noticket - reorganized podman

ansible/roles/podman/tasks/containers/skudak/cloud.yml

@@ -0,0 +1,100 @@
+---
+- name: create required skudak cloud volumes
+  become: true
+  ansible.builtin.file:
+    path: "{{ item }}"
+    state: directory
+    owner: "{{ podman_subuid.stdout }}"
+    group: "{{ podman_subuid.stdout }}"
+    mode: 0755
+  notify: restorecon podman
+  loop:
+    - "{{ cloud_skudak_path }}/apps"
+    - "{{ cloud_skudak_path }}/config"
+    - "{{ cloud_skudak_path }}/data"
+    - "{{ cloud_skudak_path }}/mysql"
+
+- name: unshare chown the skudak cloud volumes
+  become: true
+  become_user: "{{ podman_user }}"
+  changed_when: false
+  ansible.builtin.command: |
+    podman unshare chown -R 33:33 {{ cloud_skudak_path }}/apps {{ cloud_skudak_path }}/data {{ cloud_skudak_path}}/config
+
+- name: get user/group id from unshare
+  become: true
+  ansible.builtin.stat:
+    path: "{{ cloud_skudak_path }}/data"
+  register: cloud_skudak_owner
+
+- name: mount cloud cifs
+  become: true
+  ansible.posix.mount:
+    src: "{{ cloud_skudak_cifs_src }}"
+    path: "{{ cloud_skudak_path }}/data"
+    fstype: cifs
+    opts: "username=skucloud,password={{ cloud_skudak_cifs_pass }},uid={{ cloud_skudak_owner.stat.uid }},gid={{ cloud_skudak_owner.stat.uid }},file_mode=0770,dir_mode=0770"
+    state: mounted
+
+- name: flush handlers
+  ansible.builtin.meta: flush_handlers
+
+- import_tasks: podman/podman-check.yml
+  vars:
+    container_name: skudak-cloud-db
+    container_image: "{{ db_image }}"
+
+- name: create skudak-cloud-db container
+  become: true
+  become_user: "{{ podman_user }}"
+  containers.podman.podman_container:
+    name: skudak-cloud-db
+    image: "{{ db_image }}"
+    restart_policy: on-failure:3
+    log_driver: journald
+    network:
+      - shared
+    env:
+      MYSQL_ROOT_PASSWORD: "{{ cloud_skudak_db_root_pass }}"
+      MYSQL_DATABASE: skucloud
+      MYSQL_PASSWORD: "{{ cloud_skudak_db_pass }}"
+      MYSQL_USER: skucloud
+    volumes:
+      - "{{ cloud_skudak_path }}/mysql:/var/lib/mysql"
+
+- name: create systemd startup job for skudak-cloud-db
+  include_tasks: podman/systemd-generate.yml
+  vars:
+    container_name: skudak-cloud-db
+
+- import_tasks: podman/podman-check.yml
+  vars:
+    container_name: skudak-cloud
+    container_image: "{{ image }}"
+
+- name: create skudak cloud container
+  become: true
+  become_user: "{{ podman_user }}"
+  containers.podman.podman_container:
+    name: skudak-cloud
+    image: "{{ image }}"
+    restart_policy: on-failure:3
+    log_driver: journald
+    network:
+      - shared
+    env:
+      MYSQL_PASSWORD: "{{ cloud_skudak_db_pass }}"
+      MYSQL_DATABASE: skucloud
+      MYSQL_HOST: skudak-cloud-db
+      MYSQL_USER: skucloud
+    volumes:
+      - "{{ cloud_skudak_path }}/apps:/var/www/html/custom_apps"
+      - "{{ cloud_skudak_path }}/data:/var/www/html/data"
+      - "{{ cloud_skudak_path }}/config:/var/www/html/config"
+    ports:
+      - "8090:80"
+
+- name: create systemd startup job for cloud
+  include_tasks: podman/systemd-generate.yml
+  vars:
+    container_name: skudak-cloud

ansible/roles/podman/tasks/containers/skudak/wiki.yml

@@ -0,0 +1,94 @@
+---
+- name: create required bookstack volumes
+  become: true
+  ansible.builtin.file:
+    path: "{{ item }}"
+    state: directory
+    owner: "{{ podman_subuid.stdout }}"
+    group: "{{ podman_user }}"
+    mode: 0755
+  notify: restorecon podman
+  loop:
+    - "{{ bookstack_path }}/mysql"
+    - "{{ bookstack_path }}/public"
+    - "{{ bookstack_path }}/storage"
+
+- name: flush handlers
+  ansible.builtin.meta: flush_handlers
+
+- name: unshare chown the bookstack upload volumes
+  become: true
+  become_user: "{{ podman_user }}"
+  changed_when: false
+  ansible.builtin.command: |
+    podman unshare chown -R 33:33 {{ bookstack_path }}/public {{ bookstack_path }}/storage
+
+- import_tasks: podman/podman-check.yml
+  vars:
+    container_name: bookstack-db
+    container_image: "{{ db_image }}"
+    
+- name: create bookstack-db container
+  become: true
+  become_user: "{{ podman_user }}"
+  containers.podman.podman_container:
+    name: bookstack-db
+    image: "{{ db_image }}"
+    restart_policy: on-failure:3
+    log_driver: journald
+    network:
+      - shared
+    env:
+      MYSQL_ROOT_PASSWORD: "{{ bookstack_db_root_pass }}"
+      TZ: "America/New_York"
+      MYSQL_DATABASE: bookstack
+      MYSQL_USER: bookstack
+      MYSQL_PASSWORD: "{{ bookstack_db_pass }}"
+    volumes:
+      - "{{ bookstack_path }}/mysql:/var/lib/mysql"
+
+- name: create systemd startup job for bookstack-db
+  include_tasks: podman/systemd-generate.yml
+  vars:
+    container_name: bookstack-db
+
+- import_tasks: podman/podman-check.yml
+  vars:
+    container_name: bookstack
+    container_image: "{{ image }}"
+
+- name: create bookstack container
+  become: true
+  become_user: "{{ podman_user }}"
+  containers.podman.podman_container:
+    name: bookstack
+    image: "{{ image }}"
+    restart_policy: on-failure:3
+    log_driver: journald
+    network:
+      - shared
+    env:
+      APP_URL: "https://wiki.skudakrennsport.com"
+      APP_KEY: "{{ bookstack_app_key }}"
+      DB_HOST: "bookstack-db"
+      DB_USERNAME: "bookstack"
+      DB_DATABASE: "bookstack"
+      DB_PASSWORD: "{{ bookstack_db_pass }}"
+      MAIL_DRIVER: "smtp"
+      MAIL_HOST: "{{ bookstack_mail_host }}"
+      MAIL_PORT: 465
+      MAIL_ENCRYPTION: "ssl"
+      MAIL_USERNAME: "{{ bookstack_mail_user }}"
+      MAIL_PASSWORD: "{{ bookstack_mail_pass }}"
+      MAIL_FROM: "{{ bookstack_mail_user }}"
+      MAIL_FROM_NAME: "Skudak Wiki"
+    ports:
+      - "6875:8080"
+    volumes:
+      - "{{ bookstack_path }}/public:/var/www/bookstack/public/uploads"
+      - "{{ bookstack_path }}/storage:/var/www/bookstack/storage/uploads"
+
+- name: create systemd startup job for bookstack
+  include_tasks: podman/systemd-generate.yml
+  vars:
+    container_name: bookstack