chore: non-cifs nextcloud, partsy, zomboid updates

ansible/roles/podman/tasks/containers/skudak/cloud.yml

@@ -13,6 +13,7 @@
     - "{{ cloud_skudak_path }}/config"
     - "{{ cloud_skudak_path }}/data"
     - "{{ cloud_skudak_path }}/mysql"
+    - "{{ cloud_skudak_path }}/scripts"
 
 - name: unshare chown the skudak cloud volumes
   become: true
@@ -21,24 +22,19 @@
   ansible.builtin.command: |
     podman unshare chown -R 33:33 {{ cloud_skudak_path }}/apps {{ cloud_skudak_path }}/data {{ cloud_skudak_path}}/config
 
-- name: get user/group id from unshare
-  become: true
-  ansible.builtin.stat:
-    path: "{{ cloud_skudak_path }}/data"
-  register: cloud_skudak_owner
-
-- name: mount cloud cifs
-  become: true
-  ansible.posix.mount:
-    src: "{{ cloud_skudak_cifs_src }}"
-    path: "{{ cloud_skudak_path }}/data"
-    fstype: cifs
-    opts: "username=skucloud,password={{ cloud_skudak_cifs_pass }},uid={{ cloud_skudak_owner.stat.uid }},gid={{ cloud_skudak_owner.stat.uid }},file_mode=0770,dir_mode=0770"
-    state: mounted
-
 - name: flush handlers
   ansible.builtin.meta: flush_handlers
 
+- name: copy skudak cloud libresign setup script
+  become: true
+  ansible.builtin.template:
+    src: nextcloud/libresign-setup.sh.j2
+    dest: "{{ cloud_skudak_path }}/scripts/libresign-setup.sh"
+    owner: "{{ podman_subuid.stdout }}"
+    group: "{{ podman_subuid.stdout }}"
+    mode: 0755
+  notify: restorecon podman
+
 - import_tasks: podman/podman-check.yml
   vars:
     container_name: skudak-cloud-db
@@ -91,6 +87,7 @@
       - "{{ cloud_skudak_path }}/apps:/var/www/html/custom_apps"
       - "{{ cloud_skudak_path }}/data:/var/www/html/data"
       - "{{ cloud_skudak_path }}/config:/var/www/html/config"
+      - "{{ cloud_skudak_path }}/scripts/libresign-setup.sh:/docker-entrypoint-hooks.d/before-starting/libresign-setup.sh:ro"
     ports:
       - "8090:80"
 
@@ -99,6 +96,20 @@
   vars:
     container_name: skudak-cloud
 
+# Install poppler-utils for pdfsig/pdfinfo (LibreSign handles java/pdftk/jsignpdf via occ)
+# This needs to be reinstalled on each container recreation
+- name: install poppler-utils in skudak-cloud
+  become: true
+  become_user: "{{ podman_user }}"
+  ansible.builtin.command:
+    cmd: >
+      podman exec -u 0 skudak-cloud
+      sh -c "apt-get update && apt-get install -y --no-install-recommends
+      poppler-utils && rm -rf /var/lib/apt/lists/*"
+  register: poppler_install
+  changed_when: "'is already the newest version' not in poppler_install.stdout"
+  failed_when: false
+
 - name: disable nextcloud signup link in config
   become: true
   ansible.builtin.lineinfile: