added wiki.skudakrennsport.com

ansible/roles/podman/tasks/configuration-nginx-http.yml

@@ -65,6 +65,7 @@
     - "{{ pi_server_name }}.conf"
     - "{{ home_server_name }}.conf"
     - "{{ assistant_server_name }}.conf"
+    - "{{ bookstack_server_name }}.conf"
     - "{{ video_server_name }}.conf"
     - "{{ parts_server_name }}.conf"
     - "{{ logs_server_name }}.conf"
@@ -87,6 +88,7 @@
     - "{{ parts_server_name }}.conf"
     - "{{ home_server_name }}.conf"
     - "{{ assistant_server_name }}.conf"
+    - "{{ bookstack_server_name }}.conf"
     - "{{ video_server_name }}.conf"
     - "{{ logs_server_name }}.conf"
   notify:

ansible/roles/podman/tasks/configuration-nginx-https.yml

@@ -36,6 +36,7 @@
   loop:
     - "{{ ci_server_name }}.https.conf"
     - "{{ parts_server_name }}.https.conf"
+    - "{{ bookstack_server_name }}.https.conf"
   notify:
     - restorecon podman
     - restart nginx
@@ -52,6 +53,7 @@
   loop:
     - "{{ ci_server_name }}.https.conf"
     - "{{ parts_server_name }}.https.conf"
+    - "{{ bookstack_server_name }}.https.conf"
   notify:
     - restorecon podman
     - restart nginx

ansible/roles/podman/tasks/container-bookstack.yml

@@ -0,0 +1,80 @@
+---
+- name: create required bookstack volumes
+  become: true
+  ansible.builtin.file:
+    path: "{{ item }}"
+    state: directory
+    owner: "{{ podman_subuid.stdout }}"
+    group: "{{ podman_user }}"
+    mode: 0755
+  notify: restorecon podman
+  loop:
+    - "{{ bookstack_path }}/mysql"
+  tags: bookstack
+
+- name: flush handlers
+  ansible.builtin.meta: flush_handlers
+  tags: bookstack
+
+- name: create bookstack-db container
+  become: true
+  become_user: "{{ podman_user }}"
+  containers.podman.podman_container:
+    name: bookstack-db
+    image: docker.io/mysql:5.7.21
+    recreate: false
+    restart: false
+    restart_policy: on-failure
+    log_driver: journald
+    network:
+      - shared
+    env:
+      MYSQL_ROOT_PASSWORD: "{{ bookstack_db_root_pass }}"
+      TZ: "America/New_York"
+      MYSQL_DATABASE: bookstack
+      MYSQL_USER: bookstack
+      MYSQL_PASSWORD: "{{ bookstack_db_pass }}"
+    volumes:
+      - "{{ bookstack_path }}/mysql:/var/lib/mysql"
+  tags: bookstack
+
+- name: create systemd startup job for bookstack-db
+  include_tasks: systemd-generate.yml
+  vars:
+    container_name: bookstack-db
+  tags: bookstack
+
+- name: create bookstack container
+  become: true
+  become_user: "{{ podman_user }}"
+  containers.podman.podman_container:
+    name: bookstack
+    image: docker.io/solidnerd/bookstack:22.04
+    recreate: true
+    restart: false
+    restart_policy: on-failure
+    log_driver: journald
+    network:
+      - shared
+    env:
+      APP_URL: "https://wiki.skudakrennsport.com"
+      DB_HOST: "bookstack-db"
+      DB_USERNAME: "bookstack"
+      DB_DATABASE: "bookstack"
+      DB_PASSWORD: "{{ bookstack_db_pass }}"
+      MAIL_DRIVER: "smtp"
+      MAIL_HOST: "{{ bookstack_mail_host }}"
+      MAIL_PORT: 465
+      MAIL_ENCRYPTION: "ssl"
+      MAIL_USERNAME: "{{ bookstack_mail_user }}"
+      MAIL_PASSWORD: "{{ bookstack_mail_pass }}"
+      MAIL_FROM: "{{ bookstack_mail_user }}"
+      MAIL_FROM_NAME: "Skudak Wiki"
+    ports:
+      - "6875:8080"
+  tags: bookstack
+#- name: create systemd startup job for bookstack
+#  include_tasks: systemd-generate.yml
+#  vars:
+#    container_name: bookstack
+#  tags: bookstack

ansible/roles/podman/tasks/firewall.yml

@@ -8,14 +8,15 @@
     zone: "public"
     state: enabled
   loop:
-    - 53/tcp
-    - 53/udp
-    - 1153/tcp
-    - 1153/udp
-    - 80/tcp
-    - 443/tcp
     - "{{ syslog_udp_default }}/udp"
     - "{{ syslog_udp_error }}/udp"
     - "{{ syslog_udp_unifi }}/udp"
+    - 1153/tcp
+    - 1153/udp
+    - 443/tcp
+    - 53/tcp
+    - 53/udp
+    - 6875/tcp
+    - 80/tcp
   notify: restart firewalld
   tags: firewall

ansible/roles/podman/tasks/main.yml

@@ -8,4 +8,5 @@
 - import_tasks: container-partkeepr.yml
 - import_tasks: container-graylog.yml
 - import_tasks: container-pihole.yml
+- import_tasks: container-bookstack.yml
 - import_tasks: container-nginx.yml