495943b837
- Add ollama role for local LLM inference (install, service, models) - Add searxng container for private search - Migrate hostname from home.bdebyl.net to home.debyl.io (inventory, awsddns, zomboid entrypoint, home_server_name) - Update vault with new secrets Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
60 lines
1.5 KiB
YAML
60 lines
1.5 KiB
YAML
---
|
|
- name: create searxng host directory volumes
|
|
become: true
|
|
ansible.builtin.file:
|
|
path: "{{ item }}"
|
|
state: directory
|
|
owner: "{{ podman_subuid.stdout }}"
|
|
group: "{{ podman_user }}"
|
|
mode: 0755
|
|
notify: restorecon podman
|
|
loop:
|
|
- "{{ searxng_path }}/config"
|
|
- "{{ searxng_path }}/data"
|
|
|
|
- name: template searxng settings
|
|
become: true
|
|
ansible.builtin.template:
|
|
src: searxng/settings.yml.j2
|
|
dest: "{{ searxng_path }}/config/settings.yml"
|
|
owner: "{{ podman_subuid.stdout }}"
|
|
group: "{{ podman_user }}"
|
|
mode: 0644
|
|
|
|
- name: unshare chown the searxng volumes for internal uid 977
|
|
become: true
|
|
become_user: "{{ podman_user }}"
|
|
changed_when: false
|
|
ansible.builtin.shell: |
|
|
podman unshare chown -R 977:977 {{ searxng_path }}/config
|
|
podman unshare chown -R 977:977 {{ searxng_path }}/data
|
|
|
|
- name: flush handlers
|
|
ansible.builtin.meta: flush_handlers
|
|
|
|
- import_tasks: podman/podman-check.yml
|
|
vars:
|
|
container_name: searxng
|
|
container_image: "{{ image }}"
|
|
|
|
- name: create searxng container
|
|
become: true
|
|
become_user: "{{ podman_user }}"
|
|
containers.podman.podman_container:
|
|
name: searxng
|
|
image: "{{ image }}"
|
|
restart_policy: on-failure:3
|
|
log_driver: journald
|
|
network:
|
|
- host
|
|
env:
|
|
SEARXNG_BASE_URL: "http://127.0.0.1:8080/"
|
|
volumes:
|
|
- "{{ searxng_path }}/config:/etc/searxng"
|
|
- "{{ searxng_path }}/data:/srv/searxng/data"
|
|
|
|
- name: create systemd startup job for searxng
|
|
include_tasks: podman/systemd-generate.yml
|
|
vars:
|
|
container_name: searxng
|