release 0.5.0

docs/general.md

@@ -3,6 +3,10 @@ These variables are required by multiple roles. Example values included.
 
 ```
 timezone: 'Europe/Helsinki'
+admin_email: 'admin@domain.tld'
+
+smtp_server: smtp.domain.tld
+smtp_from: sender@domain.tld
 ```
 
 # Optional variables

docs/gitea.md

@@ -0,0 +1,16 @@
+# Required variables
+These variables are required. Example values included. Some general variables might also be required for this role.
+
+```
+ports:
+  gitea:
+    http: 8080
+    ssh: 2222
+
+docker_vhost_domains: 
+  gitea:
+    - gitea.domain.tld
+
+database_passwords:
+  gitea: secret
+```

docs/hedgedoc.md

@@ -0,0 +1,15 @@
+# Required variables
+These variables are required. Example values included. Some general variables might also be required for this role.
+
+```
+ports:
+  hedgedoc:
+    http: 8080
+
+docker_vhost_domains: 
+  hedgedoc:
+    - hedgedoc.domain.tld
+
+database_passwords:
+  hedgedoc: secret
+```

docs/keycloak.md

@@ -0,0 +1,17 @@
+# Required variables
+These variables are required. Example values included. Some general variables might also be required for this role.
+
+```
+ports:
+  keycloak:
+    http: 8080
+
+docker_vhost_domains: 
+  keycloak:
+    - keycloak.domain.tld
+
+database_passwords:
+  keycloak: secret
+
+keycloak_admin_pw: secret
+```

galaxy.yml

@@ -2,7 +2,7 @@
 
 namespace: uumas
 name: docker
-version: 0.4.2
+version: 0.5.0
 readme: README.md
 repository: https://git.uumas.fi/uumas/ansible-docker
 license_file: LICENSE

roles/container/README.md

@@ -0,0 +1 @@
+Sets up a docker container

roles/container/defaults/main.yml

@@ -0,0 +1,6 @@
+---
+
+reverse_proxy_type: caddy
+docker_database: none
+docker_additional_env: {}
+docker_published_ports: []

roles/container/meta/main.yml

@@ -0,0 +1,9 @@
+---
+
+dependencies:
+  - docker
+  - role: uumas.general.reverse_proxy
+    vhost_id: "{{ docker_service }}"
+    vhost_domains: "{{ docker_vhost_domains[docker_service] }}"
+    proxy_target: http://127.0.0.1:{{ ports[docker_service].http }}
+    when: reverse_proxy_type != 'none' and reverse_proxy_type != 'traefik'

roles/container/tasks/main.yml

@@ -0,0 +1,47 @@
+---
+
+- name: "{{ docker_service }} docker network"
+  docker_network:
+    name: "{{ docker_service }}"
+
+- name: Set published ports variable
+  set_fact: 
+    container_published_ports: ["127.0.0.1:{{ ports[docker_service].http }}:{{ docker_image_http_port }}"]
+  when: reverse_proxy_type != 'traefik'
+
+- name: Include traefik vars
+  include_vars: traefik.yml
+  when: reverse_proxy_type == 'traefik'
+
+- name: "Postgresql container for {{ docker_service }}"
+  docker_container:
+    name: "{{ docker_service }}_db"
+    image: 'postgres:14-alpine'
+    pull: yes
+    container_default_behavior: no_defaults
+    env:
+      POSTGRES_USER: "{{ docker_service }}"
+      POSTGRES_PASSWORD: "{{ database_passwords[docker_service] }}"
+    restart_policy: always
+    volumes:
+      - "{{ docker_service }}_db:/var/lib/postgresql/data"
+    networks:
+      - name: "{{ docker_service }}"
+  when: docker_database is defined and docker_database == 'postgres'
+
+- name: "Container for {{ docker_service }}"
+  docker_container:
+    name: "{{ docker_service }}"
+    image: "{{ docker_image }}"
+    pull: true
+    container_default_behavior: no_defaults
+    volumes: "{{ docker_volumes | default(omit) }}"
+    published_ports: "{{ container_published_ports + docker_published_ports | default(omit) }}"
+    labels: "{{ traefik_labels | default(omit) }}"
+    env: "{{ docker_env | combine(docker_additional_env) }}"
+    entrypoint: "{{ docker_entrypoint | default(omit) }}"
+    restart_policy: always
+    networks:
+      - name: "{{ docker_service }}"
+  register: container_out
+

roles/container/vars/traefik.yml

@@ -0,0 +1,6 @@
+---
+
+traefik_labels:
+  traefik.enable: 'true'
+  "traefik.http.routers.{{ docker_service }}.rule": "Host(`{{ vhost_domains[docker_service] | join('`) || Host(`') }}`)"
+  "traefik.http.routers.{{ docker_service }}.tls.certresolver": 'le'

roles/gitea/README.md

@@ -0,0 +1 @@
+Installs gitea in docker and configures ssh

roles/gitea/meta/main.yml

@@ -0,0 +1,27 @@
+---
+
+dependencies:
+  - role: container
+    docker_service: gitea
+    docker_image: gitea/gitea:latest
+    docker_image_http_port: 3000
+    docker_database: postgres
+    docker_volumes:
+      - gitea_data:/data
+      - /var/lib/gitea/.ssh/:/data/git/.ssh
+    docker_published_ports:
+      - "127.0.0.1:{{ ports.gitea.ssh }}:22"
+    docker_env:
+      USER_UID: '2132'
+      USER_GID: '2132'
+      GITEA__database__DB_TYPE: postgres
+      GITEA__database__USER: gitea
+      GITEA__database__HOST: gitea_db:5432
+      GITEA__database__PASSWD: "{{ database_passwords.gitea }}"
+      GITEA__server__DOMAIN: "{{ docker_vhost_domains.gitea[0] }}"
+      GITEA__server__PROTOCOL: "http"
+      GITEA__server__ROOT_URL: "https://{{ docker_vhost_domains.gitea[0] }}"
+      GITEA__mailer__ENABLED: "true"
+      GITEA__mailer__HOST: "{{ smtp_server }}:587"
+      GITEA__mailer__FROM: "{{ smtp_from }}"
+      GITEA__mailer__MAILER_TYPE: smtp

roles/gitea/tasks/main.yml

@@ -0,0 +1,28 @@
+---
+
+- name: Create git group on host for gitea ssh
+  group:
+    name: git
+    gid: 2132
+    system: yes
+
+- name: Create git user on host for gitea ssh
+  user:
+    name: git
+    uid: 2132
+    group: git
+    system: yes
+    home: /var/lib/gitea
+    generate_ssh_key: yes
+  register: git_user
+
+- name: Add git user's own ssh key to its authorized keys
+  authorized_key:
+    user: git
+    key: "{{ git_user.ssh_public_key }}"
+
+- name: Put gitea ssh forwarder in place
+  template:
+    src: gitea_ssh_forward.j2
+    dest: /usr/local/bin/gitea
+    mode: '755'

roles/gitea/templates/gitea_ssh_forward.j2

@@ -0,0 +1,2 @@
+#!/bin/sh
+ssh -p {{ ports.gitea.ssh }} -o StrictHostKeyChecking=no git@127.0.0.1 "SSH_ORIGINAL_COMMAND=\"$SSH_ORIGINAL_COMMAND\" $0 $@"

roles/hedgedoc/README.md

@@ -0,0 +1 @@
+Installs hedgedoc in docker

roles/hedgedoc/meta/main.yml

@@ -0,0 +1,18 @@
+---
+
+dependencies:
+  - role: container
+    docker_service: hedgedoc
+    docker_image: quay.io/hedgedoc/hedgedoc:latest
+    docker_image_http_port: 3000
+    docker_database: postgres
+    docker_volumes:
+      - hedgedoc_uploads:/hedgedoc/public/uploads
+    docker_env:
+      CMD_DB_URL: postgres://hedgedoc:{{ database_passwords.hedgedoc }}@hedgedoc_db:5432/hedgedoc
+      CMD_DOMAIN: "{{ docker_vhost_domains.hedgedoc[0] }}"
+      CMD_PROTOCOL_USESSL: "true"
+      CMD_ALLOW_ANONYMOUS: "false"
+      CMD_ALLOW_ANONYMOUS_EDITS: "true"
+      CMD_ALLOW_FREEURL: "true"
+

roles/keycloak/README.md

@@ -0,0 +1 @@
+Installs keycloak in docker

roles/keycloak/meta/main.yml

@@ -0,0 +1,23 @@
+---
+
+dependencies:
+  - role: container
+    docker_service: keycloak
+    docker_image: quay.io/keycloak/keycloak:latest
+    docker_image_http_port: 8080
+    docker_database: postgres
+    docker_entrypoint: 
+      - /opt/keycloak/bin/kc.sh
+      - start
+      - --auto-build
+    docker_env:
+      KEYCLOAK_ADMIN: admin
+      KEYCLOAK_ADMIN_PASSWORD: "{{ keycloak_admin_pw }}"
+      KC_HOSTNAME: "{{ docker_vhost_domains.keycloak[0] }}"
+      KC_HTTP_ENABLED: "true"
+      KC_PROXY: edge
+      KC_DB: postgres
+      KC_DB_URL: jdbc:postgresql://keycloak_db/keycloak
+      KC_DB_USERNAME: keycloak
+      KC_DB_PASSWORD: "{{ database_passwords.keycloak }}"
+