service: fix conditional

roles/authentik/tasks/main.yml

@@ -4,7 +4,7 @@
     name: service
   vars:
     docker_service: authentik
-    docker_image: "beryju/authentik:{{ authentik_tag }}"
+    docker_image: "ghcr.io/goauthentik/server:{{ authentik_tag }}"
     docker_command:
       - server
     docker_image_http_port: 9000
@@ -20,7 +20,7 @@
   vars:
     docker_namespace: authentik
     docker_service: worker
-    docker_image: "beryju/authentik:{{ authentik_tag }}"
+    docker_image: "ghcr.io/goauthentik/server:{{ authentik_tag }}"
     docker_command:
       - worker
     reverse_proxy_type: none

roles/authentik_ldap/tasks/main.yaml

@@ -4,7 +4,7 @@
     name: service
   vars:
     docker_service: authentik-ldap
-    docker_image: beryju/authentik-ldap:{{ authentik_ldap_tag }}
+    docker_image: ghcr.io/goauthentik/ldap:{{ authentik_ldap_tag }}
     reverse_proxy_type: none
     docker_env:
       AUTHENTIK_HOST: "{{ authentik_ldap_authentik_address }}"

roles/jitsi/tasks/main.yml

@@ -133,3 +133,13 @@
       - name: meet.jitsi
         aliases:
           - jvb.meet.jitsi
+
+- name: Open ports for jitsi
+  ansible.posix.firewalld:
+    port: "{{ item }}"
+    state: enabled
+    permanent: true
+    immediate: true
+  loop:
+    - 4443/tcp
+    - 10000/udp

roles/prometheus/tasks/main.yml

@@ -9,7 +9,7 @@
     docker_command:
       - "--config.file=/etc/prometheus/prometheus.yml"
       - "--storage.tsdb.path=/prometheus"
-      - "--storage.tsdb.retention={{ prometheus_storage_retention }}"
+      - "--storage.tsdb.retention.time={{ prometheus_storage_retention }}"
       - "--web.console.libraries=/usr/share/prometheus/console_libraries"
       - "--web.console.templates=/usr/share/prometheus/consoles"
     docker_mounts:

roles/service/tasks/image.yml

@@ -68,4 +68,4 @@
     image_user: "{{ container_image.Config.User }}"
   when:
     - not ansible_check_mode
-    - container_image.Config.User | int
+    - container_image.Config.User | int != 0