minor fixes, updated graylog, persistent iptables rules

ansible/roles/podman/tasks/container-awsddns.yml

@@ -5,7 +5,7 @@
   diff: false
   containers.podman.podman_container:
     name: awsddns
-    image: docker.io/bdebyl/awsddns
+    image: docker.io/bdebyl/awsddns:1.0.10
     recreate: false
     restart: true
     restart_policy: on-failure

ansible/roles/podman/tasks/container-drone.yml

@@ -27,11 +27,10 @@
     restart_policy: on-failure
     log_driver: journald
     env:
-      DRONE_LOGS_DEBUG: "true"
-      DRONE_RPC_DEBUG: "true"
+      DRONE_LOGS_DEBUG: "false"
+      DRONE_RPC_DEBUG: "false"
       DRONE_GITHUB_CLIENT_ID: "{{ drone_gh_client_id }}"
       DRONE_GITHUB_CLIENT_SECRET: "{{ drone_gh_client_sec }}"
-      DRONE_GIT_ALWAYS_AUTH: "true"
       DRONE_RPC_SECRET: "{{ drone_rpc_secret }}"
       DRONE_SERVER_HOST: "{{ ci_server_name }}"
       DRONE_SERVER_PROTO: "{{ drone_server_proto }}"

ansible/roles/podman/tasks/container-graylog.yml

@@ -96,8 +96,8 @@
   become_user: "{{ podman_user }}"
   containers.podman.podman_container:
     name: graylog
-    image: docker.io/graylog/graylog:4.2
-    recreate: false
+    image: docker.io/graylog/graylog:4.2.9
+    recreate: true
     restart: true
     restart_policy: on-failure
     sysctl:

ansible/roles/podman/tasks/container-partkeepr.yml

@@ -4,7 +4,7 @@
   ansible.builtin.file:
     path: "{{ item }}"
     state: directory
-    owner: "{{ podman_user }}"
+    owner: "{{ podman_subuid.stdout }}"
     group: "{{ podman_user }}"
     mode: 0755
   notify: restorecon podman

ansible/roles/podman/tasks/container-pihole.yml

@@ -70,3 +70,12 @@
   tags:
     - pihole
     - firewall
+
+- name: Save state of iptables for IPv4
+  become: true
+  community.general.iptables_state:
+    state: saved
+    path: /etc/sysconfig/iptables
+  tags:
+    - pihole
+    - firewall

ansible/roles/podman/templates/nginx/sites/home.bdebyl.net.conf.j2

@@ -10,7 +10,7 @@ server {
   listen 80 default_server;
   server_name {{ home_server_name }};
   if ($whitelisted = 1) {
-    return 302 http://{{ ansible_default_ipv4.address }};
+    return 302 http://pi.bdebyl.net;
   }
 
   if ($whitelisted = 0) {