/templates/docker-compose.mailu.yaml.j2 Normal file
View File

@@ -0,0 +1,148 @@
# This file is auto-generated by the Mailu configuration wizard.
# Please read the documentation before attempting any change.
# Generated for compose flavor
version: '3.6'
services:
# External dependencies
redis:
image: redis:alpine
restart: always
volumes:
- "./redis:/data"
# Core services
front:
image: ${DOCKER_ORG:-mailu}/${DOCKER_PREFIX:-}nginx:${MAILU_VERSION:-1.7}
restart: always
env_file: mailu.env
logging:
driver: json-file
ports:
- target: 25
published: 25
- target: 465
published: 465
- target: 587
published: 587
- target: 110
published: 110
- target: 995
published: 995
- target: 143
published: 143
- target: 993
published: 993
volumes:
- "./certs:/certs"
- "./overrides/nginx:/overrides"
- "./static:/static"
networks:
- traefik
- default
labels:
traefik.enable: "true"
traefik.port: "80"
traefik.frontend.rule: "Host:mail.eichner.cc"
traefik.docker.network: "traefik"
certdumper:
image: mailu/traefik-certdumper:${MAILU_VERSION:-1.7}
env_file: mailu.env
environment:
- DOMAIN=mail.eichner.cc
volumes:
- "/etc/traefik/acme/acme.json:/traefik/acme.json"
- "./certs:/output"
database:
image: ${DOCKER_ORG:-mailu}/${DOCKER_PREFIX:-}postgresql:${MAILU_VERSION:-1.7}
restart: always
env_file: mailu.env
volumes:
- "./data/psql_db:/data"
- "./data/psql_backup:/backup"
admin:
image: ${DOCKER_ORG:-mailu}/${DOCKER_PREFIX:-}admin:${MAILU_VERSION:-1.7}
restart: always
env_file: mailu.env
volumes:
- "./data:/data"
- "./dkim:/dkim"
depends_on:
- redis
imap:
image: ${DOCKER_ORG:-mailu}/${DOCKER_PREFIX:-}dovecot:${MAILU_VERSION:-1.7}
restart: always
env_file: mailu.env
volumes:
- "./mail:/mail"
- "./overrides:/overrides"
depends_on:
- front
smtp:
image: ${DOCKER_ORG:-mailu}/${DOCKER_PREFIX:-}postfix:${MAILU_VERSION:-1.7}
restart: always
env_file: mailu.env
volumes:
- "./overrides:/overrides"
depends_on:
- front
antispam:
image: ${DOCKER_ORG:-mailu}/${DOCKER_PREFIX:-}rspamd:${MAILU_VERSION:-1.7}
restart: always
env_file: mailu.env
volumes:
- "./filter:/var/lib/rspamd"
- "./dkim:/dkim"
- "./overrides/rspamd:/etc/rspamd/override.d"
- "./rspamd/local.d:/etc/rspamd/local.d"
depends_on:
- front
# Optional services
antivirus:
image: ${DOCKER_ORG:-mailu}/${DOCKER_PREFIX:-}clamav:${MAILU_VERSION:-1.7}
restart: always
env_file: mailu.env
volumes:
- "./filter:/data"
webdav:
image: ${DOCKER_ORG:-mailu}/${DOCKER_PREFIX:-}radicale:${MAILU_VERSION:-1.7}
restart: always
env_file: mailu.env
volumes:
- "./dav:/data"
fetchmail:
image: ${DOCKER_ORG:-mailu}/${DOCKER_PREFIX:-}fetchmail:${MAILU_VERSION:-1.7}
restart: always
env_file: mailu.env
# Webmail
# webmail:
# image: ${DOCKER_ORG:-mailu}/${DOCKER_PREFIX:-}rainloop:${MAILU_VERSION:-1.7}
# restart: always
# env_file: mailu.env
# volumes:
# - "./webmail:/data"
# depends_on:
# - imap
networks:
traefik:
driver: bridge
external: true
default:
driver: bridge
ipam:
driver: default
config:
- subnet: 192.168.203.0/24

114
roles/vps/templates/docker-compose.nextcloud.yaml.j2 Normal file
View File

@@ -0,0 +1,114 @@
version: '3'
services:
db:
image: mariadb
container_name: nextcloud-mariadb
networks:
- internal
command: --innodb-read-only-compressed=OFF
volumes:
- ./db:/var/lib/mysql
- /etc/localtime:/etc/localtime:ro
env_file:
- db.env
restart: unless-stopped
labels:
- "traefik.enable=false"
redis:
image: redis
container_name: redis
volumes:
- redis:/data
networks:
- internal
restart: unless-stopped
app:
image: nextcloud:latest
container_name: nextcloud
restart: always
volumes:
- ./nextcloud:/var/www/html # Pulls from /var/lib/docker/volumes/nextcloud_nextcloud/_data/
- ./nextcloud/config:/var/www/html/config # Pulls from local dir
- ./stuff:/mnt/hdd # Pulls from root
- ./nextcloud/apps:/var/www/html/custom_apps
- ./nextcloud/data:/var/www/html/data
- /opt/docker/podgrab/data:/mnt/podcasts
# - ./apache:/etc/apache2/sites-enabled
environment:
- VIRTUAL_HOST=cloud.eichner.cc
- DEFAULT_LANGUAGE="de"
- DEFAULT_LOCALE="de_DE"
env_file:
- db.env
depends_on:
- db
- redis
networks:
- traefik
- internal
labels:
- "traefik.backend=nextcloud"
- "traefik.docker.network=traefik"
- "traefik.enable=true"
- "traefik.frontend.rule=Host:cloud.eichner.cc"
- "traefik.port=80"
- traefik.frontend.headers.forceSTSHeader=true
- traefik.frontend.headers.SSLRedirect=true
- traefik.frontend.headers.STSPreload=true
- traefik.frontend.headers.STSSeconds=15552000
cron:
image: nextcloud
volumes:
- /opt/docker/nextcloud/nextcloud/nextcloud/:/var/www/html
user: www-data
restart: unless-stopped
networks:
- internal
entrypoint: |
bash -c 'bash -s <<EOF
trap "break;exit" SIGHUP SIGINT SIGTERM
while [ ! -f /var/www/html/config/config.php ]; do
sleep 1
done
while true; do
php -f /var/www/html/cron.php
sleep 15m
done
EOF'
documentserver:
image: onlyoffice/documentserver:7.1
restart: always
container_name: documentserver
networks:
- traefik
environment:
- "TZ=UTC"
labels:
- "traefik.enable=true"
- "traefik.port=80"
- "traefik.backend=office"
- "traefik.docker.network=traefik"
- "traefik.frontend.rule=Host:office.eichner.cc"
- "traefik.frontend.passHostHeader=true"
- "traefik.frontend.headers.forceSTSHeader=true"
- "traefik.frontend.headers.STSSeconds=31536000"
- "traefik.frontend.headers.STSIncludeSubdomains=true"
- "traefik.frontend.redirect.entryPoint=https"
- "traefik.frontend.redirect.permanent=true"
networks:
internal:
traefik:
external: true
volumes:
db:
nextcloud:
database-dump:
redis:
# apache:

48
roles/vps/templates/docker-compose.traefik.yaml.j2 Normal file
View File

@@ -0,0 +1,48 @@
---
version: "3"
services:
traefik:
container_name: traefik
image: traefik:1.7
command:
- "--api"
- "--entryPoints=Name:http Address::80 Redirect.EntryPoint:https"
- "--entryPoints=Name:https Address::443 TLS"
- "--defaultentrypoints=http,https"
- "--acme"
- "--acme.storage=/etc/traefik/acme/acme.json"
- "--acme.entryPoint=https"
- "--acme.httpChallenge.entryPoint=http"
- "--acme.caServer=https://acme-v02.api.letsencrypt.org/directory"
- "--acme.onHostRule=true"
- "--acme.onDemand=false"
- "--acme.email=kleinmaddin@googlemail.com"
- "--acme.acmelogging=true"
- "--docker"
# - "--docker.watch"
- "--logLevel=INFO"
volumes:
- /var/run/docker.sock:/var/run/docker.sock
- /etc/traefik/acme/acme.json:/etc/traefik/acme/acme.json
- /etc/traefik:/etc/traefik
- ./logs:/var/log/traefik
networks:
- traefik
ports:
- "80:80"
- "443:443"
labels:
traefik.frontend.rule: "Host:traefik.eichner.cc"
traefik.port: "8080"
traefik.frontend.auth.forward.address: "http://89.58.15.160:5252"
traefik.frontend.auth.forward.authResponseHeaders: "cookie"
traefik.backend: "traefik"
traefik.frontend.entryPoints: "https"
# traefik.frontend.auth.basic.users: "admin:$$apr1$S0AMFtfZ$yMnkgnpJzsG3JRAO2EXQ1/"
traefik.frontend.auth.basic.usersFile: "/etc/traefik/.htpasswd"
restart: unless-stopped
networks:
traefik:
external:
name: traefik

74
roles/vps/templates/docker-compose.vaultwarden.yaml.j2 Normal file
View File

@@ -0,0 +1,74 @@
---
version: "3"
services:
traefik:
container_name: traefik
image: traefik:1.7
command:
- "--api"
- "--entryPoints=Name:http Address::80 Redirect.EntryPoint:https"
- "--entryPoints=Name:https Address::443 TLS"
- "--defaultentrypoints=http,https"
- "--acme"
- "--acme.storage=/etc/traefik/acme/acme.json"
- "--acme.entryPoint=https"
- "--acme.httpChallenge.entryPoint=http"
- "--acme.caServer=https://acme-v02.api.letsencrypt.org/directory"
- "--acme.onHostRule=true"
- "--acme.onDemand=false"
- "--acme.email=kleinmaddin@googlemail.com"
- "--acme.acmelogging=true"
- "--docker"
# - "--docker.watch"
- "--logLevel=INFO"
volumes:
- /var/run/docker.sock:/var/run/docker.sock
- /etc/traefik/acme/acme.json:/etc/traefik/acme/acme.json
- /etc/traefik:/etc/traefik
- ./logs:/var/log/traefik
networks:
- traefik
ports:
- "80:80"
- "443:443"
labels:
traefik.frontend.rule: "Host:traefik.eichner.cc"
traefik.port: "8080"
traefik.frontend.auth.forward.address: "http://89.58.15.160:5252"
traefik.frontend.auth.forward.authResponseHeaders: "cookie"
traefik.backend: "traefik"
traefik.frontend.entryPoints: "https"
# traefik.frontend.auth.basic.users: "admin:$$apr1$S0AMFtfZ$yMnkgnpJzsG3JRAO2EXQ1/"
traefik.frontend.auth.basic.usersFile: "/etc/traefik/.htpasswd"
restart: unless-stopped
networks:
traefik:
external:
name: traefik
root@eichner:/opt/docker# cat vaultwarden/docker-compose.yml
version: '3'
services:
bitwarden:
container_name: bitwarden
image: vaultwarden/server:latest
env_file: .env
networks:
- traefik
labels:
- "traefik.frontend.rule=Host:vault.eichner.cc"
- "traefik.port=80"
- "traefik.backend=bitwarden"
- "traefik.frontend.entryPoints=https"
volumes:
- "/var/run/docker.sock:/var/run/docker.sock"
- "./data:/data"
restart: unless-stopped
networks:
traefik:
external:
name: traefik

2
roles/vps/tests/inventory Executable file
View File

@@ -0,0 +1,2 @@
localhost

5
roles/vps/tests/test.yml Executable file
View File

@@ -0,0 +1,5 @@
---
- hosts: localhost
remote_user: root
roles:
- mediaserver

14
roles/vps/vars/main.yml Executable file
View File

@@ -0,0 +1,14 @@
---
NFS_MOUNTS:
- 46.38.248.210:/voln441768a1 /mnt/storage nfs defaults 0 0
DOCKER_PROJECTS:
- bullshiteria
- lisa
- gitea
- joplin
- mailu
- nextcloud
- traefik
- valheim
- vaultwarden
...