hosting/mash-playbook
1
0
Fork 0
Code Pull requests Activity
mash-playbook/templates/group_vars_mash_servers

4248 lines
196 KiB
Text
Raw Normal View History

Initial commit
2023-03-15 09:58:12 +01:00
---
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:auxiliary
Add AUX role
2023-03-20 10:03:59 +01:00
########################################################################
# #
# aux #
# #
########################################################################
aux_directory_default_owner: "{{ mash_playbook_user_username }}"
aux_directory_default_group: "{{ mash_playbook_user_groupname }}"
aux_file_default_owner: "{{ mash_playbook_user_username }}"
aux_file_default_group: "{{ mash_playbook_user_groupname }}"
########################################################################
# #
# /aux #
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:auxiliary
Add AUX role
2023-03-20 10:03:59 +01:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:authelia
Add support for Authelia
2023-09-12 12:26:38 +02:00
########################################################################
# #
# authelia #
# #
########################################################################
authelia_enabled: false
authelia_identifier: "{{ mash_playbook_service_identifier_prefix }}authelia"
authelia_uid: "{{ mash_playbook_uid }}"
authelia_gid: "{{ mash_playbook_gid }}"
authelia_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}authelia"
authelia_systemd_required_services_list_auto: |
{{
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled and authelia_config_storage_postgres_host == devture_postgres_identifier else [])
}}
authelia_container_additional_networks_auto: |
{{
([mash_playbook_reverse_proxyable_services_additional_network] if mash_playbook_reverse_proxyable_services_additional_network else [])
+
([devture_postgres_container_network] if devture_postgres_enabled and authelia_config_storage_postgres_host == devture_postgres_identifier and authelia_container_network != devture_postgres_container_network else [])
}}
authelia_container_labels_traefik_enabled: "{{ mash_playbook_traefik_labels_enabled }}"
authelia_container_labels_traefik_docker_network: "{{ mash_playbook_reverse_proxyable_services_additional_network }}"
authelia_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"
authelia_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"
authelia_config_jwt_secret: "{{ '%s' | format(mash_playbook_generic_secret_key) | password_hash('sha512', 'jwt.authelia', rounds=655555) | to_uuid }}"
authelia_config_session_secret: "{{ '%s' | format(mash_playbook_generic_secret_key) | password_hash('sha512', 'ses.authelia', rounds=655555) | to_uuid }}"
authelia_config_identity_providers_oidc_hmac_secret: "{{ '%s' | format(mash_playbook_generic_secret_key) | password_hash('sha512', 'hm.authelia', rounds=655555) | to_uuid }}"
Add some more role-specific annotations to templates/group_vars_mash_servers There's a lot more that can be added, especially to decouple from some default components like Postgres and Traefik.
2023-11-20 16:20:17 +01:00
# role-specific:postgres
Add support for Authelia
2023-09-12 12:26:38 +02:00
authelia_config_storage_postgres_host: "{{ devture_postgres_identifier if devture_postgres_enabled else '' }}"
authelia_config_storage_postgres_port: "{{ '5432' if devture_postgres_enabled else '' }}"
authelia_config_storage_postgres_password: "{{ '%s' | format(mash_playbook_generic_secret_key) | password_hash('sha512', 'db.authelia', rounds=655555) | to_uuid }}"
Add some more role-specific annotations to templates/group_vars_mash_servers There's a lot more that can be added, especially to decouple from some default components like Postgres and Traefik.
2023-11-20 16:20:17 +01:00
# /role-specific:postgres
Add support for Authelia
2023-09-12 12:26:38 +02:00
Add some more role-specific annotations to templates/group_vars_mash_servers There's a lot more that can be added, especially to decouple from some default components like Postgres and Traefik.
2023-11-20 16:20:17 +01:00
# role-specific:mariadb
Fix comment typo
2023-11-19 08:09:25 +01:00
# If Postgres and MariaDB are not enabled, we favor Postgres.
Add support for Authelia
2023-09-12 12:26:38 +02:00
# We only enable MySQL if it's the only enabled component (that is, if Postgres is not enabled at the same time).
Add some more role-specific annotations to templates/group_vars_mash_servers There's a lot more that can be added, especially to decouple from some default components like Postgres and Traefik.
2023-11-20 16:20:17 +01:00
authelia_config_storage_mysql_host: "{{ mariadb_identifier if mariadb_enabled and not devture_postgres_enabled | default(false) else '' }}"
Add support for Authelia
2023-09-12 12:26:38 +02:00
authelia_config_storage_mysql_port: "{{ '3306' if mariadb_enabled else '' }}"
authelia_config_storage_mysql_password: "{{ '%s' | format(mash_playbook_generic_secret_key) | password_hash('sha512', 'db.authelia', rounds=655555) | to_uuid }}"
Add some more role-specific annotations to templates/group_vars_mash_servers There's a lot more that can be added, especially to decouple from some default components like Postgres and Traefik.
2023-11-20 16:20:17 +01:00
# /role-specific:mariadb
Add support for Authelia
2023-09-12 12:26:38 +02:00
########################################################################
# #
# /authelia #
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:authelia
Add support for Authelia
2023-09-12 12:26:38 +02:00
Add AUX role
2023-03-20 10:03:59 +01:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:ssh
add missing group vars
2023-03-18 21:08:28 +01:00
########################################################################
# #
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# ssh #
add missing group vars
2023-03-18 21:08:28 +01:00
# #
########################################################################
system_security_ssh_enabled: false
########################################################################
# #
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /ssh #
add missing group vars
2023-03-18 21:08:28 +01:00
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:ssh
add missing group vars
2023-03-18 21:08:28 +01:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:fail2ban
########################################################################
# #
# fail2ban #
# #
########################################################################
add missing group vars
2023-03-18 21:08:28 +01:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
system_security_fail2ban_enabled: false
add missing group vars
2023-03-18 21:08:28 +01:00
add system/swap role
2023-03-18 12:24:46 +01:00
########################################################################
# #
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /fail2ban #
add system/swap role
2023-03-18 12:24:46 +01:00
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:fail2ban
add system/swap role
2023-03-18 12:24:46 +01:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:swap
add system/swap role
2023-03-18 12:24:46 +01:00
########################################################################
# #
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# swap #
add system/swap role
2023-03-18 12:24:46 +01:00
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
system_swap_enabled: false
########################################################################
# #
# /swap #
# #
########################################################################
# /role-specific:swap
add system/swap role
2023-03-18 12:24:46 +01:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:systemd_service_manager
Initial commit
2023-03-15 09:58:12 +01:00
########################################################################
# #
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# systemd_service_manager #
Initial commit
2023-03-15 09:58:12 +01:00
# #
########################################################################
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
mash_playbook_devture_systemd_service_manager_services_list_auto_itemized:
Ensure certain lists (containing role-specific elements) are never empty
2023-11-20 15:54:43 +01:00
# Dummy entry, which is not role-specific.
# Ensures there's at least one entry defined in the list.
- "{{ omit }}"
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# role-specific:backup_borg
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (backup_borg_identifier + '.timer'), 'priority': 5000, 'groups': ['mash', 'backup', 'borg']} if backup_borg_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:backup_borg
# role-specific:adguard_home
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (adguard_home_identifier + '.service'), 'priority': 2000, 'groups': ['mash', 'adguard-home']} if adguard_home_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:adguard_home
# role-specific:appsmith
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (appsmith_identifier + '.service'), 'priority': 2000, 'groups': ['mash', 'appsmith']} if appsmith_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:appsmith
# role-specific:authentik
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (authentik_server_identifier + '.service'), 'priority': 2000, 'groups': ['mash', 'authentik']} if authentik_enabled else omit) }}
- |-
{{ ({'name': (authentik_worker_identifier + '.service'), 'priority': 2000, 'groups': ['mash', 'authentik']} if authentik_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:authentik
# role-specific:authelia
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (authelia_identifier + '.service'), 'priority': 2000, 'groups': ['mash', 'authelia']} if authelia_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:authelia
# role-specific:changedetection
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (changedetection_identifier + '.service'), 'priority': 2100, 'groups': ['mash', 'changedetection']} if changedetection_enabled else omit) }}
- |-
{{ ({'name': (changedetection_playwright_driver_identifier + '.service'), 'priority': 2000, 'groups': ['mash', 'changedetection']} if changedetection_playwright_driver_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:changedetection
# role-specific:clickhouse
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (clickhouse_identifier + '.service'), 'priority': 2000, 'groups': ['mash', 'clickhouse']} if clickhouse_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:clickhouse
# role-specific:collabora_online
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (collabora_online_identifier + '.service'), 'priority': 2000, 'groups': ['mash', 'collabora-online']} if collabora_online_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:collabora_online
# role-specific:postgres
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (devture_postgres_identifier + '.service'), 'priority': 500, 'groups': ['mash', 'postgres']} if devture_postgres_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:postgres
# role-specific:postgres_backup
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (devture_postgres_backup_identifier + '.service'), 'priority': 5000, 'groups': ['mash', 'backup', 'postgres-backup']} if devture_postgres_backup_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:postgres_backup
# role-specific:container_socket_proxy
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (devture_container_socket_proxy_identifier + '.service'), 'priority': 2900, 'groups': ['mash', 'reverse-proxies', 'container-socket-proxy']} if devture_container_socket_proxy_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:container_socket_proxy
# role-specific:traefik
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (devture_traefik_identifier + '.service'), 'priority': 3000, 'groups': ['mash', 'traefik', 'reverse-proxies']} if devture_traefik_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:traefik
# role-specific:woodpecker_ci_server
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (devture_woodpecker_ci_server_identifier + '.service'), 'priority': 4000, 'groups': ['mash', 'woodpecker', 'ci', 'woodpecker-ci-server']} if devture_woodpecker_ci_server_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:woodpecker_ci_server
# role-specific:woodpecker_ci_agent
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (devture_woodpecker_ci_agent_identifier + '.service'), 'priority': 4100, 'groups': ['mash', 'woodpecker', 'ci', 'woodpecker-ci-agent']} if devture_woodpecker_ci_agent_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:woodpecker_ci_agent
# role-specific:docker_registry
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (docker_registry_identifier + '.service'), 'priority': 2000, 'groups': ['mash', 'docker-registry']} if docker_registry_enabled else omit) }}
- |-
{{ ({'name': (docker_registry_identifier + '-garbage-collect.timer'), 'priority': 2500, 'groups': ['mash', 'docker-registry', 'docker-registry-gc']} if docker_registry_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:docker_registry
# role-specific:docker_registry_browser
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (docker_registry_browser_identifier + '.service'), 'priority': 2000, 'groups': ['mash', 'docker-registry-browser']} if docker_registry_browser_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:docker_registry_browser
# role-specific:docker_registry_purger
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (docker_registry_purger_identifier + '.timer'), 'priority': 3000, 'groups': ['mash', 'docker-registry-purger']} if docker_registry_purger_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:docker_registry_purger
# role-specific:echoip
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (echoip_identifier + '.service'), 'priority': 2000, 'groups': ['mash', 'echoip']} if echoip_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:echoip
# role-specific:firezone
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (firezone_identifier + '.service'), 'priority': 2000, 'groups': ['mash', 'firezone']} if firezone_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:firezone
# role-specific:focalboard
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (focalboard_identifier + '.service'), 'priority': 2000, 'groups': ['mash', 'focalboard']} if focalboard_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:focalboard
# role-specific:freshrss
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (freshrss_identifier + '.service'), 'priority': 2000, 'groups': ['mash', 'freshrss']} if freshrss_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:freshrss
# role-specific:funkwhale
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (funkwhale_api_identifier + '.service'), 'priority': 2000, 'groups': ['mash', 'funkwhale']} if funkwhale_enabled else omit) }}
- |-
{{ ({'name': (funkwhale_frontend_identifier + '.service'), 'priority': 2000, 'groups': ['mash', 'funkwhale']} if funkwhale_enabled else omit) }}
- |-
{{ ({'name': (funkwhale_celery_beat_identifier + '.service'), 'priority': 2000, 'groups': ['mash', 'funkwhale']} if funkwhale_enabled else omit) }}
- |-
{{ ({'name': (funkwhale_celery_worker_identifier + '.service'), 'priority': 2000, 'groups': ['mash', 'funkwhale']} if funkwhale_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:funkwhale
# role-specific:gitea
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (gitea_identifier + '.service'), 'priority': 2000, 'groups': ['mash', 'gitea', 'gitea-server']} if gitea_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:gitea
# role-specific:gotosocial
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (gotosocial_identifier + '.service'), 'priority': 2000, 'groups': ['mash', 'gotosocial']} if gotosocial_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:gotosocial
# role-specific:grafana
Initial work on optimization commands The playbook can now optimize itself based on the enabled components in for all hosts in the inventory (`just optimize`) or for a specific host (`just optimize-for-host HOSTNAME`). The optimized playbook will have: - fewer requirements (fewer roles need to be installed by `just roles`) - a shorter and quicker to evaluate `group_vars/mash_servers` file - a `setup.yml` file which includes less roles Running the playbook optimized is still work in progress. There still probably exist various role dependencies in the group-vars file, etc. The `optimize-reset` command aims to restore your playbook to a non-optimized state, which should work as before (and not experience bugs). The playbook takes care to notice of changes to the various files in `templates/` (`setup.yml`, `requirements.yml`, `group_vars_mash_servers`) and update your optimized or non-optimized copies that are derived from these templates. To do this, it keeps `.srchash` files in the `run/` directory. When it notices a change in the source file's hash (by comparing to the `.srchash` file), it will update you to the new template. Optimization state is stored in a file in `run/` as well (`optimization-vars-files.state`). Should the playbook notice changes in the source `template/` files, it should update you and re-optimize using the same parameters as before (read from the state file).
2023-11-20 15:29:06 +01:00
- |-
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
{{ ({'name': (grafana_identifier + '.service'), 'priority': 2000, 'groups': ['mash', 'grafana']} if grafana_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:grafana
# role-specific:hubsite
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (hubsite_identifier + '.service'), 'priority': 2000, 'groups': ['mash', 'hubsite']} if hubsite_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:hubsite
# role-specific:healthchecks
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (healthchecks_identifier + '.service'), 'priority': 2000, 'groups': ['mash', 'healthchecks']} if healthchecks_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:healthchecks
# role-specific:ilmo
- |-
{{ ({'name': (ilmo_identifier + '.service'), 'priority': 2000, 'groups': ['mash', 'ilmo']} if ilmo_enabled else omit) }}
# /role-specific:ilmo
# role-specific:infisical
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (infisical_identifier + '-backend.service'), 'priority': 2000, 'groups': ['mash', 'infisical', 'infisical-backend']} if infisical_enabled else omit) }}
- |-
{{ ({'name': (infisical_identifier + '-frontend.service'), 'priority': 2000, 'groups': ['mash', 'infisical', 'infisical-frontend']} if infisical_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:infisical
# role-specific:influxdb
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (influxdb_identifier + '.service'), 'priority': 2000, 'groups': ['mash', 'influxdb']} if influxdb_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:influxdb
# role-specific:jitsi
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (jitsi_identifier + '-web.service'), 'priority': 4200, 'groups': ['mash', 'jitsi', 'jitsi-web']} if jitsi_enabled else omit) }}
- |-
{{ ({'name': (jitsi_identifier + '-prosody.service'), 'priority': 4000, 'groups': ['mash', 'jitsi', 'jitsi-prosody']} if jitsi_enabled else omit) }}
- |-
{{ ({'name': (jitsi_identifier + '-jicofo.service'), 'priority': 4100, 'groups': ['mash', 'jitsi', 'jitsi-jicofo']} if jitsi_enabled else omit) }}
- |-
{{ ({'name': (jitsi_identifier + '-jvb.service'), 'priority': 4100, 'groups': ['mash', 'jitsi', 'jitsi-jvb']} if jitsi_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:jitsi
# role-specific:keycloak
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (keycloak_identifier + '.service'), 'priority': 1000, 'groups': ['mash', 'keycloak']} if keycloak_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:keycloak
# role-specific:lago
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (lago_identifier + '-api.service'), 'priority': 2000, 'groups': ['mash', 'lago', 'lago-api']} if lago_enabled else omit) }}
- |-
{{ ({'name': (lago_identifier + '-api-worker.service'), 'priority': 2500, 'groups': ['mash', 'lago', 'lago-api-worker']} if lago_enabled else omit) }}
- |-
{{ ({'name': (lago_identifier + '-api-clock.service'), 'priority': 2500, 'groups': ['mash', 'lago', 'lago-api-clock']} if lago_enabled else omit) }}
- |-
{{ ({'name': (lago_identifier + '-front.service'), 'priority': 2200, 'groups': ['mash', 'lago', 'lago-front']} if lago_enabled else omit) }}
- |-
{{ ({'name': (lago_identifier + '-pdf.service'), 'priority': 1900, 'groups': ['mash', 'lago', 'lago-pdf']} if lago_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:lago
# role-specific:linkding
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (linkding_identifier + '.service'), 'priority': 2000, 'groups': ['mash', 'linkding']} if linkding_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:linkding
# role-specific:miniflux
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (miniflux_identifier + '.service'), 'priority': 2000, 'groups': ['mash', 'miniflux']} if miniflux_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:miniflux
# role-specific:mobilizon
- |-
{{ ({'name': (mobilizon_identifier + '.service'), 'priority': 2000, 'groups': ['mash', 'mobilizon']} if mobilizon_enabled else omit) }}
# /role-specific:mobilizon
# role-specific:mongodb
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (mongodb_identifier + '.service'), 'priority': 2000, 'groups': ['mash', 'mongodb']} if mongodb_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:mongodb
# role-specific:mosquitto
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (mosquitto_identifier + '.service'), 'priority': 2000, 'groups': ['mash', 'mosquitto']} if mosquitto_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:mosquitto
# role-specific:mrs
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (mrs_identifier + '.service'), 'priority': 2000, 'groups': ['mash', 'mrs']} if mrs_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:mrs
# role-specific:n8n
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (n8n_identifier + '.service'), 'priority': 2000, 'groups': ['mash', 'n8n']} if n8n_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:n8n
# role-specific:navidrome
Initial work on optimization commands The playbook can now optimize itself based on the enabled components in for all hosts in the inventory (`just optimize`) or for a specific host (`just optimize-for-host HOSTNAME`). The optimized playbook will have: - fewer requirements (fewer roles need to be installed by `just roles`) - a shorter and quicker to evaluate `group_vars/mash_servers` file - a `setup.yml` file which includes less roles Running the playbook optimized is still work in progress. There still probably exist various role dependencies in the group-vars file, etc. The `optimize-reset` command aims to restore your playbook to a non-optimized state, which should work as before (and not experience bugs). The playbook takes care to notice of changes to the various files in `templates/` (`setup.yml`, `requirements.yml`, `group_vars_mash_servers`) and update your optimized or non-optimized copies that are derived from these templates. To do this, it keeps `.srchash` files in the `run/` directory. When it notices a change in the source file's hash (by comparing to the `.srchash` file), it will update you to the new template. Optimization state is stored in a file in `run/` as well (`optimization-vars-files.state`). Should the playbook notice changes in the source `template/` files, it should update you and re-optimize using the same parameters as before (read from the state file).
2023-11-20 15:29:06 +01:00
- |-
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
{{ ({'name': (navidrome_identifier + '.service'), 'priority': 2000, 'groups': ['mash', 'navidrome']} if navidrome_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:navidrome
# role-specific:netbox
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (netbox_identifier + '.service'), 'priority': 2000, 'groups': ['mash', 'netbox', 'netbox-server']} if netbox_enabled else omit) }}
- |-
{{ ({'name': (netbox_identifier + '-worker.service'), 'priority': 2500, 'groups': ['mash', 'netbox', 'netbox-worker']} if netbox_enabled else omit) }}
- |-
{{ ({'name': (netbox_identifier + '-housekeeping.service'), 'priority': 2500, 'groups': ['mash', 'netbox', 'netbox-housekeeping']} if netbox_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:netbox
# role-specific:nextcloud
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (nextcloud_identifier + '-server.service'), 'priority': 2000, 'groups': ['mash', 'nextcloud', 'nextcloud-server']} if nextcloud_enabled else omit) }}
- |-
{{ ({'name': (nextcloud_identifier + '-cron.timer'), 'priority': 2500, 'groups': ['mash', 'nextcloud', 'nextcloud-cron']} if nextcloud_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:nextcloud
# role-specific:mariadb
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (mariadb_identifier + '.service'), 'priority': 500, 'groups': ['mash', 'mariadb']} if mariadb_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:mariadb
# role-specific:outline
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (outline_identifier + '.service'), 'priority': 2000, 'groups': ['mash', 'outline']} if outline_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:outline
# role-specific:owncast
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (owncast_identifier + '.service'), 'priority': 2000, 'groups': ['mash', 'owncast']} if owncast_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:owncast
# role-specific:oxitraffic
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (oxitraffic_identifier + '.service'), 'priority': 2000, 'groups': ['mash', 'oxitraffic']} if oxitraffic_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:oxitraffic
# role-specific:peertube
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (peertube_identifier + '.service'), 'priority': 2000, 'groups': ['mash', 'peertube']} if peertube_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:peertube
# role-specific:postgis
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (postgis_identifier + '.service'), 'priority': 2000, 'groups': ['mash', 'metrics', 'postgis']} if postgis_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:postgis
# role-specific:prometheus
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (prometheus_identifier + '.service'), 'priority': 2000, 'groups': ['mash', 'metrics', 'prometheus']} if prometheus_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:prometheus
# role-specific:prometheus_blackbox_exporter
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (prometheus_blackbox_exporter_identifier + '.service'), 'priority': 500, 'groups': ['mash', 'metrics', 'prometheus-blackbox-exporter']} if prometheus_blackbox_exporter_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:prometheus_blackbox_exporter
# role-specific:prometheus_ssh_exporter
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (prometheus_ssh_exporter_identifier + '.service'), 'priority': 500, 'groups': ['mash', 'metrics', 'prometheus-ssh-exporter']} if prometheus_ssh_exporter_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:prometheus_ssh_exporter
# role-specific:prometheus_node_exporter
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (prometheus_node_exporter_identifier + '.service'), 'priority': 500, 'groups': ['mash', 'metrics', 'prometheus-node-exporter']} if prometheus_node_exporter_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:prometheus_node_exporter
# role-specific:prometheus_postgres_exporter
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (prometheus_postgres_exporter_identifier + '.service'), 'priority': 500, 'groups': ['mash', 'metrics', 'prometheus-postgres-exporter']} if prometheus_postgres_exporter_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:prometheus_postgres_exporter
# role-specific:radicale
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (radicale_identifier + '.service'), 'priority': 2000, 'groups': ['mash', 'radicale']} if radicale_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:radicale
# role-specific:redmine
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (redmine_identifier + '.service'), 'priority': 2000, 'groups': ['mash', 'redmine']} if redmine_enabled else omit) }}
- |-
{{ ({'name': (redmine_identifier + '-send-reminders.timer'), 'priority': 2000, 'groups': ['mash', 'redmine']} if redmine_enabled else omit) }}
- |-
{{ ({'name': (redmine_identifier + '-recurring-tasks.timer'), 'priority': 2000, 'groups': ['mash', 'redmine']} if redmine_enabled and redmine_recurring_tasks_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:redmine
# role-specific:redis
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (redis_identifier + '.service'), 'priority': 750, 'groups': ['mash', 'redis']} if redis_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:redis
# role-specific:roundcube
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (roundcube_identifier + '.service'), 'priority': 2000, 'groups': ['mash', 'roundcube']} if roundcube_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:roundcube
# role-specific:rumqttd
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (rumqttd_identifier + '.service'), 'priority': 2000, 'groups': ['mash', 'rumqttd']} if rumqttd_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:rumqttd
# role-specific:soft_serve
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (soft_serve_identifier + '.service'), 'priority': 2000, 'groups': ['mash', 'soft-serve']} if soft_serve_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:soft_serve
# role-specific:syncthing
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (syncthing_identifier + '.service'), 'priority': 2000, 'groups': ['mash', 'syncthing']} if syncthing_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:syncthing
# role-specific:telegraf
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (telegraf_identifier + '.service'), 'priority': 2000, 'groups': ['mash', 'telegraf']} if telegraf_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:telegraf
# role-specific:vaultwarden
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (vaultwarden_identifier + '.service'), 'priority': 2000, 'groups': ['mash', 'vaultwarden', 'vaultwarden-server']} if vaultwarden_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:vaultwarden
# role-specific:uptime_kuma
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (uptime_kuma_identifier + '.service'), 'priority': 2000, 'groups': ['mash', 'uptime-kuma']} if uptime_kuma_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:uptime_kuma
# role-specific:wg_easy
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (wg_easy_identifier + '.service'), 'priority': 2000, 'groups': ['mash', 'wg-easy']} if wg_easy_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:wg_easy
# role-specific:forgejo
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{ ({'name': (forgejo_identifier + '.service'), 'priority': 2000, 'groups': ['mash', 'forgejo', 'forgejo-server']} if forgejo_enabled else omit) }}
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:forgejo
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
devture_systemd_service_manager_services_list_auto: "{{ mash_playbook_devture_systemd_service_manager_services_list_auto_itemized | reject('equalto', omit) }}"
Initial commit
2023-03-15 09:58:12 +01:00
########################################################################
# #
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /systemd_service_manager #
Initial commit
2023-03-15 09:58:12 +01:00
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:systemd_service_manager
Initial commit
2023-03-15 09:58:12 +01:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:postgres
Initial commit
2023-03-15 09:58:12 +01:00
########################################################################
# #
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# postgres #
Initial commit
2023-03-15 09:58:12 +01:00
# #
########################################################################
devture_postgres_enabled: false
Make service prefix configurable
2023-03-16 13:41:37 +01:00
devture_postgres_identifier: "{{ mash_playbook_service_identifier_prefix }}postgres"
Initial commit
2023-03-15 09:58:12 +01:00
devture_postgres_architecture: "{{ mash_playbook_architecture }}"
Add mash_playbook_service_base_directory_name_prefix
2023-03-25 08:49:40 +01:00
devture_postgres_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}postgres"
Initial commit
2023-03-15 09:58:12 +01:00
devture_postgres_uid: "{{ mash_playbook_uid }}"
devture_postgres_gid: "{{ mash_playbook_gid }}"
Auto-populate devture_postgres_systemd_services_to_stop_for_maintenance_list_auto based on devture_systemd_service_manager_services_list_auto
2023-09-16 10:46:57 +02:00
# This includes everything for maximum safety.
# It may not be optimal though, because some services may not be dependant on Postgres at all, etc.
devture_postgres_systemd_services_to_stop_for_maintenance_list_auto: "{{ devture_systemd_service_manager_services_list_auto | map(attribute='name') | reject('equalto', (devture_postgres_identifier + '.service')) }}"
Initial commit
2023-03-15 09:58:12 +01:00
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
mash_playbook_devture_postgres_managed_databases_auto_itemized:
Ensure certain lists (containing role-specific elements) are never empty
2023-11-20 15:54:43 +01:00
# Dummy entry, which is not role-specific.
# Ensures there's at least one entry defined in the list.
- "{{ omit }}"
Add role-specific annotations for mash_playbook_devture_postgres_managed_databases_auto_itemized
2023-11-20 15:48:03 +01:00
# role-specific:authelia
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{
({
'name': authelia_config_storage_postgres_database,
'username': authelia_config_storage_postgres_username,
'password': authelia_config_storage_postgres_password,
} if authelia_enabled and authelia_config_storage_postgres_host == devture_postgres_identifier else omit)
}}
Add role-specific annotations for mash_playbook_devture_postgres_managed_databases_auto_itemized
2023-11-20 15:48:03 +01:00
# /role-specific:authelia
# role-specific:authentik
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{
({
'name': authentik_database_name,
'username': authentik_database_username,
'password': authentik_database_password,
} if authentik_enabled and authentik_database_hostname == devture_postgres_identifier else omit)
}}
Add role-specific annotations for mash_playbook_devture_postgres_managed_databases_auto_itemized
2023-11-20 15:48:03 +01:00
# /role-specific:authentik
# role-specific:focalboard
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{
({
'name': focalboard_database_name,
'username': focalboard_database_username,
'password': focalboard_database_password,
} if focalboard_enabled and focalboard_database_type == 'postgres' and focalboard_database_hostname == devture_postgres_identifier else omit)
}}
Add role-specific annotations for mash_playbook_devture_postgres_managed_databases_auto_itemized
2023-11-20 15:48:03 +01:00
# /role-specific:focalboard
# role-specific:freshrss
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{
({
'name': freshrss_database_name,
'username': freshrss_database_username,
'password': freshrss_database_password,
} if freshrss_enabled and freshrss_database_hostname == devture_postgres_identifier else omit)
}}
Add role-specific annotations for mash_playbook_devture_postgres_managed_databases_auto_itemized
2023-11-20 15:48:03 +01:00
# /role-specific:freshrss
# role-specific:funkwhale
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{
({
'name': funkwhale_database_name,
'username': funkwhale_database_username,
'password': funkwhale_database_password,
} if funkwhale_enabled and funkwhale_database_hostname == devture_postgres_identifier else omit)
}}
Add role-specific annotations for mash_playbook_devture_postgres_managed_databases_auto_itemized
2023-11-20 15:48:03 +01:00
# /role-specific:funkwhale
# role-specific:gitea
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{
({
'name': gitea_config_database_name,
'username': gitea_config_database_username,
'password': gitea_config_database_password,
} if gitea_enabled else omit)
}}
Add role-specific annotations for mash_playbook_devture_postgres_managed_databases_auto_itemized
2023-11-20 15:48:03 +01:00
# /role-specific:gitea
# role-specific:healthchecks
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{
({
'name': healthchecks_database_name,
'username': healthchecks_database_username,
'password': healthchecks_database_password,
} if healthchecks_enabled and healthchecks_database_hostname == devture_postgres_identifier else omit)
}}
Add role-specific annotations for mash_playbook_devture_postgres_managed_databases_auto_itemized
2023-11-20 15:48:03 +01:00
# /role-specific:healthchecks
# role-specific:woodpecker_ci_server
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{
({
'name': devture_woodpecker_ci_server_database_datasource_db_name,
'username': devture_woodpecker_ci_server_database_datasource_username,
'password': devture_woodpecker_ci_server_database_datasource_password,
} if devture_woodpecker_ci_server_enabled else omit)
}}
Add role-specific annotations for mash_playbook_devture_postgres_managed_databases_auto_itemized
2023-11-20 15:48:03 +01:00
# /role-specific:woodpecker_ci_server
# role-specific:gotosocial
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{
({
'name': gotosocial_database_name,
'username': gotosocial_database_username,
'password': gotosocial_database_password,
} if gotosocial_enabled else omit)
}}
Add role-specific annotations for mash_playbook_devture_postgres_managed_databases_auto_itemized
2023-11-20 15:48:03 +01:00
# /role-specific:gotosocial
# role-specific:ilmo
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{
({
'name': ilmo_database_name,
'username': ilmo_database_username,
'password': ilmo_database_password,
} if ilmo_enabled else omit)
}}
Add role-specific annotations for mash_playbook_devture_postgres_managed_databases_auto_itemized
2023-11-20 15:48:03 +01:00
# /role-specific:ilmo
# role-specific:keycloak
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{
({
'name': keycloak_database_name,
'username': keycloak_database_username,
'password': keycloak_database_password,
} if keycloak_enabled and keycloak_database_type == 'postgres' and keycloak_database_hostname == devture_postgres_identifier else omit)
}}
Add role-specific annotations for mash_playbook_devture_postgres_managed_databases_auto_itemized
2023-11-20 15:48:03 +01:00
# /role-specific:keycloak
# role-specific:lago
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{
({
'name': lago_database_name,
'username': lago_database_username,
'password': lago_database_password,
} if lago_enabled and lago_database_hostname == devture_postgres_identifier else omit)
}}
Add role-specific annotations for mash_playbook_devture_postgres_managed_databases_auto_itemized
2023-11-20 15:48:03 +01:00
# /role-specific:lago
# role-specific:linkding
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{
({
'name': linkding_database_name,
'username': linkding_database_username,
'password': linkding_database_password,
} if linkding_enabled and linkding_database_engine == 'postgres' else omit)
}}
Add role-specific annotations for mash_playbook_devture_postgres_managed_databases_auto_itemized
2023-11-20 15:48:03 +01:00
# /role-specific:linkding
# role-specific:miniflux
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{
({
'name': miniflux_database_name,
'username': miniflux_database_username,
'password': miniflux_database_password,
} if miniflux_enabled else omit)
}}
Add role-specific annotations for mash_playbook_devture_postgres_managed_databases_auto_itemized
2023-11-20 15:48:03 +01:00
# /role-specific:miniflux
# role-specific:redmine
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{
({
'name': redmine_database_name,
'username': redmine_database_username,
'password': redmine_database_password,
} if redmine_enabled else omit)
}}
Add role-specific annotations for mash_playbook_devture_postgres_managed_databases_auto_itemized
2023-11-20 15:48:03 +01:00
# /role-specific:redmine
# role-specific:n8n
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{
({
'name': n8n_database_name,
'username': n8n_database_username,
'password': n8n_database_password,
} if n8n_enabled else omit)
}}
Add role-specific annotations for mash_playbook_devture_postgres_managed_databases_auto_itemized
2023-11-20 15:48:03 +01:00
# /role-specific:n8n
# role-specific:netbox
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{
({
'name': netbox_database_name,
'username': netbox_database_username,
'password': netbox_database_password,
} if netbox_enabled else omit)
}}
Add role-specific annotations for mash_playbook_devture_postgres_managed_databases_auto_itemized
2023-11-20 15:48:03 +01:00
# /role-specific:netbox
# role-specific:nextcloud
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{
({
'name': nextcloud_database_name,
'username': nextcloud_database_username,
'password': nextcloud_database_password,
} if nextcloud_enabled else omit)
}}
Add role-specific annotations for mash_playbook_devture_postgres_managed_databases_auto_itemized
2023-11-20 15:48:03 +01:00
# /role-specific:nextcloud
# role-specific:outline
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{
({
'name': outline_database_name,
'username': outline_database_username,
'password': outline_database_password,
} if outline_enabled and outline_database_hostname == devture_postgres_identifier else omit)
}}
Add role-specific annotations for mash_playbook_devture_postgres_managed_databases_auto_itemized
2023-11-20 15:48:03 +01:00
# /role-specific:outline
# role-specific:oxitraffic
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{
({
'name': oxitraffic_database_name,
'username': oxitraffic_database_username,
'password': oxitraffic_database_password,
} if oxitraffic_enabled and oxitraffic_database_hostname == devture_postgres_identifier else omit)
}}
Add role-specific annotations for mash_playbook_devture_postgres_managed_databases_auto_itemized
2023-11-20 15:48:03 +01:00
# /role-specific:oxitraffic
# role-specific:peertube
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{
({
'name': peertube_config_database_name,
'username': peertube_config_database_username,
'password': peertube_config_database_password,
} if peertube_enabled else omit)
}}
Add role-specific annotations for mash_playbook_devture_postgres_managed_databases_auto_itemized
2023-11-20 15:48:03 +01:00
# /role-specific:peertube
# role-specific:prometheus_postgres_exporter
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{
({
'name': prometheus_postgres_exporter_database_name,
'username': prometheus_postgres_exporter_database_username,
'password': prometheus_postgres_exporter_database_password,
} if prometheus_postgres_exporter_enabled else omit)
}}
Add role-specific annotations for mash_playbook_devture_postgres_managed_databases_auto_itemized
2023-11-20 15:48:03 +01:00
# /role-specific:prometheus_postgres_exporter
# role-specific:firezone
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{
({
'name': firezone_database_name,
'username': firezone_database_user,
'password': firezone_database_password,
} if firezone_enabled else omit)
}}
Add role-specific annotations for mash_playbook_devture_postgres_managed_databases_auto_itemized
2023-11-20 15:48:03 +01:00
# /role-specific:firezone
# role-specific:vaultwarden
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{
({
'name': vaultwarden_database_name,
'username': vaultwarden_database_username,
'password': vaultwarden_database_password,
} if vaultwarden_enabled else omit)
}}
Add role-specific annotations for mash_playbook_devture_postgres_managed_databases_auto_itemized
2023-11-20 15:48:03 +01:00
# /role-specific:vaultwarden
# role-specific:forgejo
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{
({
'name': forgejo_config_database_name,
'username': forgejo_config_database_username,
'password': forgejo_config_database_password,
} if forgejo_enabled else omit)
}}
Add role-specific annotations for mash_playbook_devture_postgres_managed_databases_auto_itemized
2023-11-20 15:48:03 +01:00
# /role-specific:forgejo
# role-specific:roundcube
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{
({
'name': roundcube_database_name,
'username': roundcube_database_username,
'password': roundcube_database_password,
} if roundcube_enabled and roundcube_database_hostname == devture_postgres_identifier else omit)
}}
Add role-specific annotations for mash_playbook_devture_postgres_managed_databases_auto_itemized
2023-11-20 15:48:03 +01:00
# /role-specific:roundcube
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
devture_postgres_managed_databases_auto: "{{ mash_playbook_devture_postgres_managed_databases_auto_itemized | reject('equalto', omit) }}"
Initial commit
2023-03-15 09:58:12 +01:00
########################################################################
# #
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /postgres #
Initial commit
2023-03-15 09:58:12 +01:00
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:postgres
Initial commit
2023-03-15 09:58:12 +01:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:postgres_backup
Add Postgres Backup
2023-03-17 15:40:08 +01:00
########################################################################
# #
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# postgres_backup #
Add Postgres Backup
2023-03-17 15:40:08 +01:00
# #
########################################################################
devture_postgres_backup_enabled: false
Add explicit names for roles (affects their install paths)
2023-11-19 13:09:18 +01:00
devture_postgres_backup_postgres_role_include_name: galaxy/postgres
Add Postgres Backup
2023-03-17 15:40:08 +01:00
devture_postgres_backup_identifier: "{{ mash_playbook_service_identifier_prefix }}postgres-backup"
devture_postgres_backup_architecture: "{{ mash_playbook_architecture }}"
Add mash_playbook_service_base_directory_name_prefix
2023-03-25 08:49:40 +01:00
devture_postgres_backup_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}postgres-backup"
Add Postgres Backup
2023-03-17 15:40:08 +01:00
devture_postgres_backup_systemd_required_services_list: |
{{
(['docker.service'])
+
([(devture_postgres_identifier + '.service')] if devture_postgres_enabled else [])
}}
devture_postgres_backup_container_network: "{{ devture_postgres_container_network }}"
devture_postgres_backup_uid: "{{ mash_playbook_uid }}"
devture_postgres_backup_gid: "{{ mash_playbook_gid }}"
Add some more role-specific annotations to templates/group_vars_mash_servers There's a lot more that can be added, especially to decouple from some default components like Postgres and Traefik.
2023-11-20 16:20:17 +01:00
# role-specific:postgres
Add Postgres Backup
2023-03-17 15:40:08 +01:00
devture_postgres_backup_connection_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"
devture_postgres_backup_connection_port: "{{ devture_postgres_connection_port if devture_postgres_enabled else 5432 }}"
devture_postgres_backup_connection_username: "{{ devture_postgres_connection_username if devture_postgres_enabled else '' }}"
devture_postgres_backup_connection_password: "{{ devture_postgres_connection_password if devture_postgres_enabled else '' }}"
devture_postgres_backup_postgres_data_path: "{{ devture_postgres_data_path if devture_postgres_enabled else '' }}"
devture_postgres_backup_databases: "{{ devture_postgres_managed_databases | map(attribute='name') if devture_postgres_enabled else [] }}"
Add some more role-specific annotations to templates/group_vars_mash_servers There's a lot more that can be added, especially to decouple from some default components like Postgres and Traefik.
2023-11-20 16:20:17 +01:00
# /role-specific:postgres
Add Postgres Backup
2023-03-17 15:40:08 +01:00
########################################################################
# #
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /postgres_backup #
Add Postgres Backup
2023-03-17 15:40:08 +01:00
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:postgres_backup
Add Postgres Backup
2023-03-17 15:40:08 +01:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:playbook_state_preserver
Initial commit
2023-03-15 09:58:12 +01:00
########################################################################
# #
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# playbook_state_preserver #
Initial commit
2023-03-15 09:58:12 +01:00
# #
########################################################################
# To completely disable this feature, use `devture_playbook_state_preserver_enabled: false`.
devture_playbook_state_preserver_uid: "{{ mash_playbook_uid }}"
devture_playbook_state_preserver_gid: "{{ mash_playbook_gid }}"
Add mash_playbook_service_base_directory_name_prefix
2023-03-25 08:49:40 +01:00
devture_playbook_state_preserver_vars_preservation_dst: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}vars.yml"
Initial commit
2023-03-15 09:58:12 +01:00
Add mash_playbook_service_base_directory_name_prefix
2023-03-25 08:49:40 +01:00
devture_playbook_state_preserver_commit_hash_preservation_dst: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}git_hash.yml"
Initial commit
2023-03-15 09:58:12 +01:00
########################################################################
# #
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /playbook_state_preserver #
Initial commit
2023-03-15 09:58:12 +01:00
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:playbook_state_preserver
Initial commit
2023-03-15 09:58:12 +01:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:container_socket_proxy
Initial commit
2023-03-15 09:58:12 +01:00
########################################################################
# #
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# container_socket_proxy #
Initial commit
2023-03-15 09:58:12 +01:00
# #
########################################################################
devture_container_socket_proxy_enabled: "{{ devture_traefik_enabled }}"
Make service prefix configurable
2023-03-16 13:41:37 +01:00
devture_container_socket_proxy_identifier: "{{ mash_playbook_service_identifier_prefix }}container-socket-proxy"
Initial commit
2023-03-15 09:58:12 +01:00
Add mash_playbook_service_base_directory_name_prefix
2023-03-25 08:49:40 +01:00
devture_container_socket_proxy_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}container-socket-proxy"
Initial commit
2023-03-15 09:58:12 +01:00
devture_container_socket_proxy_uid: "{{ mash_playbook_uid }}"
devture_container_socket_proxy_gid: "{{ mash_playbook_gid }}"
# Traefik requires read access to the containers APIs to do its job
devture_container_socket_proxy_api_containers_enabled: true
########################################################################
# #
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /container_socket_proxy #
Initial commit
2023-03-15 09:58:12 +01:00
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:container_socket_proxy
Initial commit
2023-03-15 09:58:12 +01:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:traefik
Initial commit
2023-03-15 09:58:12 +01:00
########################################################################
# #
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# traefik #
Initial commit
2023-03-15 09:58:12 +01:00
# #
########################################################################
devture_traefik_enabled: "{{ mash_playbook_reverse_proxy_type == 'playbook-managed-traefik' }}"
Make service prefix configurable
2023-03-16 13:41:37 +01:00
devture_traefik_identifier: "{{ mash_playbook_service_identifier_prefix }}traefik"
Initial commit
2023-03-15 09:58:12 +01:00
Add mash_playbook_service_base_directory_name_prefix
2023-03-25 08:49:40 +01:00
devture_traefik_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}traefik"
Initial commit
2023-03-15 09:58:12 +01:00
devture_traefik_uid: "{{ mash_playbook_uid }}"
devture_traefik_gid: "{{ mash_playbook_gid }}"
Add some more role-specific annotations to templates/group_vars_mash_servers There's a lot more that can be added, especially to decouple from some default components like Postgres and Traefik.
2023-11-20 16:20:17 +01:00
# role-specific:container_socket_proxy
Initial commit
2023-03-15 09:58:12 +01:00
devture_traefik_config_providers_docker_endpoint: "{{ devture_container_socket_proxy_endpoint if devture_container_socket_proxy_enabled else 'unix:///var/run/docker.sock' }}"
Add some more role-specific annotations to templates/group_vars_mash_servers There's a lot more that can be added, especially to decouple from some default components like Postgres and Traefik.
2023-11-20 16:20:17 +01:00
# /role-specific:container_socket_proxy
Initial commit
2023-03-15 09:58:12 +01:00
Switch from devture_traefik_container_additional_networks to devture_traefik_container_additional_networks_auto Related to https://github.com/devture/com.devture.ansible.role.traefik/commit/e3375d56f36df250d4adacfa8cae29a050771de4
2023-12-05 08:18:05 +01:00
devture_traefik_container_additional_networks_auto: |
Initial commit
2023-03-15 09:58:12 +01:00
{{
Add some more role-specific annotations to templates/group_vars_mash_servers There's a lot more that can be added, especially to decouple from some default components like Postgres and Traefik.
2023-11-20 16:20:17 +01:00
([devture_container_socket_proxy_container_network] if devture_container_socket_proxy_enabled | default(false) else [])
Initial commit
2023-03-15 09:58:12 +01:00
}}
devture_traefik_systemd_required_services_list: |
{{
(['docker.service'])
+
Add some more role-specific annotations to templates/group_vars_mash_servers There's a lot more that can be added, especially to decouple from some default components like Postgres and Traefik.
2023-11-20 16:20:17 +01:00
([devture_container_socket_proxy_identifier + '.service'] if devture_container_socket_proxy_enabled | default(false) else [])
Initial commit
2023-03-15 09:58:12 +01:00
}}
########################################################################
# #
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /traefik #
Initial commit
2023-03-15 09:58:12 +01:00
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:traefik
Initial commit
2023-03-15 09:58:12 +01:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:docker_sdk_for_python
Initial commit
2023-03-15 09:58:12 +01:00
########################################################################
# #
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# docker_sdk_for_python #
Initial commit
2023-03-15 09:58:12 +01:00
# #
########################################################################
Do not enable Docker by default
2023-03-25 09:02:03 +01:00
devture_docker_sdk_for_python_installation_enabled: false
Initial commit
2023-03-15 09:58:12 +01:00
########################################################################
# #
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /docker_sdk_for_python #
Initial commit
2023-03-15 09:58:12 +01:00
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:docker_sdk_for_python
Initial commit
2023-03-15 09:58:12 +01:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:timesync
Initial commit
2023-03-15 09:58:12 +01:00
########################################################################
# #
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# timesync #
Initial commit
2023-03-15 09:58:12 +01:00
# #
########################################################################
# To completely disable installing systemd-timesyncd/ntpd, use `devture_timesync_installation_enabled: false`.
devture_timesync_installation_enabled: false
########################################################################
# #
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /timesync #
Initial commit
2023-03-15 09:58:12 +01:00
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:timesync
Initial commit
2023-03-15 09:58:12 +01:00
Add Adguard Home service
2023-03-24 17:01:21 +01:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:adguard_home
Add Adguard Home service
2023-03-24 17:01:21 +01:00
########################################################################
# #
# adguard-home #
# #
########################################################################
adguard_home_enabled: false
adguard_home_identifier: "{{ mash_playbook_service_identifier_prefix }}adguard-home"
adguard_home_uid: "{{ mash_playbook_uid }}"
adguard_home_gid: "{{ mash_playbook_gid }}"
Add mash_playbook_service_base_directory_name_prefix
2023-03-25 08:49:40 +01:00
adguard_home_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}adguard-home"
Add Adguard Home service
2023-03-24 17:01:21 +01:00
adguard_home_container_additional_networks: |
{{
([mash_playbook_reverse_proxyable_services_additional_network] if mash_playbook_reverse_proxyable_services_additional_network else [])
}}
Add some more role-specific annotations to templates/group_vars_mash_servers There's a lot more that can be added, especially to decouple from some default components like Postgres and Traefik.
2023-11-20 16:20:17 +01:00
# role-specific:traefik
Add Adguard Home service
2023-03-24 17:01:21 +01:00
adguard_home_container_labels_traefik_enabled: "{{ mash_playbook_traefik_labels_enabled }}"
adguard_home_container_labels_traefik_docker_network: "{{ mash_playbook_reverse_proxyable_services_additional_network }}"
adguard_home_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"
adguard_home_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"
Add some more role-specific annotations to templates/group_vars_mash_servers There's a lot more that can be added, especially to decouple from some default components like Postgres and Traefik.
2023-11-20 16:20:17 +01:00
# /role-specific:traefik
Add Adguard Home service
2023-03-24 17:01:21 +01:00
########################################################################
# #
# /adguard-home #
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:adguard_home
Add Adguard Home service
2023-03-24 17:01:21 +01:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:appsmith
Remove unused var, typo
2023-04-22 13:30:57 +02:00
########################################################################
Add Appsmith support
2023-04-17 08:42:47 +02:00
# #
# appsmith #
# #
########################################################################
appsmith_enabled: false
appsmith_identifier: "{{ mash_playbook_service_identifier_prefix }}appsmith"
appsmith_uid: "{{ mash_playbook_uid }}"
appsmith_gid: "{{ mash_playbook_gid }}"
appsmith_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}appsmith"
appsmith_container_additional_networks_auto: |
{{
([mash_playbook_reverse_proxyable_services_additional_network] if mash_playbook_reverse_proxyable_services_additional_network else [])
}}
Add some more role-specific annotations to templates/group_vars_mash_servers There's a lot more that can be added, especially to decouple from some default components like Postgres and Traefik.
2023-11-20 16:20:17 +01:00
# role-specific:traefik
Add Appsmith support
2023-04-17 08:42:47 +02:00
appsmith_container_labels_traefik_enabled: "{{ mash_playbook_traefik_labels_enabled }}"
appsmith_container_labels_traefik_docker_network: "{{ mash_playbook_reverse_proxyable_services_additional_network }}"
appsmith_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"
appsmith_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"
Add some more role-specific annotations to templates/group_vars_mash_servers There's a lot more that can be added, especially to decouple from some default components like Postgres and Traefik.
2023-11-20 16:20:17 +01:00
# /role-specific:traefik
Add Appsmith support
2023-04-17 08:42:47 +02:00
########################################################################
# #
# /appsmith #
# #
Merge branch 'main' of https://github.com/mother-of-all-self-hosting/mash-playbook into authentik
2023-04-19 12:37:18 +02:00
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:appsmith
Merge branch 'main' of https://github.com/mother-of-all-self-hosting/mash-playbook into authentik
2023-04-19 12:37:18 +02:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:authentik
Add authentik
2023-04-19 12:29:15 +02:00
########################################################################
# #
# authentik #
# #
########################################################################
authentik_enabled: false
authentik_identifier: "{{ mash_playbook_service_identifier_prefix }}authentik"
authentik_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}authentik"
authentik_uid: "{{ mash_playbook_uid }}"
authentik_gid: "{{ mash_playbook_gid }}"
Add some more role-specific annotations to templates/group_vars_mash_servers There's a lot more that can be added, especially to decouple from some default components like Postgres and Traefik.
2023-11-20 16:20:17 +01:00
# role-specific:postgres
Add authentik
2023-04-19 12:29:15 +02:00
authentik_database_hostname: "{{ devture_postgres_identifier if devture_postgres_enabled else '' }}"
authentik_database_port: "{{ '5432' if devture_postgres_enabled else '' }}"
authentik_database_password: "{{ '%s' | format(mash_playbook_generic_secret_key) | password_hash('sha512', 'db.authentik', rounds=655555) | to_uuid }}"
authentik_database_username: "{{ authentik_identifier }}"
Add some more role-specific annotations to templates/group_vars_mash_servers There's a lot more that can be added, especially to decouple from some default components like Postgres and Traefik.
2023-11-20 16:20:17 +01:00
# /role-specific:postgres
Add authentik
2023-04-19 12:29:15 +02:00
authentik_server_systemd_required_services_list_auto: |
{{
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled and authentik_database_hostname == devture_postgres_identifier else [])
}}
Fix up deprecation
2023-04-23 16:24:13 +02:00
authentik_container_additional_networks_auto: |
Add authentik
2023-04-19 12:29:15 +02:00
{{
([mash_playbook_reverse_proxyable_services_additional_network] if mash_playbook_reverse_proxyable_services_additional_network else [])
+
Fix up deprecation
2023-04-23 16:24:13 +02:00
([devture_postgres_container_network] if devture_postgres_enabled and authentik_database_hostname == devture_postgres_identifier and authentik_container_network != devture_postgres_container_network else [])
Add authentik
2023-04-19 12:29:15 +02:00
}}
Add some more role-specific annotations to templates/group_vars_mash_servers There's a lot more that can be added, especially to decouple from some default components like Postgres and Traefik.
2023-11-20 16:20:17 +01:00
# role-specific:traefik
Fix up deprecation
2023-04-23 16:24:13 +02:00
authentik_container_labels_traefik_enabled: "{{ mash_playbook_traefik_labels_enabled }}"
authentik_container_labels_traefik_docker_network: "{{ mash_playbook_reverse_proxyable_services_additional_network }}"
authentik_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"
authentik_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"
Add some more role-specific annotations to templates/group_vars_mash_servers There's a lot more that can be added, especially to decouple from some default components like Postgres and Traefik.
2023-11-20 16:20:17 +01:00
# /role-specific:traefik
Add authentik
2023-04-19 12:29:15 +02:00
########################################################################
# #
Merge branch 'main' of https://github.com/mother-of-all-self-hosting/mash-playbook into authentik
2023-04-19 12:37:18 +02:00
# /authentik #
Add authentik
2023-04-19 12:29:15 +02:00
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:authentik
Add Adguard Home service
2023-03-24 17:01:21 +01:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:backup_borg
Add backup borg
2023-05-01 09:12:29 +02:00
########################################################################
# #
# backup-borg #
# #
########################################################################
backup_borg_enabled: false
backup_borg_identifier: "{{ mash_playbook_service_identifier_prefix }}backup-borg"
backup_borg_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}borg-backup"
backup_borg_uid: "{{ mash_playbook_uid }}"
backup_borg_gid: "{{ mash_playbook_gid }}"
backup_borg_container_network: "{{ devture_postgres_container_network if devture_postgres_enabled else backup_borg_identifier }}"
backup_borg_retention_prefix: "{{ mash_playbook_service_identifier_prefix }}"
backup_borg_storage_archive_name_format: "{{ mash_playbook_service_identifier_prefix }}-{now:%Y-%m-%d-%H%M%S}"
backup_borg_container_image_self_build: "{{ mash_playbook_architecture not in ['amd64', 'arm32', 'arm64'] }}"
Add some more role-specific annotations to templates/group_vars_mash_servers There's a lot more that can be added, especially to decouple from some default components like Postgres and Traefik.
2023-11-20 16:20:17 +01:00
# role-specific:postgres
Add backup borg
2023-05-01 09:12:29 +02:00
backup_borg_postgresql_enabled: "{{ devture_postgres_enabled }}"
backup_borg_postgresql_databases_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"
backup_borg_postgresql_databases_username: "{{ devture_postgres_connection_username if devture_postgres_enabled else '' }}"
backup_borg_postgresql_databases_password: "{{ devture_postgres_connection_password if devture_postgres_enabled else '' }}"
backup_borg_postgresql_databases_port: "{{ devture_postgres_connection_port if devture_postgres_enabled else 5432 }}"
backup_borg_postgresql_databases: "{{ devture_postgres_managed_databases | map(attribute='name') if devture_postgres_enabled else [] }}"
Add some more role-specific annotations to templates/group_vars_mash_servers There's a lot more that can be added, especially to decouple from some default components like Postgres and Traefik.
2023-11-20 16:20:17 +01:00
# /role-specific:postgres
Add backup borg
2023-05-01 09:12:29 +02:00
Add some more role-specific annotations to templates/group_vars_mash_servers There's a lot more that can be added, especially to decouple from some default components like Postgres and Traefik.
2023-11-20 16:20:17 +01:00
# role-specific:mariadb
Add mysql support + add exclude patterns
2023-05-01 17:43:52 +02:00
backup_borg_mysql_enabled: "{{ mariadb_enabled }}"
backup_borg_mysql_databases_hostname: "{{ mariadb_identifier if mariadb_enabled else '' }}"
backup_borg_mysql_databases_username: "root"
backup_borg_mysql_databases_password: "{{ mariadb_root_passsword if mariadb_enabled else '' }}"
fix backup-borg mariadb port
2023-05-30 18:51:42 +02:00
backup_borg_mysql_databases_port: 3306
Add mysql support + add exclude patterns
2023-05-01 17:43:52 +02:00
backup_borg_mysql_databases: "{{ mariadb_managed_databases | map(attribute='name') if mariadb_enabled else [] }}"
Add some more role-specific annotations to templates/group_vars_mash_servers There's a lot more that can be added, especially to decouple from some default components like Postgres and Traefik.
2023-11-20 16:20:17 +01:00
# /role-specific:mariadb
Add mysql support + add exclude patterns
2023-05-01 17:43:52 +02:00
Add backup borg
2023-05-01 09:12:29 +02:00
backup_borg_location_source_directories:
- "{{ mash_playbook_base_path }}"
Redo backup_borg_location_exclude_patterns to ensure it doesn't contain empty strings Previously, if Postgres or MariaDB were disabled, an empty path (`''`) would be injected. I'm not sure how borg-backup would handle such paths, but I suppose we'd better not feed it such stuff.
2023-05-02 08:16:53 +02:00
backup_borg_location_exclude_patterns: |
{{
Add some more role-specific annotations to templates/group_vars_mash_servers There's a lot more that can be added, especially to decouple from some default components like Postgres and Traefik.
2023-11-20 16:20:17 +01:00
([devture_postgres_data_path] if devture_postgres_enabled | default(false) else [])
Redo backup_borg_location_exclude_patterns to ensure it doesn't contain empty strings Previously, if Postgres or MariaDB were disabled, an empty path (`''`) would be injected. I'm not sure how borg-backup would handle such paths, but I suppose we'd better not feed it such stuff.
2023-05-02 08:16:53 +02:00
+
Add some more role-specific annotations to templates/group_vars_mash_servers There's a lot more that can be added, especially to decouple from some default components like Postgres and Traefik.
2023-11-20 16:20:17 +01:00
([mariadb_data_path] if mariadb_enabled | default(false) else [])
Redo backup_borg_location_exclude_patterns to ensure it doesn't contain empty strings Previously, if Postgres or MariaDB were disabled, an empty path (`''`) would be injected. I'm not sure how borg-backup would handle such paths, but I suppose we'd better not feed it such stuff.
2023-05-02 08:16:53 +02:00
}}
Add mysql support + add exclude patterns
2023-05-01 17:43:52 +02:00
Add backup borg
2023-05-01 09:12:29 +02:00
backup_borg_systemd_required_services_list: |
{{
['docker.service']
+
Add some more role-specific annotations to templates/group_vars_mash_servers There's a lot more that can be added, especially to decouple from some default components like Postgres and Traefik.
2023-11-20 16:20:17 +01:00
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled | default(false) else [])
Add mysql support + add exclude patterns
2023-05-01 17:43:52 +02:00
+
Add some more role-specific annotations to templates/group_vars_mash_servers There's a lot more that can be added, especially to decouple from some default components like Postgres and Traefik.
2023-11-20 16:20:17 +01:00
([mariadb_identifier ~ '.service'] if mariadb_enabled | default(false) else [])
Add backup borg
2023-05-01 09:12:29 +02:00
}}
########################################################################
# #
# /backup-borg #
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:backup_borg
Add backup borg
2023-05-01 09:12:29 +02:00
Add Outline support
2023-09-19 10:15:33 +02:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:changedetection
begin changedetection
2023-07-31 16:32:00 +02:00
########################################################################
# #
# Changedetection.io #
# #
########################################################################
changedetection_enabled: false
changedetection_identifier: "{{ mash_playbook_service_identifier_prefix }}changedetection"
changedetection_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}changedetection"
changedetection_uid: "{{ mash_playbook_uid }}"
changedetection_gid: "{{ mash_playbook_gid }}"
changedetection_container_additional_networks_auto: |
{{
([mash_playbook_reverse_proxyable_services_additional_network] if mash_playbook_reverse_proxyable_services_additional_network else [])
}}
Add some more role-specific annotations to templates/group_vars_mash_servers There's a lot more that can be added, especially to decouple from some default components like Postgres and Traefik.
2023-11-20 16:20:17 +01:00
# role-specific:traefik
begin changedetection
2023-07-31 16:32:00 +02:00
changedetection_container_labels_traefik_enabled: "{{ mash_playbook_traefik_labels_enabled }}"
changedetection_container_labels_traefik_docker_network: "{{ mash_playbook_reverse_proxyable_services_additional_network }}"
changedetection_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"
changedetection_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"
Add some more role-specific annotations to templates/group_vars_mash_servers There's a lot more that can be added, especially to decouple from some default components like Postgres and Traefik.
2023-11-20 16:20:17 +01:00
# /role-specific:traefik
begin changedetection
2023-07-31 16:32:00 +02:00
########################################################################
# #
# /Changedetection.io #
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:changedetection
Add backup borg
2023-05-01 09:12:29 +02:00
Add Outline support
2023-09-19 10:15:33 +02:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:clickhouse
Add ClickHouse support
2023-07-07 13:43:28 +02:00
########################################################################
# #
# clickhouse #
# #
########################################################################
clickhouse_enabled: false
clickhouse_identifier: "{{ mash_playbook_service_identifier_prefix }}clickhouse"
clickhouse_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}clickhouse"
clickhouse_uid: "{{ mash_playbook_uid }}"
clickhouse_gid: "{{ mash_playbook_gid }}"
# This will be extended in the future, to auto-create databases for services which depend on MariaDB.
# See `devture_postgres_managed_databases_auto`
# TODO
# clickhouse_managed_databases_auto: []
########################################################################
# #
# /clickhouse #
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:clickhouse
Add ClickHouse support
2023-07-07 13:43:28 +02:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:collabora_online
Add Collabora Online support
2023-03-17 13:25:31 +01:00
########################################################################
# #
# collabora-online #
# #
########################################################################
collabora_online_enabled: false
collabora_online_identifier: "{{ mash_playbook_service_identifier_prefix }}collabora-online"
Add mash_playbook_service_base_directory_name_prefix
2023-03-25 08:49:40 +01:00
collabora_online_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}collabora-online"
Add Collabora Online support
2023-03-17 13:25:31 +01:00
collabora_online_uid: "{{ mash_playbook_uid }}"
collabora_online_gid: "{{ mash_playbook_gid }}"
collabora_online_container_additional_networks: |
{{
([mash_playbook_reverse_proxyable_services_additional_network] if mash_playbook_reverse_proxyable_services_additional_network else [])
}}
Add some more role-specific annotations to templates/group_vars_mash_servers There's a lot more that can be added, especially to decouple from some default components like Postgres and Traefik.
2023-11-20 16:20:17 +01:00
# role-specific:traefik
Add Collabora Online support
2023-03-17 13:25:31 +01:00
collabora_online_container_labels_traefik_enabled: "{{ mash_playbook_traefik_labels_enabled }}"
collabora_online_container_labels_traefik_docker_network: "{{ mash_playbook_reverse_proxyable_services_additional_network }}"
collabora_online_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"
collabora_online_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"
Add some more role-specific annotations to templates/group_vars_mash_servers There's a lot more that can be added, especially to decouple from some default components like Postgres and Traefik.
2023-11-20 16:20:17 +01:00
# /role-specific:traefik
Add Collabora Online support
2023-03-17 13:25:31 +01:00
########################################################################
# #
# /collabora-online #
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:collabora_online
Add Collabora Online support
2023-03-17 13:25:31 +01:00
Initial commit
2023-03-15 09:58:12 +01:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:docker_registry
Add Docker Registry service
2023-03-18 18:27:24 +01:00
########################################################################
# #
# docker-registry #
# #
########################################################################
docker_registry_enabled: false
docker_registry_identifier: "{{ mash_playbook_service_identifier_prefix }}docker-registry"
Add mash_playbook_service_base_directory_name_prefix
2023-03-25 08:49:40 +01:00
docker_registry_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}docker-registry"
Add Docker Registry service
2023-03-18 18:27:24 +01:00
docker_registry_uid: "{{ mash_playbook_uid }}"
docker_registry_gid: "{{ mash_playbook_gid }}"
docker_registry_container_additional_networks: |
{{
([mash_playbook_reverse_proxyable_services_additional_network] if mash_playbook_reverse_proxyable_services_additional_network else [])
}}
Add some more role-specific annotations to templates/group_vars_mash_servers There's a lot more that can be added, especially to decouple from some default components like Postgres and Traefik.
2023-11-20 16:20:17 +01:00
# role-specific:traefik
Add Docker Registry service
2023-03-18 18:27:24 +01:00
docker_registry_container_labels_traefik_enabled: "{{ mash_playbook_traefik_labels_enabled }}"
docker_registry_container_labels_traefik_docker_network: "{{ mash_playbook_reverse_proxyable_services_additional_network }}"
docker_registry_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"
docker_registry_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"
Add some more role-specific annotations to templates/group_vars_mash_servers There's a lot more that can be added, especially to decouple from some default components like Postgres and Traefik.
2023-11-20 16:20:17 +01:00
# /role-specific:traefik
Add Docker Registry service
2023-03-18 18:27:24 +01:00
########################################################################
# #
# /docker-registry #
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:docker_registry
Add Docker Registry service
2023-03-18 18:27:24 +01:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:docker_registry_browser
Add Docker Registry Browser service
2023-03-19 08:14:12 +01:00
########################################################################
# #
# docker-registry-browser #
# #
########################################################################
docker_registry_browser_enabled: false
docker_registry_browser_identifier: "{{ mash_playbook_service_identifier_prefix }}docker-registry-browser"
Add mash_playbook_service_base_directory_name_prefix
2023-03-25 08:49:40 +01:00
docker_registry_browser_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}docker-registry-browser"
Add Docker Registry Browser service
2023-03-19 08:14:12 +01:00
docker_registry_browser_uid: "{{ mash_playbook_uid }}"
docker_registry_browser_gid: "{{ mash_playbook_gid }}"
docker_registry_browser_container_additional_networks: |
{{
([mash_playbook_reverse_proxyable_services_additional_network] if mash_playbook_reverse_proxyable_services_additional_network else [])
}}
Add some more role-specific annotations to templates/group_vars_mash_servers There's a lot more that can be added, especially to decouple from some default components like Postgres and Traefik.
2023-11-20 16:20:17 +01:00
# role-specific:traefik
Add Docker Registry Browser service
2023-03-19 08:14:12 +01:00
docker_registry_browser_container_labels_traefik_enabled: "{{ mash_playbook_traefik_labels_enabled }}"
docker_registry_browser_container_labels_traefik_docker_network: "{{ mash_playbook_reverse_proxyable_services_additional_network }}"
docker_registry_browser_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"
docker_registry_browser_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"
Add some more role-specific annotations to templates/group_vars_mash_servers There's a lot more that can be added, especially to decouple from some default components like Postgres and Traefik.
2023-11-20 16:20:17 +01:00
# /role-specific:traefik
Add Docker Registry Browser service
2023-03-19 08:14:12 +01:00
########################################################################
# #
# /docker-registry-browser #
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:docker_registry_browser
Add Docker Registry Browser service
2023-03-19 08:14:12 +01:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:docker_registry_purger
Add Docker Registry Purger service
2023-03-19 09:04:10 +01:00
########################################################################
# #
# docker-registry-purger #
# #
########################################################################
docker_registry_purger_enabled: false
docker_registry_purger_identifier: "{{ mash_playbook_service_identifier_prefix }}docker-registry-purger"
Add mash_playbook_service_base_directory_name_prefix
2023-03-25 08:49:40 +01:00
docker_registry_purger_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}docker-registry-purger"
Add Docker Registry Purger service
2023-03-19 09:04:10 +01:00
docker_registry_purger_uid: "{{ mash_playbook_uid }}"
docker_registry_purger_gid: "{{ mash_playbook_gid }}"
########################################################################
# #
# /docker-registry-purger #
add echoip role (#108) * add echoip role * Update echoip.md * Update echoip.md --------- Co-authored-by: Slavi Pantaleev <slavi@devture.com>
2023-10-10 08:57:44 +02:00
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:docker_registry_purger
add echoip role (#108) * add echoip role * Update echoip.md * Update echoip.md --------- Co-authored-by: Slavi Pantaleev <slavi@devture.com>
2023-10-10 08:57:44 +02:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:echoip
add echoip role (#108) * add echoip role * Update echoip.md * Update echoip.md --------- Co-authored-by: Slavi Pantaleev <slavi@devture.com>
2023-10-10 08:57:44 +02:00
########################################################################
# #
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# echoip #
add echoip role (#108) * add echoip role * Update echoip.md * Update echoip.md --------- Co-authored-by: Slavi Pantaleev <slavi@devture.com>
2023-10-10 08:57:44 +02:00
# #
########################################################################
echoip_enabled: false
echoip_identifier: "{{ mash_playbook_service_identifier_prefix }}echoip"
echoip_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}echoip"
echoip_uid: "{{ mash_playbook_uid }}"
echoip_gid: "{{ mash_playbook_gid }}"
echoip_systemd_required_services_list: |
{{
(['docker.service'])
}}
echoip_container_additional_networks: |
{{
([mash_playbook_reverse_proxyable_services_additional_network] if mash_playbook_reverse_proxyable_services_additional_network else [])
}}
Add some more role-specific annotations to templates/group_vars_mash_servers There's a lot more that can be added, especially to decouple from some default components like Postgres and Traefik.
2023-11-20 16:20:17 +01:00
# role-specific:traefik
add echoip role (#108) * add echoip role * Update echoip.md * Update echoip.md --------- Co-authored-by: Slavi Pantaleev <slavi@devture.com>
2023-10-10 08:57:44 +02:00
echoip_container_labels_traefik_enabled: "{{ mash_playbook_traefik_labels_enabled }}"
echoip_container_labels_traefik_docker_network: "{{ mash_playbook_reverse_proxyable_services_additional_network }}"
echoip_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"
echoip_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"
Add some more role-specific annotations to templates/group_vars_mash_servers There's a lot more that can be added, especially to decouple from some default components like Postgres and Traefik.
2023-11-20 16:20:17 +01:00
# /role-specific:traefik
add echoip role (#108) * add echoip role * Update echoip.md * Update echoip.md --------- Co-authored-by: Slavi Pantaleev <slavi@devture.com>
2023-10-10 08:57:44 +02:00
########################################################################
# #
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /echoip #
Add Docker Registry Purger service
2023-03-19 09:04:10 +01:00
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:echoip
Add Docker Registry Purger service
2023-03-19 09:04:10 +01:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:firezone
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
########################################################################
# #
# firezone #
# #
########################################################################
firezone_enabled: false
firezone_identifier: "{{ mash_playbook_service_identifier_prefix }}firezone"
firezone_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}firezone"
firezone_uid: "{{ mash_playbook_uid }}"
firezone_gid: "{{ mash_playbook_gid }}"
firezone_generic_secret: "{{ mash_playbook_generic_secret_key }}"
Add some more role-specific annotations to templates/group_vars_mash_servers There's a lot more that can be added, especially to decouple from some default components like Postgres and Traefik.
2023-11-20 16:20:17 +01:00
# role-specific:postgres
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
firezone_database_host: "{{ devture_postgres_identifier if devture_postgres_enabled else '' }}"
firezone_database_port: "{{ '5432' if devture_postgres_enabled else '' }}"
firezone_database_password: "{{ '%s' | format(mash_playbook_generic_secret_key) | password_hash('sha512', 'fz.db.user', rounds=655555) | to_uuid }}"
firezone_database_user: "{{ firezone_identifier }}"
Add some more role-specific annotations to templates/group_vars_mash_servers There's a lot more that can be added, especially to decouple from some default components like Postgres and Traefik.
2023-11-20 16:20:17 +01:00
# /role-specific:postgres
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
firezone_systemd_required_services_list: |
{{
(['docker.service'])
+
Add some more role-specific annotations to templates/group_vars_mash_servers There's a lot more that can be added, especially to decouple from some default components like Postgres and Traefik.
2023-11-20 16:20:17 +01:00
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled | default(false) and firezone_database_host == devture_postgres_identifier else [])
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
}}
firezone_container_additional_networks: |
{{
([mash_playbook_reverse_proxyable_services_additional_network] if mash_playbook_reverse_proxyable_services_additional_network else [])
+
Add some more role-specific annotations to templates/group_vars_mash_servers There's a lot more that can be added, especially to decouple from some default components like Postgres and Traefik.
2023-11-20 16:20:17 +01:00
([devture_postgres_container_network] if devture_postgres_enabled | default(false) and firezone_database_host == devture_postgres_identifier and firezone_container_network != devture_postgres_container_network else [])
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
}}
Add some more role-specific annotations to templates/group_vars_mash_servers There's a lot more that can be added, especially to decouple from some default components like Postgres and Traefik.
2023-11-20 16:20:17 +01:00
# role-specific:traefik
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
firezone_container_labels_traefik_enabled: "{{ mash_playbook_traefik_labels_enabled }}"
firezone_container_labels_traefik_docker_network: "{{ mash_playbook_reverse_proxyable_services_additional_network }}"
firezone_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"
firezone_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"
Add some more role-specific annotations to templates/group_vars_mash_servers There's a lot more that can be added, especially to decouple from some default components like Postgres and Traefik.
2023-11-20 16:20:17 +01:00
# /role-specific:traefik
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
########################################################################
# #
# /firezone #
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:firezone
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:focalboard
Add Focalboard service
2023-03-20 07:40:15 +01:00
########################################################################
# #
# focalboard #
# #
########################################################################
focalboard_enabled: false
focalboard_identifier: "{{ mash_playbook_service_identifier_prefix }}focalboard"
Add mash_playbook_service_base_directory_name_prefix
2023-03-25 08:49:40 +01:00
focalboard_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}focalboard"
Add Focalboard service
2023-03-20 07:40:15 +01:00
focalboard_uid: "{{ mash_playbook_uid }}"
focalboard_gid: "{{ mash_playbook_gid }}"
Switch to using some newly-added _auto variables for Focalboard and Syncthing
2023-04-05 06:52:29 +02:00
focalboard_systemd_required_systemd_services_list_auto: |
Add Focalboard service
2023-03-20 07:40:15 +01:00
{{
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled and focalboard_database_hostname == devture_postgres_identifier else [])
}}
Add some more role-specific annotations to templates/group_vars_mash_servers There's a lot more that can be added, especially to decouple from some default components like Postgres and Traefik.
2023-11-20 16:20:17 +01:00
# role-specific:postgres
Add Focalboard service
2023-03-20 07:40:15 +01:00
focalboard_database_type: "{{ 'postgres' if devture_postgres_enabled else '' }}"
focalboard_database_hostname: "{{ devture_postgres_identifier if devture_postgres_enabled else '' }}"
focalboard_database_port: "{{ '5432' if devture_postgres_enabled else '' }}"
focalboard_database_password: "{{ '%s' | format(mash_playbook_generic_secret_key) | password_hash('sha512', 'db.focalboard', rounds=655555) | to_uuid }}"
Add some more role-specific annotations to templates/group_vars_mash_servers There's a lot more that can be added, especially to decouple from some default components like Postgres and Traefik.
2023-11-20 16:20:17 +01:00
# /role-specific:postgres
Add Focalboard service
2023-03-20 07:40:15 +01:00
Switch to using some newly-added _auto variables for Focalboard and Syncthing
2023-04-05 06:52:29 +02:00
focalboard_container_additional_networks_auto: |
Add Focalboard service
2023-03-20 07:40:15 +01:00
{{
([mash_playbook_reverse_proxyable_services_additional_network] if mash_playbook_reverse_proxyable_services_additional_network else [])
+
Add some more role-specific annotations to templates/group_vars_mash_servers There's a lot more that can be added, especially to decouple from some default components like Postgres and Traefik.
2023-11-20 16:20:17 +01:00
([devture_postgres_container_network] if devture_postgres_enabled | default(false) and focalboard_database_hostname == devture_postgres_identifier else [])
Add Focalboard service
2023-03-20 07:40:15 +01:00
}}
Add some more role-specific annotations to templates/group_vars_mash_servers There's a lot more that can be added, especially to decouple from some default components like Postgres and Traefik.
2023-11-20 16:20:17 +01:00
# role-specific:traefik
Add Focalboard service
2023-03-20 07:40:15 +01:00
focalboard_container_labels_traefik_enabled: "{{ mash_playbook_traefik_labels_enabled }}"
focalboard_container_labels_traefik_docker_network: "{{ mash_playbook_reverse_proxyable_services_additional_network }}"
focalboard_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"
focalboard_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"
Add some more role-specific annotations to templates/group_vars_mash_servers There's a lot more that can be added, especially to decouple from some default components like Postgres and Traefik.
2023-11-20 16:20:17 +01:00
# /role-specific:traefik
Add Focalboard service
2023-03-20 07:40:15 +01:00
########################################################################
# #
# /focalboard #
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:focalboard
Add Focalboard service
2023-03-20 07:40:15 +01:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:freshrss
Adds FreshRSS service (#107) * Adds FreshRSS service * Adds comments to make it more clear
2023-10-10 17:06:11 +02:00
########################################################################
# #
# freshrss #
# #
########################################################################
freshrss_enabled: false
freshrss_identifier: "{{ mash_playbook_service_identifier_prefix }}freshrss"
freshrss_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}freshrss"
# freshrss_uid and freshrss_gid are intentionally not being set here.
# FreshRSS can only work with a specific user and group, as hardcoded in the role defaults.
freshrss_uid: "0"
freshrss_gid: "33"
freshrss_systemd_required_services_list: |
{{
(['docker.service'])
+
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled and freshrss_database_hostname == devture_postgres_identifier else [])
}}
freshrss_container_additional_networks: |
{{
([mash_playbook_reverse_proxyable_services_additional_network] if mash_playbook_reverse_proxyable_services_additional_network else [])
+
([devture_postgres_container_network] if devture_postgres_enabled and freshrss_database_hostname == devture_postgres_identifier and freshrss_container_network != devture_postgres_container_network else [])
}}
freshrss_container_labels_traefik_enabled: "{{ mash_playbook_traefik_labels_enabled }}"
freshrss_container_labels_traefik_docker_network: "{{ mash_playbook_reverse_proxyable_services_additional_network }}"
freshrss_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"
freshrss_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"
freshrss_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"
Do not auto-generate freshrss_database_password Related to https://github.com/mother-of-all-self-hosting/mash-playbook/issues/116
2023-11-13 12:13:39 +01:00
# Intentionally not auto-generating freshrss_database_password.
# It's meant to be explicitly defined, so that it can be used in the setup wizard after installation.
Adds FreshRSS service (#107) * Adds FreshRSS service * Adds comments to make it more clear
2023-10-10 17:06:11 +02:00
########################################################################
# #
# /freshrss #
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:freshrss
Adds FreshRSS service (#107) * Adds FreshRSS service * Adds comments to make it more clear
2023-10-10 17:06:11 +02:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:funkwhale
Add group vars
2023-04-02 20:00:52 +02:00
########################################################################
# #
# funkwhale #
# #
########################################################################
funkwhale_enabled: false
funkwhale_identifier: "{{ mash_playbook_service_identifier_prefix }}funkwhale"
funkwhale_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}funkwhale"
funkwhale_uid: "{{ mash_playbook_uid }}"
funkwhale_gid: "{{ mash_playbook_gid }}"
funkwhale_database_hostname: "{{ devture_postgres_identifier if devture_postgres_enabled else '' }}"
funkwhale_database_port: "{{ '5432' if devture_postgres_enabled else '' }}"
funkwhale_database_password: "{{ '%s' | format(mash_playbook_generic_secret_key) | password_hash('sha512', 'db.funkwhale', rounds=655555) | to_uuid }}"
funkwhale_database_username: "{{ funkwhale_identifier }}"
Define required services per service
2023-04-03 15:02:08 +02:00
funkwhale_api_systemd_required_services_list_auto: |
Add group vars
2023-04-02 20:00:52 +02:00
{{
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled and funkwhale_database_hostname == devture_postgres_identifier else [])
}}
Define required services per service
2023-04-03 15:02:08 +02:00
funkwhale_frontend_systemd_required_services_list_auto: |
{{
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled and funkwhale_database_hostname == devture_postgres_identifier else [])
}}
Add group vars
2023-04-02 20:00:52 +02:00
funkwhale_api_container_additional_networks_auto: |
{{
([mash_playbook_reverse_proxyable_services_additional_network] if mash_playbook_reverse_proxyable_services_additional_network else [])
+
([devture_postgres_container_network] if devture_postgres_enabled and funkwhale_database_hostname == devture_postgres_identifier and funkwhale_api_container_network != devture_postgres_container_network else [])
}}
funkwhale_frontend_container_additional_networks_auto: |
{{
([devture_postgres_container_network] if devture_postgres_enabled and funkwhale_database_hostname == devture_postgres_identifier and funkwhale_frontend_container_network != devture_postgres_container_network else [])
+
([mash_playbook_reverse_proxyable_services_additional_network] if mash_playbook_reverse_proxyable_services_additional_network else [])
}}
funkwhale_api_container_labels_traefik_enabled: "{{ mash_playbook_traefik_labels_enabled }}"
funkwhale_api_container_labels_traefik_docker_network: "{{ mash_playbook_reverse_proxyable_services_additional_network }}"
funkwhale_api_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"
funkwhale_api_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"
funkwhale_frontend_container_labels_traefik_enabled: "{{ mash_playbook_traefik_labels_enabled }}"
funkwhale_frontend_container_labels_traefik_docker_network: "{{ mash_playbook_reverse_proxyable_services_additional_network }}"
funkwhale_frontend_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"
funkwhale_frontend_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"
########################################################################
# #
# /funkwhale #
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:funkwhale
Add group vars
2023-04-02 20:00:52 +02:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:gitea
Add Gitea and Woodpecker CI support
2023-03-16 17:26:06 +01:00
########################################################################
# #
# gitea #
# #
########################################################################
gitea_enabled: false
gitea_identifier: "{{ mash_playbook_service_identifier_prefix }}gitea"
Add mash_playbook_service_base_directory_name_prefix
2023-03-25 08:49:40 +01:00
gitea_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}gitea"
Add Gitea and Woodpecker CI support
2023-03-16 17:26:06 +01:00
gitea_uid: "{{ mash_playbook_uid }}"
gitea_gid: "{{ mash_playbook_gid }}"
gitea_systemd_required_systemd_services_list: |
{{
(['docker.service'])
+
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled and gitea_config_database_hostname == devture_postgres_identifier else [])
}}
gitea_container_additional_networks: |
{{
([mash_playbook_reverse_proxyable_services_additional_network] if mash_playbook_reverse_proxyable_services_additional_network else [])
+
([devture_postgres_container_network] if devture_postgres_enabled and gitea_config_database_hostname == devture_postgres_identifier and gitea_container_network != devture_postgres_container_network else [])
}}
gitea_container_labels_traefik_enabled: "{{ mash_playbook_traefik_labels_enabled }}"
gitea_container_labels_traefik_docker_network: "{{ mash_playbook_reverse_proxyable_services_additional_network }}"
gitea_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"
gitea_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"
gitea_config_database_hostname: "{{ devture_postgres_identifier if devture_postgres_enabled else '' }}"
gitea_config_database_port: "{{ '5432' if devture_postgres_enabled else '' }}"
gitea_config_database_username: "gitea"
gitea_config_database_password: "{{ '%s' | format(mash_playbook_generic_secret_key) | password_hash('sha512', 'db.gitea', rounds=655555) | to_uuid }}"
########################################################################
# #
# /gitea #
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:gitea
Add Gitea and Woodpecker CI support
2023-03-16 17:26:06 +01:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:gotosocial
Add Grafana service
2023-03-20 18:14:45 +01:00
########################################################################
# #
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
# gotosocial #
Add Grafana service
2023-03-20 18:14:45 +01:00
# #
########################################################################
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
gotosocial_enabled: false
Add Grafana service
2023-03-20 18:14:45 +01:00
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
gotosocial_identifier: "{{ mash_playbook_service_identifier_prefix }}gotosocial"
Add Grafana service
2023-03-20 18:14:45 +01:00
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
gotosocial_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}gotosocial"
Add Grafana service
2023-03-20 18:14:45 +01:00
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
gotosocial_uid: "{{ mash_playbook_uid }}"
gotosocial_gid: "{{ mash_playbook_gid }}"
Add Grafana service
2023-03-20 18:14:45 +01:00
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
gotosocial_database_host: "{{ devture_postgres_identifier if devture_postgres_enabled else '' }}"
gotosocial_database_port: "{{ '5432' if devture_postgres_enabled else '' }}"
gotosocial_database_password: "{{ '%s' | format(mash_playbook_generic_secret_key) | password_hash('sha512', 'db.gotosocial', rounds=655555) | to_uuid }}"
gotosocial_database_username: "{{ gotosocial_identifier }}"
Add Grafana service
2023-03-20 18:14:45 +01:00
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
gotosocial_systemd_required_services_list: |
Add Grafana service
2023-03-20 18:14:45 +01:00
{{
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
(['docker.service'])
+
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled and gotosocial_database_host == devture_postgres_identifier else [])
Add Grafana service
2023-03-20 18:14:45 +01:00
}}
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
gotosocial_container_additional_networks: |
{{
([mash_playbook_reverse_proxyable_services_additional_network] if mash_playbook_reverse_proxyable_services_additional_network else [])
+
([devture_postgres_container_network] if devture_postgres_enabled and gotosocial_database_host == devture_postgres_identifier and gotosocial_container_network != devture_postgres_container_network else [])
}}
Add Grafana service
2023-03-20 18:14:45 +01:00
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
gotosocial_container_labels_traefik_enabled: "{{ mash_playbook_traefik_labels_enabled }}"
gotosocial_container_labels_traefik_docker_network: "{{ mash_playbook_reverse_proxyable_services_additional_network }}"
gotosocial_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"
gotosocial_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"
Add Grafana service
2023-03-20 18:14:45 +01:00
########################################################################
# #
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
# /gotosocial #
Add Grafana service
2023-03-20 18:14:45 +01:00
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:gotosocial
Add Grafana service
2023-03-20 18:14:45 +01:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:grafana
Add Keycloak service
2023-03-28 09:27:36 +02:00
########################################################################
# #
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
# grafana #
Add Keycloak service
2023-03-28 09:27:36 +02:00
# #
########################################################################
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
grafana_enabled: false
Add Keycloak service
2023-03-28 09:27:36 +02:00
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
grafana_identifier: "{{ mash_playbook_service_identifier_prefix }}grafana"
Add Keycloak service
2023-03-28 09:27:36 +02:00
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
grafana_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}grafana"
Add Keycloak service
2023-03-28 09:27:36 +02:00
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
grafana_uid: "{{ mash_playbook_uid }}"
grafana_gid: "{{ mash_playbook_gid }}"
Add Keycloak service
2023-03-28 09:27:36 +02:00
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
grafana_container_additional_networks: "{{ grafana_container_additional_networks_reverse_proxy + grafana_container_additional_networks_additional }}"
Add Keycloak service
2023-03-28 09:27:36 +02:00
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
grafana_container_additional_networks_reverse_proxy: |
Add Keycloak service
2023-03-28 09:27:36 +02:00
{{
([mash_playbook_reverse_proxyable_services_additional_network] if mash_playbook_reverse_proxyable_services_additional_network else [])
}}
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
grafana_container_additional_networks_additional: []
Add Keycloak service
2023-03-28 09:27:36 +02:00
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
grafana_container_labels_traefik_enabled: "{{ mash_playbook_traefik_labels_enabled }}"
grafana_container_labels_traefik_docker_network: "{{ mash_playbook_reverse_proxyable_services_additional_network }}"
grafana_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"
grafana_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"
Add Keycloak service
2023-03-28 09:27:36 +02:00
########################################################################
# #
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
# /grafana #
Add Keycloak service
2023-03-28 09:27:36 +02:00
# #
Add Grafana service
2023-03-20 18:14:45 +01:00
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:grafana
Add Grafana service
2023-03-20 18:14:45 +01:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:healthchecks
Add Healthecks support
2023-04-11 16:39:02 +02:00
########################################################################
# #
# healthchecks #
# #
########################################################################
healthchecks_enabled: false
healthchecks_identifier: "{{ mash_playbook_service_identifier_prefix }}healthchecks"
healthchecks_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}healthchecks"
healthchecks_uid: "{{ mash_playbook_uid }}"
healthchecks_gid: "{{ mash_playbook_gid }}"
healthchecks_systemd_required_services_list: |
{{
(['docker.service'])
+
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled and healthchecks_database_hostname == devture_postgres_identifier else [])
}}
healthchecks_container_additional_networks: |
{{
([mash_playbook_reverse_proxyable_services_additional_network] if mash_playbook_reverse_proxyable_services_additional_network else [])
+
([devture_postgres_container_network] if devture_postgres_enabled and healthchecks_database_hostname == devture_postgres_identifier and healthchecks_container_network != devture_postgres_container_network else [])
}}
healthchecks_container_labels_traefik_enabled: "{{ mash_playbook_traefik_labels_enabled }}"
healthchecks_container_labels_traefik_docker_network: "{{ mash_playbook_reverse_proxyable_services_additional_network }}"
healthchecks_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"
healthchecks_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"
healthchecks_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"
healthchecks_database_password: "{{ '%s' | format(mash_playbook_generic_secret_key) | password_hash('sha512', 'healthchecks.db', rounds=655555) | to_uuid }}"
healthchecks_environment_variable_secret_key: "{{ '%s' | format(mash_playbook_generic_secret_key) | password_hash('sha512', 'healthchecks', rounds=655555) | to_uuid }}"
########################################################################
# #
# /healthchecks #
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:healthchecks
Add Healthecks support
2023-04-11 16:39:02 +02:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:hubsite
Initial commit
2023-03-15 09:58:12 +01:00
########################################################################
# #
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
# hubsite #
Initial commit
2023-03-15 09:58:12 +01:00
# #
########################################################################
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
hubsite_enabled: false
Initial commit
2023-03-15 09:58:12 +01:00
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
hubsite_identifier: "{{ mash_playbook_service_identifier_prefix }}hubsite"
Initial commit
2023-03-15 09:58:12 +01:00
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
hubsite_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}hubsite"
Initial commit
2023-03-15 09:58:12 +01:00
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
hubsite_uid: "{{ mash_playbook_uid }}"
hubsite_gid: "{{ mash_playbook_gid }}"
Initial commit
2023-03-15 09:58:12 +01:00
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
hubsite_systemd_required_services_list: |
Minor service inter-dependency improvements
2023-03-16 14:41:06 +01:00
{{
(['docker.service'])
}}
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
hubsite_container_additional_networks: |
Initial commit
2023-03-15 09:58:12 +01:00
{{
([mash_playbook_reverse_proxyable_services_additional_network] if mash_playbook_reverse_proxyable_services_additional_network else [])
}}
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
hubsite_container_labels_traefik_enabled: "{{ mash_playbook_traefik_labels_enabled }}"
hubsite_container_labels_traefik_docker_network: "{{ mash_playbook_reverse_proxyable_services_additional_network }}"
hubsite_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"
hubsite_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"
Add Nextcloud support
2023-03-17 10:39:04 +01:00
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
# Services
##########
Add Nextcloud support
2023-03-17 10:39:04 +01:00
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# role-specific:adguard_home
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
# Adguard home
hubsite_service_adguard_home_enabled: "{{ adguard_home_enabled }}"
hubsite_service_adguard_home_name: Adguard Home
hubsite_service_adguard_home_url: "https://{{ adguard_home_hostname }}{{ adguard_home_path_prefix }}"
hubsite_service_adguard_home_logo_location: "{{ role_path }}/assets/shield.png"
hubsite_service_adguard_home_description: "A network-wide DNS software for blocking ads & tracking"
hubsite_service_adguard_home_priority: 1000
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:adguard_home
Add Navidrome support
2023-03-29 10:42:39 +02:00
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# role-specific:authentik
Add some services to hubsite
2023-04-22 17:49:31 +02:00
# authentik
hubsite_service_authentik_enabled: "{{ authentik_enabled }}"
hubsite_service_authentik_name: Authentik
Fix authentik uninstall+hubsite
2023-04-23 12:27:36 +02:00
hubsite_service_authentik_url: "https://{{ authentik_hostname }}"
Add some services to hubsite
2023-04-22 17:49:31 +02:00
hubsite_service_authentik_logo_location: "{{ role_path }}/assets/authentik.png"
hubsite_service_authentik_description: "An open source identity provider"
hubsite_service_authentik_priority: 1000
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:authentik
Add some services to hubsite
2023-04-22 17:49:31 +02:00
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# role-specific:appsmith
Add some services to hubsite
2023-04-22 17:49:31 +02:00
# Appsmith
hubsite_service_appsmith_enabled: "{{ appsmith_enabled }}"
hubsite_service_appsmith_name: Appsmith
hubsite_service_appsmith_url: "https://{{ appsmith_hostname }}{{ appsmith_path_prefix }}"
hubsite_service_appsmith_logo_location: "{{ role_path }}/assets/appsmith.png"
hubsite_service_appsmith_description: "Platform for building and deploying custom internal tools and applications without writing code"
hubsite_service_appsmith_priority: 1000
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:appsmith
Add some services to hubsite
2023-04-22 17:49:31 +02:00
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# role-specific:docker_registry_browser
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
# Docker Registry Browser
hubsite_service_docker_registry_browser_enabled: "{{ docker_registry_browser_enabled }}"
hubsite_service_docker_registry_browser_name: Docker Registry Browser
hubsite_service_docker_registry_browser_url: "https://{{ docker_registry_browser_hostname }}{{ docker_registry_browser_path_prefix }}"
hubsite_service_docker_registry_browser_logo_location: "{{ role_path }}/assets/docker.png"
hubsite_service_docker_registry_browser_description: "Browse docker images"
hubsite_service_docker_registry_browser_priority: 1000
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:docker_registry_browser
Add Navidrome support
2023-03-29 10:42:39 +02:00
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# role-specific:firezone
Add some services to hubsite
2023-04-22 17:49:31 +02:00
# Firezone
hubsite_service_firezone_enabled: "{{ firezone_enabled }}"
hubsite_service_firezone_name: Firezone
hubsite_service_firezone_url: "https://{{ firezone_hostname }}"
hubsite_service_firezone_logo_location: "{{ role_path }}/assets/firezone.png"
hubsite_service_firezone_description: "A self-hosted VPN server, based on Wireguard"
hubsite_service_firezone_priority: 1000
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:firezone
Add some services to hubsite
2023-04-22 17:49:31 +02:00
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# role-specific:focalboard
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
# Focalboard
hubsite_service_focalboard_enabled: "{{ focalboard_enabled }}"
hubsite_service_focalboard_name: Focalboard
hubsite_service_focalboard_url: "https://{{ focalboard_hostname }}{{ focalboard_path_prefix }}"
hubsite_service_focalboard_logo_location: "{{ role_path }}/assets/focalboard.png"
hubsite_service_focalboard_description: "An open source, self-hosted alternative to Trello, Notion, and Asana."
hubsite_service_focalboard_priority: 1000
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:focalboard
Add Navidrome support
2023-03-29 10:42:39 +02:00
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# role-specific:freshrss
Adds FreshRSS service (#107) * Adds FreshRSS service * Adds comments to make it more clear
2023-10-10 17:06:11 +02:00
# FreshRSS
hubsite_service_freshrss_enabled: "{{ freshrss_enabled }}"
hubsite_service_freshrss_name: FreshRSS
hubsite_service_freshrss_url: "https://{{ freshrss_hostname }}{{ freshrss_path_prefix }}"
hubsite_service_freshrss_logo_location: "{{ role_path }}/assets/freshrss.png"
hubsite_service_freshrss_description: "RSS and Atom feed aggregator."
hubsite_service_freshrss_priority: 1000
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:freshrss
Adds FreshRSS service (#107) * Adds FreshRSS service * Adds comments to make it more clear
2023-10-10 17:06:11 +02:00
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# role-specific:funkwhale
Add some services to hubsite
2023-04-22 17:49:31 +02:00
# Funkwhale
hubsite_service_funkwhale_enabled: "{{ funkwhale_enabled }}"
hubsite_service_funkwhale_name: Funkwhale
hubsite_service_funkwhale_url: "https://{{ funkwhale_hostname }}"
hubsite_service_funkwhale_logo_location: "{{ role_path }}/assets/funkwhale.png"
hubsite_service_funkwhale_description: "Listen and share music with a selfhosted streaming server"
hubsite_service_funkwhale_priority: 1000
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:funkwhale
Add some services to hubsite
2023-04-22 17:49:31 +02:00
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# role-specific:gitea
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
# Gitea
hubsite_service_gitea_enabled: "{{ gitea_enabled }}"
hubsite_service_gitea_name: Gitea
hubsite_service_gitea_url: "https://{{ gitea_hostname }}{{ gitea_path_prefix }}"
hubsite_service_gitea_logo_location: "{{ role_path }}/assets/gitea.png"
hubsite_service_gitea_description: "A git service"
hubsite_service_gitea_priority: 1000
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:gitea
Add Navidrome support
2023-03-29 10:42:39 +02:00
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# role-specific:gotosocial
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
# GoToSocial
hubsite_service_gotosocial_enabled: "{{ gotosocial_enabled }}"
hubsite_service_gotosocial_name: GoToSocial
hubsite_service_gotosocial_url: "https://{{ gotosocial_hostname }}"
hubsite_service_gotosocial_logo_location: "{{ role_path }}/assets/gotosocial.png"
hubsite_service_gotosocial_description: "A fediverse server"
hubsite_service_gotosocial_priority: 1000
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:gotosocial
Add Navidrome support
2023-03-29 10:42:39 +02:00
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# role-specific:grafana
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
# Grafana
hubsite_service_grafana_enabled: "{{ grafana_enabled }}"
hubsite_service_grafana_name: Grafana
hubsite_service_grafana_url: "https://{{ grafana_hostname }}{{ grafana_path_prefix }}"
hubsite_service_grafana_logo_location: "{{ role_path }}/assets/grafana.png"
hubsite_service_grafana_description: "Check how your server is doing"
hubsite_service_grafana_priority: 1000
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:grafana
Add Navidrome support
2023-03-29 10:42:39 +02:00
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# role-specific:healthchecks
Add some services to hubsite
2023-04-22 17:49:31 +02:00
# Healthchecks
hubsite_service_healthchecks_enabled: "{{ healthchecks_enabled }}"
hubsite_service_healthchecks_name: Healthchecks
hubsite_service_healthchecks_url: "https://{{ healthchecks_hostname }}{{ healthchecks_path_prefix }}"
hubsite_service_healthchecks_logo_location: "{{ role_path }}/assets/healthchecks.png"
hubsite_service_healthchecks_description: "A simple and Effective Cron Job Monitoring solution"
hubsite_service_healthchecks_priority: 1000
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:healthchecks
Add some services to hubsite
2023-04-22 17:49:31 +02:00
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# role-specific:keycloak
Add some services to hubsite
2023-04-22 17:49:31 +02:00
# Keycloak
hubsite_service_keycloak_enabled: "{{ keycloak_enabled }}"
hubsite_service_keycloak_name: Keycloak
hubsite_service_keycloak_url: "https://{{ keycloak_hostname }}{{ keycloak_path_prefix }}"
hubsite_service_keycloak_logo_location: "{{ role_path }}/assets/keycloak.png"
hubsite_service_keycloak_description: "An open source identity and access management solution."
hubsite_service_keycloak_priority: 1000
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:keycloak
Add some services to hubsite
2023-04-22 17:49:31 +02:00
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# role-specific:miniflux
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
# Miniflux
hubsite_service_miniflux_enabled: "{{ miniflux_enabled }}"
hubsite_service_miniflux_name: Miniflux
hubsite_service_miniflux_url: "https://{{ miniflux_hostname }}{{ miniflux_path_prefix }}"
hubsite_service_miniflux_logo_location: "{{ role_path }}/assets/miniflux.png"
hubsite_service_miniflux_description: "An opinionated feed reader"
hubsite_service_miniflux_priority: 1000
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:miniflux
Add Navidrome support
2023-03-29 10:42:39 +02:00
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# role-specific:n8n
Adds support for n8n
2023-07-19 12:08:59 +02:00
# n8n
hubsite_service_n8n_enabled: "{{ n8n_enabled }}"
hubsite_service_n8n_name: n8n
hubsite_service_n8n_url: "https://{{ n8n_hostname }}{{ n8n_path_prefix }}"
hubsite_service_n8n_logo_location: "{{ role_path }}/assets/n8n.png"
hubsite_service_n8n_description: "Workflow automation for technical people."
hubsite_service_n8n_priority: 1000
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:n8n
Adds support for n8n
2023-07-19 12:08:59 +02:00
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# role-specific:linkding
Adds support for linkding
2023-07-20 22:29:50 +02:00
# Linkding
hubsite_service_linkding_enabled: "{{ linkding_enabled }}"
hubsite_service_linkding_name: Linkding
hubsite_service_linkding_url: "https://{{ linkding_hostname }}{{ linkding_path_prefix }}"
hubsite_service_linkding_logo_location: "{{ role_path }}/assets/linkding.png"
hubsite_service_linkding_description: "Bookmark manager that is designed be to be minimal and fast."
hubsite_service_linkding_priority: 1000
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:linkding
Adds support for linkding
2023-07-20 22:29:50 +02:00
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# role-specific:nextcloud
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
# Nextcloud
hubsite_service_nextcloud_enabled: "{{ nextcloud_enabled }}"
hubsite_service_nextcloud_name: Nextcloud
hubsite_service_nextcloud_url: "https://{{ nextcloud_hostname }}{{ nextcloud_path_prefix }}"
hubsite_service_nextcloud_logo_location: "{{ role_path }}/assets/nextcloud.png"
hubsite_service_nextcloud_description: "Sync your files & much more"
hubsite_service_nextcloud_priority: 1000
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:nextcloud
Add Navidrome support
2023-03-29 10:42:39 +02:00
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# role-specific:owncast
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
# Owncast
hubsite_service_owncast_enabled: "{{ owncast_enabled }}"
Add some services to hubsite
2023-04-22 17:49:31 +02:00
hubsite_service_owncast_name: Owncast
Remove owncast path prefix
2023-04-02 20:10:13 +02:00
hubsite_service_owncast_url: "https://{{ owncast_hostname }}"
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
hubsite_service_owncast_logo_location: "{{ role_path }}/assets/owncast.png"
hubsite_service_owncast_description: "Livestream & Chat"
hubsite_service_owncast_priority: 1000
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:owncast
Add Navidrome support
2023-03-29 10:42:39 +02:00
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# role-specific:peertube
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
# Peertube
hubsite_service_peertube_enabled: "{{ peertube_enabled }}"
hubsite_service_peertube_name: Peertube
hubsite_service_peertube_url: "https://{{ peertube_hostname }}{{ peertube_path_prefix }}"
hubsite_service_peertube_logo_location: "{{ role_path }}/assets/peertube.png"
hubsite_service_peertube_description: "Watch and upload videos"
hubsite_service_peertube_priority: 1000
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:peertube
Add Navidrome support
2023-03-29 10:42:39 +02:00
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# role-specific:radicale
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
# Radicale
hubsite_service_radicale_enabled: "{{ radicale_enabled }}"
hubsite_service_radicale_name: Radicale
hubsite_service_radicale_url: "https://{{ radicale_hostname }}{{ radicale_path_prefix }}"
hubsite_service_radicale_logo_location: "{{ role_path }}/assets/radicale.png"
hubsite_service_radicale_description: "Sync contacts and calendars"
hubsite_service_radicale_priority: 1000
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:radicale
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# role-specific:syncthing
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
# Syncthing
hubsite_service_syncthing_enabled: "{{ syncthing_enabled }}"
hubsite_service_syncthing_name: Syncthing
hubsite_service_syncthing_url: "https://{{ syncthing_hostname }}{{ syncthing_path_prefix }}"
hubsite_service_syncthing_logo_location: "{{ role_path }}/assets/syncthing.png"
hubsite_service_syncthing_description: "Sync your files"
hubsite_service_syncthing_priority: 1000
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:syncthing
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# role-specific:uptime_kuma
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
# Uptime Kuma
hubsite_service_uptime_kuma_enabled: "{{ uptime_kuma_enabled }}"
hubsite_service_uptime_kuma_name: Uptime Kuma
hubsite_service_uptime_kuma_url: "https://{{ uptime_kuma_hostname }}{{ uptime_kuma_path_prefix }}"
hubsite_service_uptime_kuma_logo_location: "{{ role_path }}/assets/uptime-kuma.png"
hubsite_service_uptime_kuma_description: "Check the status of the services"
hubsite_service_uptime_kuma_priority: 1000
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:uptime_kuma
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# role-specific:vaultwarden
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
# Vaultwarden
# The vaultwarden service link is deactivated by default for security reasons, see: https://github.com/dani-garcia/vaultwarden/wiki/Hardening-Guide#hiding-under-a-subdir
hubsite_service_vaultwarden_enabled: false
hubsite_service_vaultwarden_name: Vaultwarden
hubsite_service_vaultwarden_url: "https://{{ vaultwarden_hostname }}{{ vaultwarden_path_prefix }}"
hubsite_service_vaultwarden_logo_location: "{{ role_path }}/assets/vaultwarden.png"
hubsite_service_vaultwarden_description: "Securely access your passwords"
hubsite_service_vaultwarden_priority: 1000
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:vaultwarden
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# role-specific:woodpecker_ci_server
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
# Woodpecker CI
hubsite_service_woodpecker_ci_enabled: "{{ devture_woodpecker_ci_server_enabled }}"
hubsite_service_woodpecker_ci_name: Woodpecker CI
hubsite_service_woodpecker_ci_url: "https://{{ devture_woodpecker_ci_server_hostname }}"
hubsite_service_woodpecker_ci_logo_location: "{{ role_path }}/assets/woodpecker.png"
hubsite_service_woodpecker_ci_description: "Check you CI"
hubsite_service_woodpecker_ci_priority: 1000
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:woodpecker_ci_server
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# role-specific:forgejo
Add Forgejo (#92) * Create forgejo.md * Update mash_servers Add Forgejo * Update requirements.yml * Update releases.opml * Update setup.yml * Update supported-services.md * Update requirements.yml Fix typo * Update mash_servers Forgot "+" * Fix Syntax Error * Update Version for Requirement.yml
2023-09-06 14:53:44 +02:00
# Forgejo
hubsite_service_forgejo_enabled: "{{ forgejo_enabled }}"
hubsite_service_forgejo_name: Forgejo
hubsite_service_forgejo_url: "https://{{ forgejo_hostname }}{{ forgejo_path_prefix }}"
hubsite_service_forgejo_logo_location: "{{ role_path }}/assets/forgejo.png"
hubsite_service_forgejo_description: "Another git service"
hubsite_service_forgejo_priority: 1000
Add more role-specific annotations to group_vars/mash_servers_all
2023-11-20 14:55:50 +01:00
# /role-specific:forgejo
Add Forgejo (#92) * Create forgejo.md * Update mash_servers Add Forgejo * Update requirements.yml * Update releases.opml * Update setup.yml * Update supported-services.md * Update requirements.yml Fix typo * Update mash_servers Forgot "+" * Fix Syntax Error * Update Version for Requirement.yml
2023-09-06 14:53:44 +02:00
Make hubsite not break when optimizing the playbook
2023-11-21 09:15:40 +01:00
mash_playbook_hubsite_service_list_auto_itemized:
# Dummy entry, which is not role-specific.
# Ensures there's at least one entry defined in the list.
- "{{ omit }}"
# role-specific:adguard_home
- |-
{{
({
'name': hubsite_service_adguard_home_name,
'url': hubsite_service_adguard_home_url,
'logo_location': hubsite_service_adguard_home_logo_location,
'description': hubsite_service_adguard_home_description,
'priority': hubsite_service_adguard_home_priority,
} if hubsite_service_adguard_home_enabled else omit)
}}
# /role-specific:adguard_home
# role-specific:authentik
- |-
{{
({
'name': hubsite_service_authentik_name,
'url': hubsite_service_authentik_url,
'logo_location': hubsite_service_authentik_logo_location,
'description': hubsite_service_authentik_description,
'priority': hubsite_service_adguard_home_priority,
} if hubsite_service_authentik_enabled else omit)
}}
# /role-specific:authentik
# role-specific:appsmith
- |-
{{
({
'name': hubsite_service_appsmith_name,
'url': hubsite_service_appsmith_url,
'logo_location': hubsite_service_appsmith_logo_location,
'description': hubsite_service_appsmith_description,
'priority': hubsite_service_appsmith_priority,
} if hubsite_service_appsmith_enabled else omit)
}}
# /role-specific:appsmith
# role-specific:docker_registry_browser
- |-
{{
({
'name': hubsite_service_docker_registry_browser_name,
'url': hubsite_service_docker_registry_browser_url,
'logo_location': hubsite_service_docker_registry_browser_logo_location,
'description': hubsite_service_docker_registry_browser_description,
'priority': hubsite_service_docker_registry_browser_priority,
} if hubsite_service_docker_registry_browser_enabled else omit)
}}
# /role-specific:docker_registry_browser
# role-specific:firezone
- |-
{{
({
'name': hubsite_service_firezone_name,
'url': hubsite_service_firezone_url,
'logo_location': hubsite_service_firezone_logo_location,
'description': hubsite_service_firezone_description,
'priority': hubsite_service_firezone_priority,
} if hubsite_service_firezone_enabled else omit)
}}
# /role-specific:firezone
# role-specific:focalboard
- |-
{{
({
'name': hubsite_service_focalboard_name,
'url': hubsite_service_focalboard_url,
'logo_location': hubsite_service_focalboard_logo_location,
'description': hubsite_service_focalboard_description,
'priority': hubsite_service_focalboard_priority,
} if hubsite_service_focalboard_enabled else omit)
}}
# /role-specific:focalboard
# role-specific:freshrss
- |-
{{
({
'name': hubsite_service_freshrss_name,
'url': hubsite_service_freshrss_url,
'logo_location': hubsite_service_freshrss_logo_location,
'description': hubsite_service_freshrss_description,
'priority': hubsite_service_freshrss_priority,
} if hubsite_service_freshrss_enabled else omit)
}}
# /role-specific:freshrss
# role-specific:funkwhale
- |-
{{
({
'name': hubsite_service_funkwhale_name,
'url': hubsite_service_funkwhale_url,
'logo_location': hubsite_service_funkwhale_logo_location,
'description': hubsite_service_funkwhale_description,
'priority': hubsite_service_funkwhale_priority,
} if hubsite_service_funkwhale_enabled else omit)
}}
# /role-specific:funkwhale
# role-specific:gitea
- |-
{{
({
'name': hubsite_service_gitea_name,
'url': hubsite_service_gitea_url,
'logo_location': hubsite_service_gitea_logo_location,
'description': hubsite_service_gitea_description,
'priority': hubsite_service_gitea_priority,
} if hubsite_service_gitea_enabled else omit)
}}
# /role-specific:gitea
# role-specific:gotosocial
- |-
{{
({
'name': hubsite_service_gotosocial_name,
'url': hubsite_service_gotosocial_url,
'logo_location': hubsite_service_gotosocial_logo_location,
'description': hubsite_service_gotosocial_description,
'priority': hubsite_service_gotosocial_priority,
} if hubsite_service_gotosocial_enabled else omit)
}}
# /role-specific:gotosocial
# role-specific:grafana
- |-
{{
({
'name': hubsite_service_grafana_name,
'url': hubsite_service_grafana_url,
'logo_location': hubsite_service_grafana_logo_location,
'description': hubsite_service_grafana_description,
'priority': hubsite_service_grafana_priority,
} if hubsite_service_grafana_enabled else omit)
}}
# /role-specific:grafana
# role-specific:healthchecks
- |-
{{
({
'name': hubsite_service_healthchecks_name,
'url': hubsite_service_healthchecks_url,
'logo_location': hubsite_service_healthchecks_logo_location,
'description': hubsite_service_healthchecks_description,
'priority': hubsite_service_healthchecks_priority,
} if hubsite_service_healthchecks_enabled else omit)
}}
# /role-specific:healthchecks
# role-specific:keycloak
- |-
{{
({
'name': hubsite_service_keycloak_name,
'url': hubsite_service_keycloak_url,
'logo_location': hubsite_service_keycloak_logo_location,
'description': hubsite_service_keycloak_description,
'priority': hubsite_service_keycloak_priority,
} if hubsite_service_keycloak_enabled else omit)
}}
# /role-specific:keycloak
# role-specific:miniflux
- |-
{{
({
'name': hubsite_service_miniflux_name,
'url': hubsite_service_miniflux_url,
'logo_location': hubsite_service_miniflux_logo_location,
'description': hubsite_service_miniflux_description,
'priority': hubsite_service_miniflux_priority,
} if hubsite_service_miniflux_enabled else omit)
}}
# /role-specific:miniflux
# role-specific:n8n
- |-
{{
({
'name': hubsite_service_n8n_name,
'url': hubsite_service_n8n_url,
'logo_location': hubsite_service_n8n_logo_location,
'description': hubsite_service_n8n_description,
'priority': hubsite_service_n8n_priority,
} if hubsite_service_n8n_enabled else omit)
}}
# /role-specific:n8n
# role-specific:nextcloud
- |-
{{
({
'name': hubsite_service_nextcloud_name,
'url': hubsite_service_nextcloud_url,
'logo_location': hubsite_service_nextcloud_logo_location,
'description': hubsite_service_nextcloud_description,
'priority': hubsite_service_nextcloud_priority,
} if hubsite_service_nextcloud_enabled else omit)
}}
# /role-specific:nextcloud
# role-specific:linkding
- |-
{{
({
'name': hubsite_service_linkding_name,
'url': hubsite_service_linkding_url,
'logo_location': hubsite_service_linkding_logo_location,
'description': hubsite_service_linkding_description,
'priority': hubsite_service_linkding_priority,
} if hubsite_service_linkding_enabled else omit)
}}
# /role-specific:linkding
# role-specific:owncast
- |-
{{
({
'name': hubsite_service_owncast_name,
'url': hubsite_service_owncast_url,
'logo_location': hubsite_service_owncast_logo_location,
'description': hubsite_service_owncast_description,
'priority': hubsite_service_owncast_priority,
} if hubsite_service_owncast_enabled else omit)
}}
# /role-specific:owncast
# role-specific:peertube
- |-
{{
({
'name': hubsite_service_peertube_name,
'url': hubsite_service_peertube_url,
'logo_location': hubsite_service_peertube_logo_location,
'description': hubsite_service_peertube_description,
'priority': hubsite_service_peertube_priority,
} if hubsite_service_peertube_enabled else omit)
}}
# /role-specific:peertube
# role-specific:radicale
- |-
{{
({
'name': hubsite_service_radicale_name,
'url': hubsite_service_radicale_url,
'logo_location': hubsite_service_radicale_logo_location,
'description': hubsite_service_radicale_description,
'priority': hubsite_service_radicale_priority,
} if hubsite_service_radicale_enabled else omit)
}}
# /role-specific:radicale
# role-specific:uptime_kuma
- |-
{{
({
'name': hubsite_service_uptime_kuma_name,
'url': hubsite_service_uptime_kuma_url,
'logo_location': hubsite_service_uptime_kuma_logo_location,
'description': hubsite_service_uptime_kuma_description,
'priority': hubsite_service_uptime_kuma_priority,
} if hubsite_service_uptime_kuma_enabled else omit)
}}
# /role-specific:uptime_kuma
# role-specific:syncthing
- |-
{{
({
'name': hubsite_service_syncthing_name,
'url': hubsite_service_syncthing_url,
'logo_location': hubsite_service_syncthing_logo_location,
'description': hubsite_service_syncthing_description,
'priority': hubsite_service_syncthing_priority
} if hubsite_service_syncthing_enabled else omit)
}}
# /role-specific:syncthing
# role-specific:vaultwarden
- |-
{{
({
'name': hubsite_service_vaultwarden_name,
'url': hubsite_service_vaultwarden_url,
'logo_location': hubsite_service_vaultwarden_logo_location,
'description': hubsite_service_vaultwarden_description,
'priority': hubsite_service_vaultwarden_priority
} if hubsite_service_vaultwarden_enabled else omit)
}}
# /role-specific:vaultwarden
# role-specific:woodpecker_ci_server
- |-
{{
({
'name': hubsite_service_woodpecker_ci_name,
'url': hubsite_service_woodpecker_ci_url,
'logo_location': hubsite_service_woodpecker_ci_logo_location,
'description': hubsite_service_woodpecker_ci_description,
'priority': hubsite_service_woodpecker_ci_priority
} if hubsite_service_woodpecker_ci_enabled else omit)
}}
# /role-specific:woodpecker_ci_server
hubsite_service_list_auto: "{{ mash_playbook_hubsite_service_list_auto_itemized | reject('equalto', omit) }}"
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
########################################################################
# #
# /hubsite #
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:hubsite
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:ilmo
Add ilmo
2023-07-17 14:45:18 +02:00
########################################################################
# #
# ilmo #
# #
########################################################################
ilmo_enabled: false
ilmo_identifier: "{{ mash_playbook_service_identifier_prefix }}ilmo"
ilmo_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}ilmo"
ilmo_uid: "{{ mash_playbook_uid }}"
ilmo_gid: "{{ mash_playbook_gid }}"
ilmo_secret: "{{ '%s' | format(mash_playbook_generic_secret_key) | password_hash('sha512', 'secret.ilmo', rounds=655555) | to_uuid }}"
ilmo_database_host: "{{ devture_postgres_identifier if devture_postgres_enabled else '' }}"
ilmo_database_port: "{{ '5432' if devture_postgres_enabled else '' }}"
ilmo_database_password: "{{ '%s' | format(mash_playbook_generic_secret_key) | password_hash('sha512', 'db.ilmo', rounds=655555) | to_uuid }}"
ilmo_database_username: "ilmo"
ilmo_systemd_required_services_list: |
{{
(['docker.service'])
+
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled and ilmo_database_host == devture_postgres_identifier else [])
}}
ilmo_container_additional_networks: |
{{
([mash_playbook_reverse_proxyable_services_additional_network] if mash_playbook_reverse_proxyable_services_additional_network else [])
+
([devture_postgres_container_network] if devture_postgres_enabled and ilmo_database_host == devture_postgres_identifier and ilmo_container_network != devture_postgres_container_network else [])
}}
ilmo_container_labels_traefik_enabled: "{{ mash_playbook_traefik_labels_enabled }}"
ilmo_container_labels_traefik_docker_network: "{{ mash_playbook_reverse_proxyable_services_additional_network }}"
ilmo_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"
ilmo_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"
########################################################################
# #
# /ilmo #
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:ilmo
Add ilmo
2023-07-17 14:45:18 +02:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:infisical
Add support for Infisical
2023-06-02 16:50:15 +02:00
########################################################################
# #
# infisical #
# #
########################################################################
infisical_enabled: false
infisical_identifier: "{{ mash_playbook_service_identifier_prefix }}infisical"
infisical_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}infisical"
infisical_uid: "{{ mash_playbook_uid }}"
infisical_gid: "{{ mash_playbook_gid }}"
infisical_backend_systemd_required_services_list: |
{{
(['docker.service'])
+
([mongodb_identifier ~ '.service'] if mongodb_enabled and infisical_mongodb_hostname == mongodb_identifier else [])
}}
infisical_backend_container_additional_networks: |
{{
([mash_playbook_reverse_proxyable_services_additional_network] if mash_playbook_reverse_proxyable_services_additional_network else [])
+
([mongodb_container_network] if mongodb_enabled and infisical_mongodb_hostname == mongodb_identifier and infisical_backend_container_network != mongodb_container_network else [])
}}
infisical_backend_container_labels_traefik_enabled: "{{ mash_playbook_traefik_labels_enabled }}"
infisical_backend_container_labels_traefik_docker_network: "{{ mash_playbook_reverse_proxyable_services_additional_network }}"
infisical_backend_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"
infisical_backend_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"
# Intentionally not auto-generating infisical_backend_environment_variable_encryption_key here.
# We prefer it to be explicit as it seems important that it remains stable.
infisical_backend_environment_variable_jwt_signup_secret: "{{ ('%s' | format(mash_playbook_generic_secret_key) | password_hash('sha512', 'inf.jwt.signup', rounds=655555) | to_uuid | replace('-', ''))[0:32] }}"
infisical_backend_environment_variable_jwt_refresh_secret: "{{ ('%s' | format(mash_playbook_generic_secret_key) | password_hash('sha512', 'inf.jwt.r', rounds=655555) | to_uuid | replace('-', ''))[0:32] }}"
infisical_backend_environment_variable_jwt_auth_secret: "{{ ('%s' | format(mash_playbook_generic_secret_key) | password_hash('sha512', 'inf.jwt.a', rounds=655555) | to_uuid | replace('-', ''))[0:32] }}"
infisical_backend_environment_variable_jwt_service_secret: "{{ ('%s' | format(mash_playbook_generic_secret_key) | password_hash('sha512', 'inf.jwt.svc', rounds=655555) | to_uuid | replace('-', ''))[0:32] }}"
infisical_frontend_container_additional_networks: |
{{
([mash_playbook_reverse_proxyable_services_additional_network] if mash_playbook_reverse_proxyable_services_additional_network else [])
}}
infisical_frontend_container_labels_traefik_enabled: "{{ mash_playbook_traefik_labels_enabled }}"
infisical_frontend_container_labels_traefik_docker_network: "{{ mash_playbook_reverse_proxyable_services_additional_network }}"
infisical_frontend_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"
infisical_frontend_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"
infisical_mongodb_hostname: "{{ mongodb_identifier if mongodb_enabled else '' }}"
infisical_mongodb_password: "{{ '%s' | format(mash_playbook_generic_secret_key) | password_hash('sha512', 'infisical.db', rounds=655555) | to_uuid }}"
infisical_mongodb_auth_source: "{{ infisical_mongodb_db_name }}"
########################################################################
# #
# /infisical #
# #
Initial influxdb commit
2023-06-29 00:51:46 +02:00
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:infisical
Initial influxdb commit
2023-06-29 00:51:46 +02:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:influxdb
Initial influxdb commit
2023-06-29 00:51:46 +02:00
########################################################################
# #
# influxdb #
# #
########################################################################
influxdb_enabled: false
influxdb_identifier: "{{ mash_playbook_service_identifier_prefix }}influxdb"
influxdb_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}influxdb"
influxdb_uid: "{{ mash_playbook_uid }}"
influxdb_gid: "{{ mash_playbook_gid }}"
influxdb_systemd_required_services_list: |
{{
(['docker.service'])
}}
influxdb_container_additional_networks: |
{{
([mash_playbook_reverse_proxyable_services_additional_network] if mash_playbook_reverse_proxyable_services_additional_network else [])
}}
influxdb_container_labels_traefik_enabled: "{{ mash_playbook_traefik_labels_enabled }}"
influxdb_container_labels_traefik_docker_network: "{{ mash_playbook_reverse_proxyable_services_additional_network }}"
influxdb_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"
influxdb_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"
########################################################################
# #
# /influxdb #
# #
Add support for Infisical
2023-06-02 16:50:15 +02:00
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:influxdb
Add support for Infisical
2023-06-02 16:50:15 +02:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:jitsi
Relocate Jitsi section in group vars (alphabetically)
2023-04-12 15:09:59 +02:00
########################################################################
# #
# jitsi #
# #
########################################################################
jitsi_enabled: false
jitsi_architecture: "{{ mash_playbook_architecture }}"
jitsi_identifier: "{{ mash_playbook_service_identifier_prefix }}jitsi"
jitsi_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}jitsi"
jitsi_uid: "{{ mash_playbook_uid }}"
jitsi_gid: "{{ mash_playbook_gid }}"
fix var name
2023-10-31 08:45:18 +01:00
jitsi_user_username: "{{ mash_playbook_user_username }}"
Upgrade Jitsi (v8960-1 -> v8960-3) and pass jitsi_user_username explicitly It would work even without explicitly passing `jitsi_user_username` as auto-detection logic will run. Passing it explicitly spares the Jitsi role some work. Related to: - https://github.com/mother-of-all-self-hosting/ansible-role-jitsi/pull/2 - https://github.com/spantaleev/matrix-docker-ansible-deploy/issues/2974#issuecomment-1784256903
2023-10-31 07:34:35 +01:00
Relocate Jitsi section in group vars (alphabetically)
2023-04-12 15:09:59 +02:00
jitsi_web_container_additional_networks_auto: |
{{
([mash_playbook_reverse_proxyable_services_additional_network] if mash_playbook_reverse_proxyable_services_additional_network else [])
}}
jitsi_prosody_container_additional_networks_auto: |
{{
([mash_playbook_reverse_proxyable_services_additional_network] if mash_playbook_reverse_proxyable_services_additional_network else [])
}}
jitsi_jvb_container_additional_networks_auto: |
{{
([mash_playbook_reverse_proxyable_services_additional_network] if mash_playbook_reverse_proxyable_services_additional_network else [])
}}
jitsi_container_labels_traefik_enabled: "{{ mash_playbook_traefik_labels_enabled }}"
jitsi_container_labels_traefik_docker_network: "{{ mash_playbook_reverse_proxyable_services_additional_network }}"
jitsi_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"
jitsi_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"
jitsi_jibri_xmpp_password: "{{ '%s' | format(mash_playbook_generic_secret_key) | password_hash('sha512', 'jibri', rounds=655555) | to_uuid }}"
jitsi_jicofo_auth_password: "{{ '%s' | format(mash_playbook_generic_secret_key) | password_hash('sha512', 'jicofo', rounds=655555) | to_uuid }}"
jitsi_jvb_auth_password: "{{ '%s' | format(mash_playbook_generic_secret_key) | password_hash('sha512', 'jvb', rounds=655555) | to_uuid }}"
########################################################################
# #
# /jitsi #
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:jitsi
Relocate Jitsi section in group vars (alphabetically)
2023-04-12 15:09:59 +02:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:keycloak
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
########################################################################
# #
# keycloak #
# #
########################################################################
keycloak_enabled: false
keycloak_identifier: "{{ mash_playbook_service_identifier_prefix }}keycloak"
keycloak_uid: "{{ mash_playbook_uid }}"
keycloak_gid: "{{ mash_playbook_gid }}"
keycloak_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}keycloak"
keycloak_systemd_required_systemd_services_list_auto: |
{{
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled and keycloak_database_hostname == devture_postgres_identifier else [])
}}
keycloak_container_additional_networks_auto: |
{{
([mash_playbook_reverse_proxyable_services_additional_network] if mash_playbook_reverse_proxyable_services_additional_network else [])
+
([devture_postgres_container_network] if devture_postgres_enabled and keycloak_database_hostname == devture_postgres_identifier and keycloak_container_network != devture_postgres_container_network else [])
}}
keycloak_container_labels_traefik_enabled: "{{ mash_playbook_traefik_labels_enabled }}"
keycloak_container_labels_traefik_docker_network: "{{ mash_playbook_reverse_proxyable_services_additional_network }}"
keycloak_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"
keycloak_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"
keycloak_database_hostname: "{{ devture_postgres_identifier if devture_postgres_enabled else '' }}"
keycloak_database_port: "{{ '5432' if devture_postgres_enabled else '' }}"
keycloak_database_password: "{{ '%s' | format(mash_playbook_generic_secret_key) | password_hash('sha512', 'db.keycloak', rounds=655555) | to_uuid }}"
########################################################################
# #
# /keycloak #
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:keycloak
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:lago
Add Lago support
2023-04-14 07:58:46 +02:00
########################################################################
# #
# lago #
# #
########################################################################
lago_enabled: false
lago_architecture: "{{ mash_playbook_architecture }}"
lago_identifier: "{{ mash_playbook_service_identifier_prefix }}lago"
lago_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}lago"
lago_uid: "{{ mash_playbook_uid }}"
lago_gid: "{{ mash_playbook_gid }}"
lago_api_container_additional_networks_auto: |
{{
([mash_playbook_reverse_proxyable_services_additional_network] if mash_playbook_reverse_proxyable_services_additional_network else [])
+
([devture_postgres_container_network] if devture_postgres_enabled and lago_database_hostname == devture_postgres_identifier and lago_api_container_network != devture_postgres_container_network else [])
}}
lago_front_container_additional_networks_auto: |
{{
([mash_playbook_reverse_proxyable_services_additional_network] if mash_playbook_reverse_proxyable_services_additional_network else [])
}}
lago_container_labels_traefik_enabled: "{{ mash_playbook_traefik_labels_enabled }}"
lago_container_labels_traefik_docker_network: "{{ mash_playbook_reverse_proxyable_services_additional_network }}"
lago_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"
lago_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"
lago_database_hostname: "{{ devture_postgres_identifier if devture_postgres_enabled else '' }}"
lago_database_port: "{{ '5432' if devture_postgres_enabled else '' }}"
lago_database_password: "{{ '%s' | format(mash_playbook_generic_secret_key) | password_hash('sha512', 'lago.db', rounds=655555) | to_uuid }}"
lago_api_environment_variable_secret_key_base: "{{ '%s' | format(mash_playbook_generic_secret_key) | password_hash('sha512', 'lago.sec.key', rounds=655555) | to_uuid }}"
lago_api_environment_variable_encryption_primary_key: "{{ '%s' | format(mash_playbook_generic_secret_key) | password_hash('sha512', 'lago.enc.primary', rounds=655555) | to_uuid }}"
lago_api_environment_variable_encryption_deterministic_key: "{{ '%s' | format(mash_playbook_generic_secret_key) | password_hash('sha512', 'lago.deter.key', rounds=655555) | to_uuid }}"
lago_api_environment_variable_encryption_key_derivation_salt: "{{ '%s' | format(mash_playbook_generic_secret_key) | password_hash('sha512', 'lago.deriv.salt', rounds=655555) | to_uuid }}"
########################################################################
# #
# /lago #
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:lago
Add Lago support
2023-04-14 07:58:46 +02:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:linkding
Adds support for linkding
2023-07-20 22:29:50 +02:00
########################################################################
# #
# linkding #
# #
########################################################################
linkding_enabled: false
linkding_identifier: "{{ mash_playbook_service_identifier_prefix }}linkding"
linkding_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}linkding"
linkding_uid: "{{ mash_playbook_uid }}"
linkding_gid: "{{ mash_playbook_gid }}"
linkding_systemd_required_services_list: |
{{
(['docker.service'])
+
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled and linkding_database_hostname == devture_postgres_identifier else [])
}}
linkding_container_additional_networks: |
{{
([mash_playbook_reverse_proxyable_services_additional_network] if mash_playbook_reverse_proxyable_services_additional_network else [])
+
([devture_postgres_container_network] if devture_postgres_enabled and linkding_database_hostname == devture_postgres_identifier and linkding_container_network != devture_postgres_container_network else [])
}}
linkding_container_labels_traefik_enabled: "{{ mash_playbook_traefik_labels_enabled }}"
linkding_container_labels_traefik_docker_network: "{{ mash_playbook_reverse_proxyable_services_additional_network }}"
linkding_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"
linkding_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"
linkding_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"
linkding_database_password: "{{ '%s' | format(mash_playbook_generic_secret_key) | password_hash('sha512', 'linkding.db', rounds=655555) | to_uuid }}"
########################################################################
# #
# /linkding #
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:linkding
Add Lago support
2023-04-14 07:58:46 +02:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:miniflux
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
########################################################################
# #
# miniflux #
# #
########################################################################
miniflux_enabled: false
miniflux_identifier: "{{ mash_playbook_service_identifier_prefix }}miniflux"
miniflux_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}miniflux"
miniflux_uid: "{{ mash_playbook_uid }}"
miniflux_gid: "{{ mash_playbook_gid }}"
miniflux_systemd_required_services_list: |
{{
(['docker.service'])
+
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled and miniflux_database_hostname == devture_postgres_identifier else [])
}}
miniflux_container_additional_networks: |
{{
([mash_playbook_reverse_proxyable_services_additional_network] if mash_playbook_reverse_proxyable_services_additional_network else [])
+
([devture_postgres_container_network] if devture_postgres_enabled and miniflux_database_hostname == devture_postgres_identifier and miniflux_container_network != devture_postgres_container_network else [])
}}
miniflux_container_labels_traefik_enabled: "{{ mash_playbook_traefik_labels_enabled }}"
miniflux_container_labels_traefik_docker_network: "{{ mash_playbook_reverse_proxyable_services_additional_network }}"
miniflux_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"
miniflux_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"
miniflux_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"
miniflux_database_password: "{{ '%s' | format(mash_playbook_generic_secret_key) | password_hash('sha512', 'miniflux.db', rounds=655555) | to_uuid }}"
########################################################################
# #
# /miniflux #
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:miniflux
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:mobilizon
Add mobilizon + postgis (WIP)
2023-04-05 17:01:58 +02:00
########################################################################
# #
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# mobilizon #
Add mobilizon + postgis (WIP)
2023-04-05 17:01:58 +02:00
# #
########################################################################
mobilizon_enabled: false
mobilizon_identifier: "{{ mash_playbook_service_identifier_prefix }}mobilizon"
mobilizon_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}mobilizon"
mobilizon_uid: "{{ mash_playbook_uid }}"
mobilizon_gid: "{{ mash_playbook_gid }}"
mobilizon_secret_key: "{{ '%s' | format(mash_playbook_generic_secret_key) | password_hash('sha512', 'sk.mobilizon', rounds=655555) | to_uuid }}"
mobilizon_secret_key_base: "{{ '%s' | format(mash_playbook_generic_secret_key) | password_hash('sha512', 'skb.mobilizon', rounds=655555) | to_uuid }}"
mobilizon_database_hostname: "{{ postgis_identifier if postgis_enabled else '' }}"
Fix mobilizon database username
2023-07-19 14:14:54 +02:00
mobilizon_database_name: "mobilizon"
Add mobilizon + postgis (WIP)
2023-04-05 17:01:58 +02:00
mobilizon_database_port: "{{ '5432' if postgis_enabled else '' }}"
mobilizon_database_password: "{{ '%s' | format(mash_playbook_generic_secret_key) | password_hash('sha512', 'db.mobilizon', rounds=655555) | to_uuid }}"
Fix mobilizon database username
2023-07-19 14:14:54 +02:00
mobilizon_database_username: "mobilizon"
Add mobilizon + postgis (WIP)
2023-04-05 17:01:58 +02:00
mobilizon_systemd_required_services_list: |
{{
(['docker.service'])
+
Naming
2023-04-05 18:24:53 +02:00
([postgis_identifier ~ '.service'] if postgis_enabled and mobilizon_database_hostname == postgis_identifier else [])
Add mobilizon + postgis (WIP)
2023-04-05 17:01:58 +02:00
}}
mobilizon_container_additional_networks: |
{{
([mash_playbook_reverse_proxyable_services_additional_network] if mash_playbook_reverse_proxyable_services_additional_network else [])
+
Naming
2023-04-05 18:24:53 +02:00
([postgis_container_network] if postgis_enabled and mobilizon_database_hostname == postgis_identifier and mobilizon_container_network != postgis_container_network else [])
Add mobilizon + postgis (WIP)
2023-04-05 17:01:58 +02:00
}}
mobilizon_container_labels_traefik_enabled: "{{ mash_playbook_traefik_labels_enabled }}"
mobilizon_container_labels_traefik_docker_network: "{{ mash_playbook_reverse_proxyable_services_additional_network }}"
mobilizon_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"
mobilizon_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"
########################################################################
# #
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /mobilizon #
Add mobilizon + postgis (WIP)
2023-04-05 17:01:58 +02:00
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:mobilizon
Add support for MongoDB
2023-06-02 16:25:58 +02:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:mongodb
Add support for MongoDB
2023-06-02 16:25:58 +02:00
########################################################################
# #
# mongodb #
# #
########################################################################
mongodb_enabled: false
mongodb_identifier: "{{ mash_playbook_service_identifier_prefix }}mongodb"
mongodb_uid: "{{ mash_playbook_uid }}"
mongodb_gid: "{{ mash_playbook_gid }}"
mongodb_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}mongodb"
Add support for Infisical
2023-06-02 16:50:15 +02:00
mongodb_managed_databases_auto: |
{{
([{
'name': infisical_mongodb_db_name,
'username': infisical_mongodb_username,
'password': infisical_mongodb_password,
}] if infisical_enabled and infisical_mongodb_hostname == mongodb_identifier else [])
}}
Add support for MongoDB
2023-06-02 16:25:58 +02:00
########################################################################
# #
# /mongodb #
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:mongodb
Add mobilizon + postgis (WIP)
2023-04-05 17:01:58 +02:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:mosquitto
Add docs, requirements and systemd
2023-07-03 13:10:38 +02:00
########################################################################
# #
Fix alignment, formatting and remove double default
2023-07-06 11:53:20 +02:00
# mosquitto #
Add docs, requirements and systemd
2023-07-03 13:10:38 +02:00
# #
########################################################################
mosquitto_enabled: false
mosquitto_identifier: "{{ mash_playbook_service_identifier_prefix }}mosquitto"
mosquitto_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}mosquitto"
Add mobilizon + postgis (WIP)
2023-04-05 17:01:58 +02:00
Add docs, requirements and systemd
2023-07-03 13:10:38 +02:00
mosquitto_uid: "{{ mash_playbook_uid }}"
mosquitto_gid: "{{ mash_playbook_gid }}"
########################################################################
# #
Fix alignment, formatting and remove double default
2023-07-06 11:53:20 +02:00
# /mosquitto #
Add docs, requirements and systemd
2023-07-03 13:10:38 +02:00
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:mosquitto
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
add Matrix Rooms Search API
2023-04-12 12:49:51 +02:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:mrs
add Matrix Rooms Search API
2023-04-12 12:49:51 +02:00
########################################################################
# #
# mrs #
# #
########################################################################
mrs_enabled: false
mrs_identifier: "{{ mash_playbook_service_identifier_prefix }}mrs"
mrs_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}mrs"
mrs_uid: "{{ mash_playbook_uid }}"
mrs_gid: "{{ mash_playbook_gid }}"
mrs_container_additional_networks: |
{{
([mash_playbook_reverse_proxyable_services_additional_network] if mash_playbook_reverse_proxyable_services_additional_network else [])
}}
mrs_container_labels_traefik_enabled: "{{ mash_playbook_traefik_labels_enabled }}"
mrs_container_labels_traefik_docker_network: "{{ mash_playbook_reverse_proxyable_services_additional_network }}"
mrs_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"
mrs_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"
########################################################################
# #
# /mrs #
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:mrs
add Matrix Rooms Search API
2023-04-12 12:49:51 +02:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:n8n
Adds support for n8n
2023-07-19 12:08:59 +02:00
########################################################################
# #
# n8n #
# #
########################################################################
n8n_enabled: false
n8n_identifier: "{{ mash_playbook_service_identifier_prefix }}n8n"
n8n_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}n8n"
Updates n8n uid and gid with note
2023-07-19 16:03:47 +02:00
# Please see the note attached to this comment on why we can't use mash's playbook uid and gid
# https://github.com/kinduff/ansible-docker-n8n/blob/v1.4.2/defaults/main.yml
n8n_uid: "1000"
n8n_gid: "1000"
Adds support for n8n
2023-07-19 12:08:59 +02:00
n8n_systemd_required_services_list: |
{{
(['docker.service'])
+
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled and n8n_database_hostname == devture_postgres_identifier else [])
}}
n8n_container_additional_networks: |
{{
([mash_playbook_reverse_proxyable_services_additional_network] if mash_playbook_reverse_proxyable_services_additional_network else [])
+
([devture_postgres_container_network] if devture_postgres_enabled and n8n_database_hostname == devture_postgres_identifier and n8n_container_network != devture_postgres_container_network else [])
}}
n8n_container_labels_traefik_enabled: "{{ mash_playbook_traefik_labels_enabled }}"
n8n_container_labels_traefik_docker_network: "{{ mash_playbook_reverse_proxyable_services_additional_network }}"
n8n_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"
n8n_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"
n8n_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"
n8n_database_password: "{{ '%s' | format(mash_playbook_generic_secret_key) | password_hash('sha512', 'n8n.db', rounds=655555) | to_uuid }}"
########################################################################
# #
# /n8n #
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:n8n
Adds support for n8n
2023-07-19 12:08:59 +02:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:navidrome
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
########################################################################
# #
# navidrome #
# #
########################################################################
navidrome_enabled: false
navidrome_identifier: "{{ mash_playbook_service_identifier_prefix }}navidrome"
navidrome_uid: "{{ mash_playbook_uid }}"
navidrome_gid: "{{ mash_playbook_gid }}"
navidrome_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}navidrome"
navidrome_container_additional_networks_auto: |
{{
([mash_playbook_reverse_proxyable_services_additional_network] if mash_playbook_reverse_proxyable_services_additional_network else [])
}}
navidrome_container_labels_traefik_enabled: "{{ mash_playbook_traefik_labels_enabled }}"
navidrome_container_labels_traefik_docker_network: "{{ mash_playbook_reverse_proxyable_services_additional_network }}"
navidrome_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"
navidrome_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"
########################################################################
# #
# /navidrome #
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:navidrome
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:nextcloud
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
########################################################################
# #
# nextcloud #
Add Nextcloud support
2023-03-17 10:39:04 +01:00
# #
########################################################################
nextcloud_enabled: false
nextcloud_identifier: "{{ mash_playbook_service_identifier_prefix }}nextcloud"
Add mash_playbook_service_base_directory_name_prefix
2023-03-25 08:49:40 +01:00
nextcloud_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}nextcloud"
Add Nextcloud support
2023-03-17 10:39:04 +01:00
nextcloud_uid: "{{ mash_playbook_uid }}"
nextcloud_gid: "{{ mash_playbook_gid }}"
Fix variable typo
2023-03-29 13:23:59 +02:00
nextcloud_systemd_required_services_list_auto: |
Add Nextcloud support
2023-03-17 10:39:04 +01:00
{{
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled and nextcloud_database_hostname == devture_postgres_identifier else [])
}}
Upgrade Nextcloud (v26.0.0-0 -> v26.0.0-1)
2023-03-29 13:14:29 +02:00
nextcloud_container_additional_networks_auto: |
Add Nextcloud support
2023-03-17 10:39:04 +01:00
{{
Fix alignment
2023-04-01 06:55:56 +02:00
(
Add redis support for nextcloud service
2023-03-25 15:55:37 +01:00
([mash_playbook_reverse_proxyable_services_additional_network] if mash_playbook_reverse_proxyable_services_additional_network else [])
+
([devture_postgres_container_network] if devture_postgres_enabled and nextcloud_database_hostname == devture_postgres_identifier and nextcloud_container_network != devture_postgres_container_network else [])
) | unique
Add Nextcloud support
2023-03-17 10:39:04 +01:00
}}
nextcloud_container_labels_traefik_enabled: "{{ mash_playbook_traefik_labels_enabled }}"
nextcloud_container_labels_traefik_docker_network: "{{ mash_playbook_reverse_proxyable_services_additional_network }}"
nextcloud_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"
nextcloud_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"
nextcloud_database_hostname: "{{ devture_postgres_identifier if devture_postgres_enabled else '' }}"
nextcloud_database_port: "{{ '5432' if devture_postgres_enabled else '' }}"
nextcloud_database_username: "nextcloud"
nextcloud_database_password: "{{ '%s' | format(mash_playbook_generic_secret_key) | password_hash('sha512', 'db.nextcloud', rounds=655555) | to_uuid }}"
########################################################################
# #
# /nextcloud #
Initial commit
2023-03-15 09:58:12 +01:00
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:nextcloud
Initial commit
2023-03-15 09:58:12 +01:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:netbox
Add NetBox service and redo Redis integration for PeerTube
2023-03-26 16:13:57 +02:00
########################################################################
# #
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
# netbox #
Add NetBox service and redo Redis integration for PeerTube
2023-03-26 16:13:57 +02:00
# #
########################################################################
netbox_enabled: false
netbox_identifier: "{{ mash_playbook_service_identifier_prefix }}netbox"
netbox_uid: "{{ mash_playbook_uid }}"
netbox_gid: "{{ mash_playbook_gid }}"
netbox_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}netbox"
netbox_systemd_required_services_list_auto: |
{{
Fix variable name typo
2023-12-01 18:52:36 +01:00
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled and netbox_database_hostname == devture_postgres_identifier else [])
Add NetBox service and redo Redis integration for PeerTube
2023-03-26 16:13:57 +02:00
}}
netbox_container_additional_networks_auto: |
{{
(
([mash_playbook_reverse_proxyable_services_additional_network] if mash_playbook_reverse_proxyable_services_additional_network else [])
+
([devture_postgres_container_network] if devture_postgres_enabled and netbox_database_hostname == devture_postgres_identifier and netbox_container_network != devture_postgres_container_network else [])
) | unique
}}
netbox_container_labels_traefik_enabled: "{{ mash_playbook_traefik_labels_enabled }}"
netbox_container_labels_traefik_docker_network: "{{ mash_playbook_reverse_proxyable_services_additional_network }}"
netbox_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"
netbox_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"
netbox_database_hostname: "{{ devture_postgres_identifier if devture_postgres_enabled else '' }}"
netbox_database_port: "{{ '5432' if devture_postgres_enabled else '' }}"
netbox_database_password: "{{ '%s' | format(mash_playbook_generic_secret_key) | password_hash('sha512', 'db.netbox', rounds=655555) | to_uuid }}"
########################################################################
# #
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
# /netbox #
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:netbox
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:mariadb
Add MariaDB support
2023-04-10 12:44:48 +02:00
########################################################################
# #
# mariadb #
# #
########################################################################
mariadb_enabled: false
mariadb_identifier: "{{ mash_playbook_service_identifier_prefix }}mariadb"
mariadb_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}mariadb"
mariadb_uid: "{{ mash_playbook_uid }}"
mariadb_gid: "{{ mash_playbook_gid }}"
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
mash_playbook_mariadb_managed_databases_auto_itemized:
Ensure certain lists (containing role-specific elements) are never empty
2023-11-20 15:54:43 +01:00
# Dummy entry, which is not role-specific.
# Ensures there's at least one entry defined in the list.
- "{{ omit }}"
Add role-specific annotations for mash_playbook_mariadb_managed_databases_auto_itemized
2023-11-20 15:49:41 +01:00
# role-specific:authelia
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
- |-
{{
({
'name': authelia_config_storage_mysql_database,
'username': authelia_config_storage_mysql_username,
'password': authelia_config_storage_mysql_password,
} if authelia_enabled and authelia_config_storage_mysql_host == mariadb_identifier else omit)
}}
Add role-specific annotations for mash_playbook_mariadb_managed_databases_auto_itemized
2023-11-20 15:49:41 +01:00
# /role-specific:authelia
Redo the way certain large list variables are populated to allow pre-processing The goal here is to switch from "one large YAML statement with many ifs" to "separate if statements". The first doesn't lend itself to having pre-processing comments around it and to actually pre-processing it based on these comments. Pre-processing is a future goal I'm working toward. The idea is that `if` statements for component X do not need to run if you're not using component X. In the future, we should be able to have the playbook auto-configure itself based on the components you're using and skip a lot of unnecessary work. This is one step toward achieving this goal.
2023-11-19 08:04:35 +01:00
mariadb_managed_databases_auto: "{{ mash_playbook_mariadb_managed_databases_auto_itemized | reject('equalto', omit) }}"
Add MariaDB support
2023-04-10 12:44:48 +02:00
########################################################################
# #
# /mariadb #
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:mariadb
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:outline
Add Outline support
2023-09-19 10:15:33 +02:00
########################################################################
# #
# outline #
# #
########################################################################
outline_enabled: false
outline_identifier: "{{ mash_playbook_service_identifier_prefix }}outline"
outline_uid: "{{ mash_playbook_uid }}"
outline_gid: "{{ mash_playbook_gid }}"
outline_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}outline"
outline_systemd_required_services_list_auto: |
{{
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled and outline_database_hostname == devture_postgres_identifier else [])
}}
outline_container_additional_networks_auto: |
{{
([mash_playbook_reverse_proxyable_services_additional_network] if mash_playbook_reverse_proxyable_services_additional_network else [])
+
([devture_postgres_container_network] if devture_postgres_enabled and outline_database_hostname == devture_postgres_identifier and outline_container_network != devture_postgres_container_network else [])
}}
outline_container_labels_traefik_enabled: "{{ mash_playbook_traefik_labels_enabled }}"
outline_container_labels_traefik_docker_network: "{{ mash_playbook_reverse_proxyable_services_additional_network }}"
outline_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"
outline_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"
outline_environment_variable_utils_secret: "{{ '%s' | format(mash_playbook_generic_secret_key) | password_hash('sha512', 'utils.out', rounds=655555) | to_uuid }}"
outline_database_hostname: "{{ devture_postgres_identifier if devture_postgres_enabled else '' }}"
outline_database_port: "{{ '5432' if devture_postgres_enabled else '' }}"
outline_database_password: "{{ '%s' | format(mash_playbook_generic_secret_key) | password_hash('sha512', 'db.out', rounds=655555) | to_uuid }}"
outline_database_sslmode: "{{ 'disable' if devture_postgres_enabled and outline_database_hostname == devture_postgres_identifier else 'prefer' }}"
########################################################################
# #
# /outline #
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:outline
Add Outline support
2023-09-19 10:15:33 +02:00
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:owncast
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
########################################################################
# #
# owncast #
# #
########################################################################
owncast_enabled: false
owncast_identifier: "{{ mash_playbook_service_identifier_prefix }}owncast"
owncast_uid: "{{ mash_playbook_uid }}"
owncast_gid: "{{ mash_playbook_gid }}"
owncast_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}owncast"
owncast_container_additional_networks: |
{{
([mash_playbook_reverse_proxyable_services_additional_network] if mash_playbook_reverse_proxyable_services_additional_network else [])
}}
owncast_container_labels_traefik_enabled: "{{ mash_playbook_traefik_labels_enabled }}"
owncast_container_labels_traefik_docker_network: "{{ mash_playbook_reverse_proxyable_services_additional_network }}"
owncast_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"
owncast_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"
########################################################################
# #
# /owncast #
Add NetBox service and redo Redis integration for PeerTube
2023-03-26 16:13:57 +02:00
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:owncast
Add NetBox service and redo Redis integration for PeerTube
2023-03-26 16:13:57 +02:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:oxitraffic
feat: Add oxitraffic basics
2023-11-08 11:55:32 +01:00
########################################################################
# #
# oxitraffic #
# #
########################################################################
oxitraffic_enabled: false
oxitraffic_identifier: "{{ mash_playbook_service_identifier_prefix }}oxitraffic"
oxitraffic_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}oxitraffic"
oxitraffic_uid: "{{ mash_playbook_uid }}"
oxitraffic_gid: "{{ mash_playbook_gid }}"
oxitraffic_database_hostname: "{{ devture_postgres_identifier if devture_postgres_enabled else '' }}"
oxitraffic_database_port: "{{ '5432' if devture_postgres_enabled else '' }}"
oxitraffic_database_password: "{{ '%s' | format(mash_playbook_generic_secret_key) | password_hash('sha512', 'db.oxitraffic', rounds=655555) | to_uuid }}"
oxitraffic_systemd_required_services_list: |
{{
(['docker.service'])
+
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled and oxitraffic_database_hostname == devture_postgres_identifier else [])
}}
oxitraffic_container_additional_networks: |
{{
([mash_playbook_reverse_proxyable_services_additional_network] if mash_playbook_reverse_proxyable_services_additional_network else [])
+
([devture_postgres_container_network] if devture_postgres_enabled and oxitraffic_database_hostname == devture_postgres_identifier and oxitraffic_container_network != devture_postgres_container_network else [])
}}
oxitraffic_container_labels_traefik_enabled: "{{ mash_playbook_traefik_labels_enabled }}"
oxitraffic_container_labels_traefik_docker_network: "{{ mash_playbook_reverse_proxyable_services_additional_network }}"
oxitraffic_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"
oxitraffic_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"
########################################################################
# #
# /oxitraffic #
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:oxitraffic
feat: Add oxitraffic basics
2023-11-08 11:55:32 +01:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:peertube
Add PeerTube and Redis support
2023-03-17 14:43:45 +01:00
########################################################################
# #
# peertube #
# #
########################################################################
peertube_enabled: false
peertube_identifier: "{{ mash_playbook_service_identifier_prefix }}peertube"
Add mash_playbook_service_base_directory_name_prefix
2023-03-25 08:49:40 +01:00
peertube_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}peertube"
Add PeerTube and Redis support
2023-03-17 14:43:45 +01:00
peertube_uid: "{{ mash_playbook_uid }}"
peertube_gid: "{{ mash_playbook_gid }}"
Upgrade PeerTube (v5.1.0-0 -> v5.1.0-1)
2023-03-26 14:51:44 +02:00
peertube_container_additional_networks_auto: |
Add PeerTube and Redis support
2023-03-17 14:43:45 +01:00
{{
(
([mash_playbook_reverse_proxyable_services_additional_network] if mash_playbook_reverse_proxyable_services_additional_network else [])
+
([devture_postgres_container_network] if devture_postgres_enabled and peertube_config_database_hostname == devture_postgres_identifier and peertube_container_network != devture_postgres_container_network else [])
) | unique
}}
peertube_container_labels_traefik_enabled: "{{ mash_playbook_traefik_labels_enabled }}"
peertube_container_labels_traefik_docker_network: "{{ mash_playbook_reverse_proxyable_services_additional_network }}"
peertube_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"
peertube_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"
peertube_config_database_hostname: "{{ devture_postgres_identifier if devture_postgres_enabled else '' }}"
peertube_config_database_port: "{{ '5432' if devture_postgres_enabled else '' }}"
peertube_config_database_username: peertube
peertube_config_database_password: "{{ '%s' | format(mash_playbook_generic_secret_key) | password_hash('sha512', 'db.peertube', rounds=655555) | to_uuid }}"
Upgrade PeerTube (v5.1.0-0 -> v5.1.0-1)
2023-03-26 14:51:44 +02:00
peertube_systemd_required_services_list_auto: |
Add PeerTube and Redis support
2023-03-17 14:43:45 +01:00
{{
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled and peertube_config_database_hostname == devture_postgres_identifier else [])
}}
########################################################################
# #
# /peertube #
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:peertube
Add PeerTube and Redis support
2023-03-17 14:43:45 +01:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:postgis
Add mobilizon + postgis (WIP)
2023-04-05 17:01:58 +02:00
########################################################################
# #
# postgis #
# #
########################################################################
postgis_enabled: false
postgis_identifier: "{{ mash_playbook_service_identifier_prefix }}postgis"
postgis_architecture: "{{ mash_playbook_architecture }}"
postgis_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}postgis"
postgis_uid: "{{ mash_playbook_uid }}"
postgis_gid: "{{ mash_playbook_gid }}"
postgis_systemd_services_to_stop_for_maintenance_list: |
{{
Fix typo affecting postgis_systemd_services_to_stop_for_maintenance_list
2023-09-16 10:47:18 +02:00
([(mobilizon_identifier + '.service')] if mobilizon_enabled else [])
Add mobilizon + postgis (WIP)
2023-04-05 17:01:58 +02:00
}}
postgis_managed_databases_auto: |
{{
([{
'name': mobilizon_database_name,
'username': mobilizon_database_username,
'password': mobilizon_database_password,
}] if mobilizon_enabled and mobilizon_database_type == 'postgis' and mobilizon_database_hostname == postgis_identifier else [])
}}
########################################################################
# #
# /postgis #
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:postgis
Add mobilizon + postgis (WIP)
2023-04-05 17:01:58 +02:00
Add PeerTube and Redis support
2023-03-17 14:43:45 +01:00
Add integration&documentation for postgres exporter
2023-05-14 18:39:17 +02:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:prometheus_postgres_exporter
Add integration&documentation for postgres exporter
2023-05-14 18:39:17 +02:00
########################################################################
# #
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# prometheus_postgres_exporter #
Add integration&documentation for postgres exporter
2023-05-14 18:39:17 +02:00
# #
########################################################################
Switch role
2023-05-17 10:32:47 +02:00
prometheus_postgres_exporter_enabled: false
Add integration&documentation for postgres exporter
2023-05-14 18:39:17 +02:00
Switch role
2023-05-17 10:32:47 +02:00
prometheus_postgres_exporter_identifier: "{{ mash_playbook_service_identifier_prefix }}prometheus-postgres-exporter"
Add integration&documentation for postgres exporter
2023-05-14 18:39:17 +02:00
Fix paths
2023-05-17 13:43:36 +02:00
prometheus_postgres_exporter_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}prometheus-postgres-exporter"
Add integration&documentation for postgres exporter
2023-05-14 18:39:17 +02:00
Switch role
2023-05-17 10:32:47 +02:00
prometheus_postgres_exporter_uid: "{{ mash_playbook_uid }}"
prometheus_postgres_exporter_gid: "{{ mash_playbook_gid }}"
Add integration&documentation for postgres exporter
2023-05-14 18:39:17 +02:00
Switch role
2023-05-17 10:32:47 +02:00
prometheus_postgres_exporter_basicauth_enabled: "{{ prometheus_postgres_exporter_container_labels_traefik_enabled }}"
prometheus_postgres_exporter_basicauth_user: "{{ '%s' | format(mash_playbook_generic_secret_key) | password_hash('sha512', 'prometheus-postgres-exporter.user', rounds=655555) | to_uuid }}"
prometheus_postgres_exporter_basicauth_password: "{{ '%s' | format(mash_playbook_generic_secret_key) | password_hash('sha512', 'prometheus-postgres-exporter.password', rounds=655555) | to_uuid }}"
Add integration&documentation for postgres exporter
2023-05-14 18:39:17 +02:00
Switch role
2023-05-17 10:32:47 +02:00
prometheus_postgres_exporter_container_additional_networks: |
Add integration&documentation for postgres exporter
2023-05-14 18:39:17 +02:00
{{
([mash_playbook_reverse_proxyable_services_additional_network] if mash_playbook_reverse_proxyable_services_additional_network else [])
+
Switch role
2023-05-17 10:32:47 +02:00
([devture_postgres_container_network] if devture_postgres_enabled and prometheus_postgres_exporter_database_hostname == devture_postgres_identifier and prometheus_postgres_exporter_container_network != devture_postgres_container_network else [])
Add integration&documentation for postgres exporter
2023-05-14 18:39:17 +02:00
}}
Fix paths
2023-05-17 13:43:36 +02:00
prometheus_postgres_exporter_server_fqn: "{{ prometheus_postgres_exporter_hostname }}"
Switch role
2023-05-17 10:32:47 +02:00
Add integration&documentation for postgres exporter
2023-05-14 18:39:17 +02:00
# Only enable Traefik labels if a hostname is set (indicating that this will be exposed publicly)
Switch role
2023-05-17 10:32:47 +02:00
prometheus_postgres_exporter_container_labels_traefik_enabled: "{{ mash_playbook_traefik_labels_enabled and prometheus_postgres_exporter_hostname | length > 0 }}"
prometheus_postgres_exporter_container_labels_traefik_docker_network: "{{ mash_playbook_reverse_proxyable_services_additional_network }}"
prometheus_postgres_exporter_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"
prometheus_postgres_exporter_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"
prometheus_postgres_exporter_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"
prometheus_postgres_exporter_database_username: prometheus_postgres_exporter
prometheus_postgres_exporter_database_password: "{{ devture_postgres_connection_password if devture_postgres_enabled else '' }}"
prometheus_postgres_exporter_database_port: "{{ devture_postgres_connection_port if devture_postgres_enabled else 5432 }}"
prometheus_postgres_exporter_database_ssl: false
prometheus_postgres_exporter_systemd_required_services_list: |
{{
['docker.service']
+
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled else [])
}}
Add integration&documentation for postgres exporter
2023-05-14 18:39:17 +02:00
########################################################################
# #
# /prometheus_node_exporter #
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:prometheus_postgres_exporter
Add integration&documentation for postgres exporter
2023-05-14 18:39:17 +02:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:prometheus
Add Prometheus service
2023-03-20 16:54:01 +01:00
########################################################################
# #
# prometheus #
# #
########################################################################
prometheus_enabled: false
prometheus_identifier: "{{ mash_playbook_service_identifier_prefix }}prometheus"
Add mash_playbook_service_base_directory_name_prefix
2023-03-25 08:49:40 +01:00
prometheus_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}prometheus"
Add Prometheus service
2023-03-20 16:54:01 +01:00
prometheus_uid: "{{ mash_playbook_uid }}"
prometheus_gid: "{{ mash_playbook_gid }}"
Add traefik config
2023-07-24 18:37:03 +02:00
# Only enable Traefik labels if a hostname is set (indicating that this will be exposed publicly)
prometheus_container_labels_traefik_enabled: "{{ mash_playbook_traefik_labels_enabled and prometheus_hostname | length > 0 }}"
prometheus_container_labels_traefik_docker_network: "{{ mash_playbook_reverse_proxyable_services_additional_network }}"
prometheus_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"
prometheus_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"
prometheus_container_additional_networks: |
{{
([mash_playbook_reverse_proxyable_services_additional_network] if mash_playbook_reverse_proxyable_services_additional_network else [])
}}
Add Prometheus service
2023-03-20 16:54:01 +01:00
########################################################################
# #
# /prometheus #
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:prometheus
Add Prometheus service
2023-03-20 16:54:01 +01:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:prometheus_blackbox_exporter
prometheus-blackbox-exporter
2023-03-19 21:34:43 +01:00
########################################################################
# #
# prometheus_blackbox_exporter #
# #
########################################################################
prometheus_blackbox_exporter_enabled: false
prometheus_blackbox_exporter_identifier: "{{ mash_playbook_service_identifier_prefix }}prometheus-blackbox-exporter"
Add mash_playbook_service_base_directory_name_prefix
2023-03-25 08:49:40 +01:00
prometheus_blackbox_exporter_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}prometheus-blackbox-exporter"
prometheus-blackbox-exporter
2023-03-19 21:34:43 +01:00
prometheus_blackbox_exporter_uid: "{{ mash_playbook_uid }}"
prometheus_blackbox_exporter_gid: "{{ mash_playbook_gid }}"
do not export blackbox exporter by default
2023-03-20 20:18:27 +01:00
prometheus_blackbox_exporter_basicauth_enabled: "{{ prometheus_blackbox_exporter_container_labels_traefik_enabled }}"
prometheus-blackbox-exporter
2023-03-19 21:34:43 +01:00
prometheus_blackbox_exporter_basicauth_user: "{{ '%s' | format(mash_playbook_generic_secret_key) | password_hash('sha512', 'blackbox.user', rounds=655555) | to_uuid }}"
prometheus_blackbox_exporter_basicauth_password: "{{ '%s' | format(mash_playbook_generic_secret_key) | password_hash('sha512', 'blackbox.password', rounds=655555) | to_uuid }}"
prometheus_blackbox_exporter_container_additional_networks: |
{{
([mash_playbook_reverse_proxyable_services_additional_network] if mash_playbook_reverse_proxyable_services_additional_network else [])
}}
do not export blackbox exporter by default
2023-03-20 20:18:27 +01:00
# Only enable Traefik labels if a hostname is set (indicating that this will be exposed publicly)
prometheus_blackbox_exporter_container_labels_traefik_enabled: "{{ mash_playbook_traefik_labels_enabled and prometheus_blackbox_exporter_hostname }}"
prometheus-blackbox-exporter
2023-03-19 21:34:43 +01:00
prometheus_blackbox_exporter_container_labels_traefik_docker_network: "{{ mash_playbook_reverse_proxyable_services_additional_network }}"
prometheus_blackbox_exporter_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"
prometheus_blackbox_exporter_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"
########################################################################
# #
# /prometheus_blackbox_exporter #
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:prometheus_blackbox_exporter
prometheus-blackbox-exporter
2023-03-19 21:34:43 +01:00
Add Prometheus service
2023-03-20 16:54:01 +01:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:prometheus_ssh_exporter
add prometheus-ssh-exporter
2023-09-05 22:44:04 +02:00
########################################################################
# #
# prometheus_ssh_exporter #
# #
########################################################################
prometheus_ssh_exporter_enabled: false
prometheus_ssh_exporter_identifier: "{{ mash_playbook_service_identifier_prefix }}prometheus-ssh-exporter"
prometheus_ssh_exporter_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}prometheus-ssh-exporter"
prometheus_ssh_exporter_uid: "{{ mash_playbook_uid }}"
prometheus_ssh_exporter_gid: "{{ mash_playbook_gid }}"
prometheus_ssh_exporter_basicauth_enabled: "{{ prometheus_ssh_exporter_container_labels_traefik_enabled }}"
prometheus_ssh_exporter_basicauth_user: "{{ '%s' | format(mash_playbook_generic_secret_key) | password_hash('sha512', 'ssh.user', rounds=655555) | to_uuid }}"
prometheus_ssh_exporter_basicauth_password: "{{ '%s' | format(mash_playbook_generic_secret_key) | password_hash('sha512', 'ssh.password', rounds=655555) | to_uuid }}"
prometheus_ssh_exporter_container_additional_networks: |
{{
([mash_playbook_reverse_proxyable_services_additional_network] if mash_playbook_reverse_proxyable_services_additional_network else [])
}}
# Only enable Traefik labels if a hostname is set (indicating that this will be exposed publicly)
prometheus_ssh_exporter_container_labels_traefik_enabled: "{{ mash_playbook_traefik_labels_enabled and prometheus_ssh_exporter_hostname }}"
prometheus_ssh_exporter_container_labels_traefik_docker_network: "{{ mash_playbook_reverse_proxyable_services_additional_network }}"
prometheus_ssh_exporter_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"
prometheus_ssh_exporter_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"
########################################################################
# #
# /prometheus_ssh_exporter #
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:prometheus_ssh_exporter
add prometheus-ssh-exporter
2023-09-05 22:44:04 +02:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:prometheus_node_exporter
Prometheus Node Exporter
2023-03-17 23:13:30 +01:00
########################################################################
# #
# prometheus_node_exporter #
# #
########################################################################
prometheus-node-exporter: disable by default
2023-03-18 08:46:59 +01:00
prometheus_node_exporter_enabled: false
prometheus-node-exporter: Update group_vars/mash_servers Co-authored-by: Slavi Pantaleev <slavi@devture.com>
2023-03-18 08:46:09 +01:00
prometheus_node_exporter_identifier: "{{ mash_playbook_service_identifier_prefix }}prometheus-node-exporter"
Add mash_playbook_service_base_directory_name_prefix
2023-03-25 08:49:40 +01:00
prometheus_node_exporter_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}prometheus-node-exporter"
prometheus-node-exporter: Update group_vars/mash_servers Co-authored-by: Slavi Pantaleev <slavi@devture.com>
2023-03-18 08:46:09 +01:00
Prometheus Node Exporter
2023-03-17 23:13:30 +01:00
prometheus_node_exporter_uid: "{{ mash_playbook_uid }}"
prometheus_node_exporter_gid: "{{ mash_playbook_gid }}"
Upgrade prometheus-node-exporter (v1.5.0-4 -> v1.5.0-6) The new version makes setting a hostname and path prefix optional.
2023-03-20 17:36:14 +01:00
prometheus_node_exporter_basicauth_enabled: "{{ prometheus_node_exporter_container_labels_traefik_enabled }}"
Prometheus Node Exporter
2023-03-17 23:13:30 +01:00
prometheus_node_exporter_basicauth_user: "{{ '%s' | format(mash_playbook_generic_secret_key) | password_hash('sha512', 'node.user', rounds=655555) | to_uuid }}"
prometheus_node_exporter_basicauth_password: "{{ '%s' | format(mash_playbook_generic_secret_key) | password_hash('sha512', 'node.password', rounds=655555) | to_uuid }}"
prometheus_node_exporter_container_additional_networks: |
{{
([mash_playbook_reverse_proxyable_services_additional_network] if mash_playbook_reverse_proxyable_services_additional_network else [])
}}
Upgrade prometheus-node-exporter (v1.5.0-4 -> v1.5.0-6) The new version makes setting a hostname and path prefix optional.
2023-03-20 17:36:14 +01:00
# Only enable Traefik labels if a hostname is set (indicating that this will be exposed publicly)
prometheus_node_exporter_container_labels_traefik_enabled: "{{ mash_playbook_traefik_labels_enabled and prometheus_node_exporter_hostname }}"
Prometheus Node Exporter
2023-03-17 23:13:30 +01:00
prometheus_node_exporter_container_labels_traefik_docker_network: "{{ mash_playbook_reverse_proxyable_services_additional_network }}"
prometheus_node_exporter_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"
prometheus_node_exporter_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"
prometheus_node_exporter_process_extra_arguments:
- "--collector.disable-defaults"
- "--collector.cpu"
- "--collector.filesystem"
- "--collector.meminfo"
- "--collector.systemd"
- "--collector.uname"
prometheus_node_exporter_container_extra_arguments:
- "--security-opt apparmor=unconfined"
- "--mount type=bind,src=/var/run/dbus/system_bus_socket,dst=/var/run/dbus/system_bus_socket,ro,bind-propagation=rslave"
########################################################################
# #
# /prometheus_node_exporter #
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:prometheus_node_exporter
Prometheus Node Exporter
2023-03-17 23:13:30 +01:00
Add PeerTube and Redis support
2023-03-17 14:43:45 +01:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:radicale
Initial commit
2023-03-15 09:58:12 +01:00
########################################################################
# #
Add Nextcloud support
2023-03-17 10:39:04 +01:00
# radicale #
Initial commit
2023-03-15 09:58:12 +01:00
# #
########################################################################
radicale_enabled: false
Make service prefix configurable
2023-03-16 13:41:37 +01:00
radicale_identifier: "{{ mash_playbook_service_identifier_prefix }}radicale"
Initial commit
2023-03-15 09:58:12 +01:00
Add mash_playbook_service_base_directory_name_prefix
2023-03-25 08:49:40 +01:00
radicale_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}radicale"
Initial commit
2023-03-15 09:58:12 +01:00
radicale_uid: "{{ mash_playbook_uid }}"
radicale_gid: "{{ mash_playbook_gid }}"
radicale_container_additional_networks: |
{{
([mash_playbook_reverse_proxyable_services_additional_network] if mash_playbook_reverse_proxyable_services_additional_network else [])
}}
Make use of mash_playbook_traefik_labels_enabled
2023-03-16 10:17:25 +01:00
radicale_container_labels_traefik_enabled: "{{ mash_playbook_traefik_labels_enabled }}"
Initial commit
2023-03-15 09:58:12 +01:00
radicale_container_labels_traefik_docker_network: "{{ mash_playbook_reverse_proxyable_services_additional_network }}"
radicale_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"
radicale_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"
########################################################################
# #
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /radicale #
Add PeerTube and Redis support
2023-03-17 14:43:45 +01:00
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:radicale
Add PeerTube and Redis support
2023-03-17 14:43:45 +01:00
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:redmine
Redmine
2023-03-17 22:27:52 +01:00
########################################################################
# #
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# redmine #
Redmine
2023-03-17 22:27:52 +01:00
# #
########################################################################
redmine_enabled: false
redmine_identifier: "{{ mash_playbook_service_identifier_prefix }}redmine"
Add mash_playbook_service_base_directory_name_prefix
2023-03-25 08:49:40 +01:00
redmine_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}redmine"
Redmine
2023-03-17 22:27:52 +01:00
redmine_uid: "{{ mash_playbook_uid }}"
redmine_gid: "{{ mash_playbook_gid }}"
redmine_secret_key_base: "{{ '%s' | format(mash_playbook_generic_secret_key) | password_hash('sha512', 'secret.base', rounds=655555) | to_uuid }}"
redmine_secret_token: "{{ '%s' | format(mash_playbook_generic_secret_key) | password_hash('sha512', 'secret.token', rounds=655555) | to_uuid }}"
redmine_database_cipher_key: "{{ '%s' | format(mash_playbook_generic_secret_key) | password_hash('sha512', 'db.cipherkey', rounds=655555) | to_uuid }}"
redmine_systemd_required_services_list: |
{{
(['docker.service'])
+
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled and redmine_database_hostname == devture_postgres_identifier else [])
}}
redmine_container_additional_networks: |
{{
([mash_playbook_reverse_proxyable_services_additional_network] if mash_playbook_reverse_proxyable_services_additional_network else [])
+
([devture_postgres_container_network] if devture_postgres_enabled and redmine_database_hostname == devture_postgres_identifier and redmine_container_network != devture_postgres_container_network else [])
}}
redmine_container_labels_traefik_enabled: "{{ mash_playbook_traefik_labels_enabled }}"
redmine_container_labels_traefik_docker_network: "{{ mash_playbook_reverse_proxyable_services_additional_network }}"
redmine_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"
redmine_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"
redmine_database_type: "{{ 'postgresql' if devture_postgres_enabled else 'sqlite3' }}"
redmine_database_hostname: "{{ devture_postgres_connection_hostname if devture_postgres_enabled else '' }}"
fix redmine db username
2023-03-19 08:39:44 +01:00
redmine_database_username: "redmine"
Redmine
2023-03-17 22:27:52 +01:00
redmine_database_password: "{{ '%s' | format(mash_playbook_generic_secret_key) | password_hash('sha512', 'redmine.db', rounds=655555) | to_uuid }}"
########################################################################
# #
# /redmine #
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:redmine
Redmine
2023-03-17 22:27:52 +01:00
Add PeerTube and Redis support
2023-03-17 14:43:45 +01:00
Reorder group_vars/mash_servers alphabetically
2023-04-01 06:58:40 +02:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:redis
Add PeerTube and Redis support
2023-03-17 14:43:45 +01:00
########################################################################
# #
# redis #
# #
########################################################################
redis_enabled: false
redis_identifier: "{{ mash_playbook_service_identifier_prefix }}redis"
Add mash_playbook_service_base_directory_name_prefix
2023-03-25 08:49:40 +01:00
redis_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}redis"
Add PeerTube and Redis support
2023-03-17 14:43:45 +01:00
redis_uid: "{{ mash_playbook_uid }}"
redis_gid: "{{ mash_playbook_gid }}"
########################################################################
# #
# /redis #
Add Syncthing support
2023-03-23 10:32:59 +01:00
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:redis
Add Syncthing support
2023-03-23 10:32:59 +01:00
Move roundcube section in mash_servers so that it's alphabetically-ordered
2023-10-05 09:18:33 +02:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:roundcube
Move roundcube section in mash_servers so that it's alphabetically-ordered
2023-10-05 09:18:33 +02:00
########################################################################
# #
# roundcube #
# #
########################################################################
roundcube_enabled: false
roundcube_identifier: "{{ mash_playbook_service_identifier_prefix }}roundcube"
roundcube_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}roundcube"
roundcube_uid: "0"
roundcube_gid: "0"
roundcube_database_type: "{{ 'postgresql' if devture_postgres_enabled else 'sqlite' }}"
roundcube_database_hostname: "{{ devture_postgres_identifier if devture_postgres_enabled else '' }}"
roundcube_database_port: "{{ '5432' if devture_postgres_enabled else '' }}"
roundcube_database_name: "{{ 'roundcube' if devture_postgres_enabled else '' }}"
roundcube_database_username: "{{ 'roundcube' if devture_postgres_enabled else '' }}"
roundcube_database_password: "{{ '%s' | format(mash_playbook_generic_secret_key) | password_hash('sha512', 'db.roundcube', rounds=655555) | to_uuid }}"
roundcube_systemd_required_systemd_services_list: |
{{
(['docker.service'])
+
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled and roundcube_database_hostname == devture_postgres_identifier else [])
}}
roundcube_container_labels_traefik_enabled: "{{ mash_playbook_traefik_labels_enabled }}"
roundcube_container_labels_traefik_docker_network: "{{ mash_playbook_reverse_proxyable_services_additional_network }}"
roundcube_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"
roundcube_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"
roundcube_container_additional_networks: |
{{
([mash_playbook_reverse_proxyable_services_additional_network] if mash_playbook_reverse_proxyable_services_additional_network else [])
+
([devture_postgres_container_network] if devture_postgres_enabled and roundcube_database_hostname == devture_postgres_identifier and roundcube_container_network != devture_postgres_container_network else [])
}}
########################################################################
# #
# /roundcube #
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:roundcube
Move roundcube section in mash_servers so that it's alphabetically-ordered
2023-10-05 09:18:33 +02:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:rumqttd
Add rumqttd
2023-06-28 22:41:48 +02:00
########################################################################
# #
# rumqttd #
# #
########################################################################
rumqttd_enabled: false
rumqttd_identifier: "{{ mash_playbook_service_identifier_prefix }}rumqttd"
Add Syncthing support
2023-03-23 10:32:59 +01:00
Add rumqttd
2023-06-28 22:41:48 +02:00
rumqttd_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}rumqttd"
rumqttd_uid: "{{ mash_playbook_uid }}"
rumqttd_gid: "{{ mash_playbook_gid }}"
########################################################################
# #
# /rumqttd #
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:rumqttd
Add Syncthing support
2023-03-23 10:32:59 +01:00
add Soft Serve
2023-03-28 15:02:22 +02:00
Move roundcube section in mash_servers so that it's alphabetically-ordered
2023-10-05 09:18:33 +02:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:soft_serve
add Soft Serve
2023-03-28 15:02:22 +02:00
########################################################################
# #
# soft-serve #
# #
########################################################################
soft_serve_enabled: false
soft_serve_identifier: "{{ mash_playbook_service_identifier_prefix }}soft-serve"
soft_serve_uid: "{{ mash_playbook_uid }}"
soft_serve_gid: "{{ mash_playbook_gid }}"
soft_serve_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}soft-serve"
########################################################################
# #
# /soft-serve #
# #
Add Syncthing support
2023-03-23 10:32:59 +01:00
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:soft_serve
Add Syncthing support
2023-03-23 10:32:59 +01:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:syncthing
Add Syncthing support
2023-03-23 10:32:59 +01:00
########################################################################
# #
# syncthing #
# #
########################################################################
syncthing_enabled: false
syncthing_identifier: "{{ mash_playbook_service_identifier_prefix }}syncthing"
syncthing_uid: "{{ mash_playbook_uid }}"
syncthing_gid: "{{ mash_playbook_gid }}"
Add mash_playbook_service_base_directory_name_prefix
2023-03-25 08:49:40 +01:00
syncthing_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}syncthing"
Add Syncthing support
2023-03-23 10:32:59 +01:00
Switch to using some newly-added _auto variables for Focalboard and Syncthing
2023-04-05 06:52:29 +02:00
syncthing_container_additional_networks_auto: |
Add Syncthing support
2023-03-23 10:32:59 +01:00
{{
([mash_playbook_reverse_proxyable_services_additional_network] if mash_playbook_reverse_proxyable_services_additional_network else [])
}}
syncthing_container_labels_traefik_enabled: "{{ mash_playbook_traefik_labels_enabled }}"
syncthing_container_labels_traefik_docker_network: "{{ mash_playbook_reverse_proxyable_services_additional_network }}"
syncthing_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"
syncthing_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"
########################################################################
# #
# /syncthing #
Initial commit
2023-03-15 09:58:12 +01:00
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:syncthing
Initial commit
2023-03-15 09:58:12 +01:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:telegraf
Add Telegraf
2023-06-29 10:46:34 +02:00
########################################################################
# #
# telegraf #
# #
########################################################################
telegraf_enabled: false
telegraf_identifier: "{{ mash_playbook_service_identifier_prefix }}telegraf"
telegraf_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}telegraf"
telegraf_uid: "{{ mash_playbook_uid }}"
telegraf_gid: "{{ mash_playbook_gid }}"
telegraf_systemd_required_services_list: |
{{
(['docker.service'])
+
([(influxdb_identifier + '.service')] if influxdb_enabled else [])
}}
########################################################################
# #
# /telegraf #
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:telegraf
Initial commit
2023-03-15 09:58:12 +01:00
Move roundcube section in mash_servers so that it's alphabetically-ordered
2023-10-05 09:18:33 +02:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:vaultwarden
Add initial Vaultwarden support Absorbed from the https://github.com/spantaleev/vaultwarden-docker-ansible-deploy Ansible playbook. The `vaultwarden_backup` role hasn't been migrated over yet.
2023-03-16 11:05:21 +01:00
########################################################################
# #
# vaultwarden #
# #
########################################################################
Fix typo
2023-03-16 17:35:34 +01:00
vaultwarden_enabled: false
Add initial Vaultwarden support Absorbed from the https://github.com/spantaleev/vaultwarden-docker-ansible-deploy Ansible playbook. The `vaultwarden_backup` role hasn't been migrated over yet.
2023-03-16 11:05:21 +01:00
Make service prefix configurable
2023-03-16 13:41:37 +01:00
vaultwarden_identifier: "{{ mash_playbook_service_identifier_prefix }}vaultwarden"
Add initial Vaultwarden support Absorbed from the https://github.com/spantaleev/vaultwarden-docker-ansible-deploy Ansible playbook. The `vaultwarden_backup` role hasn't been migrated over yet.
2023-03-16 11:05:21 +01:00
vaultwarden_uid: "{{ mash_playbook_uid }}"
vaultwarden_gid: "{{ mash_playbook_gid }}"
Add mash_playbook_service_base_directory_name_prefix
2023-03-25 08:49:40 +01:00
vaultwarden_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}vaultwarden"
Add initial Vaultwarden support Absorbed from the https://github.com/spantaleev/vaultwarden-docker-ansible-deploy Ansible playbook. The `vaultwarden_backup` role hasn't been migrated over yet.
2023-03-16 11:05:21 +01:00
vaultwarden_systemd_required_systemd_services_list: |
{{
(['docker.service'])
+
Minor service inter-dependency improvements
2023-03-16 14:41:06 +01:00
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled and vaultwarden_database_hostname == devture_postgres_identifier else [])
Add initial Vaultwarden support Absorbed from the https://github.com/spantaleev/vaultwarden-docker-ansible-deploy Ansible playbook. The `vaultwarden_backup` role hasn't been migrated over yet.
2023-03-16 11:05:21 +01:00
}}
Switch from vaultwarden_container_additional_networks to vaultwarden_container_additional_networks_auto
2023-09-08 17:32:01 +02:00
vaultwarden_container_additional_networks_auto: |
Add initial Vaultwarden support Absorbed from the https://github.com/spantaleev/vaultwarden-docker-ansible-deploy Ansible playbook. The `vaultwarden_backup` role hasn't been migrated over yet.
2023-03-16 11:05:21 +01:00
{{
([mash_playbook_reverse_proxyable_services_additional_network] if mash_playbook_reverse_proxyable_services_additional_network else [])
+
([devture_postgres_container_network] if devture_postgres_enabled and vaultwarden_database_hostname == devture_postgres_identifier and vaultwarden_container_network != devture_postgres_container_network else [])
}}
vaultwarden_container_labels_traefik_enabled: "{{ mash_playbook_traefik_labels_enabled }}"
vaultwarden_container_labels_traefik_docker_network: "{{ mash_playbook_reverse_proxyable_services_additional_network }}"
Wire vaultwarden_container_labels_traefik_entrypoints/vaultwarden_container_labels_traefik_tls_certResolver
2023-03-23 07:33:44 +01:00
vaultwarden_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"
vaultwarden_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"
Add initial Vaultwarden support Absorbed from the https://github.com/spantaleev/vaultwarden-docker-ansible-deploy Ansible playbook. The `vaultwarden_backup` role hasn't been migrated over yet.
2023-03-16 11:05:21 +01:00
vaultwarden_database_hostname: "{{ devture_postgres_identifier if devture_postgres_enabled else '' }}"
vaultwarden_database_port: "{{ '5432' if devture_postgres_enabled else '' }}"
vaultwarden_database_username: "vaultwarden"
vaultwarden_database_password: "{{ '%s' | format(mash_playbook_generic_secret_key) | password_hash('sha512', 'db.vaultwarden', rounds=655555) | to_uuid }}"
########################################################################
# #
# /vaultwarden #
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:vaultwarden
Add initial Vaultwarden support Absorbed from the https://github.com/spantaleev/vaultwarden-docker-ansible-deploy Ansible playbook. The `vaultwarden_backup` role hasn't been migrated over yet.
2023-03-16 11:05:21 +01:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:uptime_kuma
Initial commit
2023-03-15 09:58:12 +01:00
########################################################################
# #
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# uptime_kuma #
Initial commit
2023-03-15 09:58:12 +01:00
# #
########################################################################
uptime_kuma_enabled: false
Make service prefix configurable
2023-03-16 13:41:37 +01:00
uptime_kuma_identifier: "{{ mash_playbook_service_identifier_prefix }}uptime-kuma"
Initial commit
2023-03-15 09:58:12 +01:00
Add mash_playbook_service_base_directory_name_prefix
2023-03-25 08:49:40 +01:00
uptime_kuma_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}uptime-kuma"
Initial commit
2023-03-15 09:58:12 +01:00
uptime_kuma_uid: "{{ mash_playbook_uid }}"
uptime_kuma_gid: "{{ mash_playbook_gid }}"
uptime_kuma_container_additional_networks: |
{{
([mash_playbook_reverse_proxyable_services_additional_network] if mash_playbook_reverse_proxyable_services_additional_network else [])
}}
Make use of mash_playbook_traefik_labels_enabled
2023-03-16 10:17:25 +01:00
uptime_kuma_container_labels_traefik_enabled: "{{ mash_playbook_traefik_labels_enabled }}"
Initial commit
2023-03-15 09:58:12 +01:00
uptime_kuma_container_labels_traefik_docker_network: "{{ mash_playbook_reverse_proxyable_services_additional_network }}"
uptime_kuma_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"
uptime_kuma_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"
########################################################################
# #
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /uptime_kuma #
Initial commit
2023-03-15 09:58:12 +01:00
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:uptime_kuma
Add Gitea and Woodpecker CI support
2023-03-16 17:26:06 +01:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:wg_easy
Add support for WireGuard Easy
2023-04-29 08:30:26 +02:00
########################################################################
# #
# wg-easy #
# #
########################################################################
wg_easy_enabled: false
wg_easy_identifier: "{{ mash_playbook_service_identifier_prefix }}wg-easy"
wg_easy_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}wg-easy"
wg_easy_uid: "{{ mash_playbook_uid }}"
wg_easy_gid: "{{ mash_playbook_gid }}"
wg_easy_container_additional_networks_auto: |
{{
([mash_playbook_reverse_proxyable_services_additional_network] if mash_playbook_reverse_proxyable_services_additional_network else [])
}}
wg_easy_container_labels_traefik_enabled: "{{ mash_playbook_traefik_labels_enabled }}"
wg_easy_container_labels_traefik_docker_network: "{{ mash_playbook_reverse_proxyable_services_additional_network }}"
wg_easy_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"
wg_easy_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"
########################################################################
# #
# /wg-easy #
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:wg_easy
Add support for WireGuard Easy
2023-04-29 08:30:26 +02:00
Move roundcube section in mash_servers so that it's alphabetically-ordered
2023-10-05 09:18:33 +02:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:forgejo
Add Forgejo (#92) * Create forgejo.md * Update mash_servers Add Forgejo * Update requirements.yml * Update releases.opml * Update setup.yml * Update supported-services.md * Update requirements.yml Fix typo * Update mash_servers Forgot "+" * Fix Syntax Error * Update Version for Requirement.yml
2023-09-06 14:53:44 +02:00
########################################################################
# #
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# forgejo #
Add Forgejo (#92) * Create forgejo.md * Update mash_servers Add Forgejo * Update requirements.yml * Update releases.opml * Update setup.yml * Update supported-services.md * Update requirements.yml Fix typo * Update mash_servers Forgot "+" * Fix Syntax Error * Update Version for Requirement.yml
2023-09-06 14:53:44 +02:00
# #
########################################################################
forgejo_enabled: false
forgejo_identifier: "{{ mash_playbook_service_identifier_prefix }}forgejo"
forgejo_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}forgejo"
forgejo_uid: "{{ mash_playbook_uid }}"
forgejo_gid: "{{ mash_playbook_gid }}"
forgejo_systemd_required_systemd_services_list: |
{{
(['docker.service'])
+
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled and forgejo_config_database_hostname == devture_postgres_identifier else [])
}}
forgejo_container_additional_networks: |
{{
([mash_playbook_reverse_proxyable_services_additional_network] if mash_playbook_reverse_proxyable_services_additional_network else [])
+
([devture_postgres_container_network] if devture_postgres_enabled and forgejo_config_database_hostname == devture_postgres_identifier and forgejo_container_network != devture_postgres_container_network else [])
}}
forgejo_container_labels_traefik_enabled: "{{ mash_playbook_traefik_labels_enabled }}"
forgejo_container_labels_traefik_docker_network: "{{ mash_playbook_reverse_proxyable_services_additional_network }}"
forgejo_container_labels_traefik_entrypoints: "{{ devture_traefik_entrypoint_primary }}"
forgejo_container_labels_traefik_tls_certResolver: "{{ devture_traefik_certResolver_primary }}"
forgejo_config_database_hostname: "{{ devture_postgres_identifier if devture_postgres_enabled else '' }}"
forgejo_config_database_port: "{{ '5432' if devture_postgres_enabled else '' }}"
forgejo_config_database_username: "forgejo"
forgejo_config_database_password: "{{ '%s' | format(mash_playbook_generic_secret_key) | password_hash('sha512', 'db.forgejo', rounds=655555) | to_uuid }}"
########################################################################
# #
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /forgejo #
Add Forgejo (#92) * Create forgejo.md * Update mash_servers Add Forgejo * Update requirements.yml * Update releases.opml * Update setup.yml * Update supported-services.md * Update requirements.yml Fix typo * Update mash_servers Forgot "+" * Fix Syntax Error * Update Version for Requirement.yml
2023-09-06 14:53:44 +02:00
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:forgejo
Add support for WireGuard Easy
2023-04-29 08:30:26 +02:00
Move roundcube section in mash_servers so that it's alphabetically-ordered
2023-10-05 09:18:33 +02:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:woodpecker_ci_server
Add Gitea and Woodpecker CI support
2023-03-16 17:26:06 +01:00
########################################################################
# #
# woodpecker-ci-server #
# #
########################################################################
devture_woodpecker_ci_server_enabled: false
devture_woodpecker_ci_server_identifier: "{{ mash_playbook_service_identifier_prefix }}woodpecker-ci-server"
devture_woodpecker_ci_server_uid: "{{ mash_playbook_uid }}"
devture_woodpecker_ci_server_gid: "{{ mash_playbook_gid }}"
Add mash_playbook_service_base_directory_name_prefix
2023-03-25 08:49:40 +01:00
devture_woodpecker_ci_server_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}woodpecker-ci/server"
Add Gitea and Woodpecker CI support
2023-03-16 17:26:06 +01:00
devture_woodpecker_ci_server_systemd_required_systemd_services_list: |
{{
(['docker.service'])
+
([devture_postgres_identifier ~ '.service'] if devture_postgres_enabled and devture_woodpecker_ci_server_database_datasource_hostname == devture_postgres_identifier else [])
}}
devture_woodpecker_ci_server_container_additional_networks: |
{{
(
([mash_playbook_reverse_proxyable_services_additional_network] if mash_playbook_reverse_proxyable_services_additional_network else [])
+
([devture_postgres_container_network] if devture_postgres_enabled and devture_woodpecker_ci_server_database_datasource_hostname == devture_postgres_identifier and devture_woodpecker_ci_server_container_network != devture_postgres_container_network else [])
) | unique
}}
devture_woodpecker_ci_server_container_labels_traefik_enabled: "{{ mash_playbook_traefik_labels_enabled }}"
devture_woodpecker_ci_server_container_labels_traefik_docker_network: "{{ mash_playbook_reverse_proxyable_services_additional_network }}"
devture_woodpecker_ci_server_database_driver: postgres
devture_woodpecker_ci_server_database_datasource: "postgres://{{ devture_woodpecker_ci_server_database_datasource_username }}:{{ devture_woodpecker_ci_server_database_datasource_password }}@{{ devture_woodpecker_ci_server_database_datasource_hostname }}:{{ devture_woodpecker_ci_server_database_datasource_port }}/{{ devture_woodpecker_ci_server_database_datasource_db_name }}?sslmode=disable"
devture_woodpecker_ci_server_database_datasource_hostname: "{{ devture_postgres_identifier if devture_postgres_enabled else '' }}"
devture_woodpecker_ci_server_database_datasource_port: "{{ '5432' if devture_postgres_enabled else '' }}"
devture_woodpecker_ci_server_database_datasource_username: woodpecker_ci_server
devture_woodpecker_ci_server_database_datasource_password: "{{ '%s' | format(mash_playbook_generic_secret_key) | password_hash('sha512', 'woodpecker.ci', rounds=655555) | to_uuid }}"
devture_woodpecker_ci_server_database_datasource_db_name: woodpecker_ci_server
########################################################################
# #
# /woodpecker-ci-server #
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:woodpecker_ci_server
Add Gitea and Woodpecker CI support
2023-03-16 17:26:06 +01:00
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# role-specific:woodpecker_ci_agent
Add Gitea and Woodpecker CI support
2023-03-16 17:26:06 +01:00
########################################################################
# #
# woodpecker-ci-agent #
# #
########################################################################
devture_woodpecker_ci_agent_enabled: false
devture_woodpecker_ci_agent_identifier: "{{ mash_playbook_service_identifier_prefix }}woodpecker-ci-agent"
devture_woodpecker_ci_agent_uid: "{{ mash_playbook_uid }}"
devture_woodpecker_ci_agent_gid: "{{ mash_playbook_gid }}"
Add mash_playbook_service_base_directory_name_prefix
2023-03-25 08:49:40 +01:00
devture_woodpecker_ci_agent_base_path: "{{ mash_playbook_base_path }}/{{ mash_playbook_service_base_directory_name_prefix }}woodpecker-ci/agent"
Add Gitea and Woodpecker CI support
2023-03-16 17:26:06 +01:00
devture_woodpecker_ci_agent_systemd_required_systemd_services_list: |
{{
(['docker.service'])
+
([devture_woodpecker_ci_server_identifier ~ '.service'] if devture_woodpecker_ci_server_enabled else [])
}}
devture_woodpecker_ci_agent_container_additional_networks: |
{{
(
([devture_woodpecker_ci_server_container_network] if devture_woodpecker_ci_server_enabled and devture_woodpecker_ci_server_container_network != devture_woodpecker_ci_agent_container_network else [])
) | unique
}}
devture_woodpecker_ci_agent_config_server: "{{ (devture_woodpecker_ci_server_identifier + ':' + devture_woodpecker_ci_server_config_grpc_addr_port | string) if devture_woodpecker_ci_agent_enabled else '' }}"
devture_woodpecker_ci_agent_config_agent_secret: "{{ devture_woodpecker_ci_server_config_agent_secret if devture_woodpecker_ci_agent_enabled else '' }}"
########################################################################
# #
# /woodpecker-ci-agent #
# #
########################################################################
Add role-specific annotations to group_vars/mash_servers_all
2023-11-20 11:08:51 +01:00
# /role-specific:woodpecker_ci_agent
Copy permalink