unifi

README.md

@@ -1,3 +1,9 @@
 # uumas.docker
 
 Roles for services running on docker.
+
+To add a new role:
+1. Add it
+  1. usually meta/main.yml with depend on container
+  1. README.md
+1. Add docs to docs/

docs/all.md

@@ -14,4 +14,8 @@ These variables are used by multiple roles and have the following default values
 
 ```
 reverse_proxy_type: caddy # Allowed values: caddy, traefik, none
+
+smtp_from: # not defined, no smtp login by default
+smtp_pw: # not defined, see above
+
 ```

docs/wekan.md

@@ -0,0 +1,13 @@
+# Required variables
+These variables are required. Example values included. Some general variables might also be required for this role.
+
+```
+ports:
+  wekan:
+    http: 8080
+
+docker_vhost_domains: 
+  hedgedoc:
+    - wekan.domain.tld
+
+```

galaxy.yml

@@ -2,7 +2,7 @@
 
 namespace: uumas
 name: docker
-version: 0.5.0
+version: 0.5.3
 readme: README.md
 repository: https://git.uumas.fi/uumas/ansible-docker
 license_file: LICENSE

roles/container/defaults/main.yml

@@ -1,6 +1,5 @@
 ---
 
 reverse_proxy_type: caddy
-docker_database: none
 docker_additional_env: {}
 docker_published_ports: []

roles/container/meta/main.yml

@@ -5,5 +5,6 @@ dependencies:
   - role: uumas.general.reverse_proxy
     vhost_id: "{{ docker_service }}"
     vhost_domains: "{{ docker_vhost_domains[docker_service] }}"
-    proxy_target: http://127.0.0.1:{{ ports[docker_service].http }}
+    proxy_target_protocol: "{{ docker_proxy_target_protocol | default('http') }}"
+    proxy_target_port: "{{ ports[docker_service][proxy_target_protocol] }}"
     when: reverse_proxy_type != 'none' and reverse_proxy_type != 'traefik'

roles/container/tasks/main.yml

@@ -3,31 +3,49 @@
 - name: "{{ docker_service }} docker network"
   docker_network:
     name: "{{ docker_service }}"
+  when: docker_network_mode is not defined or docker_network_mode != 'host'
 
 - name: Set published ports variable
   set_fact: 
-    container_published_ports: ["127.0.0.1:{{ ports[docker_service].http }}:{{ docker_image_http_port }}"]
+    container_published_ports: ["127.0.0.1:{{ ports[docker_service][proxy_target_protocol] }}:{{ docker_image_http_port }}"]
-  when: reverse_proxy_type != 'traefik'
+  when: reverse_proxy_type != 'traefik' and (docker_network_mode is not defined or docker_network_mode != 'host')
+
+- name: Set networks variable
+  set_fact:
+    container_networks:
+      - name: "{{ docker_service }}"
+  when: docker_network_mode is not defined or docker_network_mode != 'host'
 
 - name: Include traefik vars
   include_vars: traefik.yml
   when: reverse_proxy_type == 'traefik'
 
-- name: "Postgresql container for {{ docker_service }}"
+- name: Set postgres container env
-  docker_container:
+  set_fact:
-    name: "{{ docker_service }}_db"
+    db_container_image: 'postgres:14-alpine'
-    image: 'postgres:14-alpine'
+    db_container_env:
-    pull: yes
-    container_default_behavior: no_defaults
-    env:
       POSTGRES_USER: "{{ docker_service }}"
       POSTGRES_PASSWORD: "{{ database_passwords[docker_service] }}"
+    db_container_data: /var/lib/postgresql/data
+  when: docker_database is defined and docker_database == 'postgres'
+- name: Set mongo container env
+  set_fact:
+    db_container_image: 'mongo:latest'
+    db_container_data: /data/db
+  when: docker_database is defined and docker_database == 'mongo'
+
+- name: "{{ docker_database }} database container for {{ docker_service }}"
+  docker_container:
+    name: "{{ docker_service }}_db"
+    image: "{{ db_container_image }}"
+    pull: yes
+    container_default_behavior: no_defaults
+    env: "{{ db_container_env | default(omit) }}"
     restart_policy: always
     volumes:
-      - "{{ docker_service }}_db:/var/lib/postgresql/data"
+      - "{{ docker_service }}_db:{{ db_container_data }}"
-    networks:
+    networks: "{{ container_networks | default(omit) }}"
-      - name: "{{ docker_service }}"
+  when: docker_database is defined
-  when: docker_database is defined and docker_database == 'postgres'
 
 - name: "Container for {{ docker_service }}"
   docker_container:
@@ -36,12 +54,12 @@
     pull: true
     container_default_behavior: no_defaults
     volumes: "{{ docker_volumes | default(omit) }}"
-    published_ports: "{{ container_published_ports + docker_published_ports | default(omit) }}"
+    published_ports: "{{ container_published_ports | default([]) + docker_published_ports | default(omit) }}"
     labels: "{{ traefik_labels | default(omit) }}"
     env: "{{ docker_env | combine(docker_additional_env) }}"
     entrypoint: "{{ docker_entrypoint | default(omit) }}"
     restart_policy: always
-    networks:
+    network_mode: "{{ docker_network_mode | default(omit) }}"
-      - name: "{{ docker_service }}"
+    networks: "{{ container_networks | default(omit) }}"
   register: container_out
 

roles/gitea/meta/main.yml

@@ -25,3 +25,5 @@ dependencies:
       GITEA__mailer__HOST: "{{ smtp_server }}:587"
       GITEA__mailer__FROM: "{{ smtp_from }}"
       GITEA__mailer__MAILER_TYPE: smtp
+      GITERA__mailer__USER: "{{ smtp_user | default(omit) }}"
+      GITERA__mailer__PASSWD: "{{ smtp_pw | default(omit) }}"

roles/unifi/README.md

@@ -0,0 +1 @@
+Installs unifi controller in docker

roles/unifi/meta/main.yml

@@ -0,0 +1,14 @@
+---
+
+dependencies:
+  - role: container
+    docker_proxy_target_protocol: https
+    docker_service: unifi
+    docker_image: jacobalberty/unifi:latest
+    docker_network_mode: host
+    docker_volumes:
+      - unifi_data:/unifi
+    docker_env:
+      UNIFI_HTTPS_PORT: "{{ ports.unifi.https }}"
+      PORTAL_HTTP_PORT: "8808"
+

roles/wekan/README.md

@@ -0,0 +1 @@
+Installs WeKan in docker

roles/wekan/meta/main.yml

@@ -0,0 +1,15 @@
+---
+
+dependencies:
+  - role: container
+    docker_service: wekan
+    docker_image: quay.io/wekan/wekan
+    docker_image_http_port: 8080
+    docker_database: mongo
+    docker_volumes:
+      - wekan_data:/data
+    docker_env:
+      MONGO_URL: mongodb://wekan_db:27017/wekan
+      ROOT_URL: "https://{{ docker_vhost_domains.wekan[0] }}"
+      WRITABLE_PATH: /data
+

roles/wekan/tasks/main.yml

@@ -0,0 +1,12 @@
+---
+
+- name: Get wekan data volume path from container creation output
+  set_fact:
+    wekan_data_volume: "{{ container_out.container.Mounts | selectattr('Destination', 'equalto', '/data') | join }}"
+
+- name: Set wekan data volume owner
+  file:
+    path: "{{ wekan_data_volume.Source }}"
+    state: directory
+    owner: 999
+    group: 999