Start working on unifi role

roles/container/tasks/main.yml

@@ -7,7 +7,7 @@
 - name: Set published ports variable
   set_fact: 
     container_published_ports: ["127.0.0.1:{{ ports[docker_service].http }}:{{ docker_image_http_port }}"]
-  when: reverse_proxy_type != 'traefik'
+  when: reverse_proxy_type != 'traefik' and docker_network_mode is defined and docker_network_mode != 'host'
 
 - name: Include traefik vars
   include_vars: traefik.yml
@@ -53,6 +53,7 @@
     env: "{{ docker_env | combine(docker_additional_env) }}"
     entrypoint: "{{ docker_entrypoint | default(omit) }}"
     restart_policy: always
+    network_mode: "{{ docker_network_mode | default(omit) }}"
     networks:
       - name: "{{ docker_service }}"
   register: container_out

roles/unifi/README.md

@@ -0,0 +1 @@
+Installs unifi controller in docker

roles/unifi/meta/main.yml

@@ -0,0 +1,11 @@
+---
+
+dependencies:
+  - role: container
+    docker_service: unifi
+    docker_image: jacobalberty/unifi:latest
+    docker_network_mode: host
+    docker_volumes:
+      - unifi_data:/unifi
+    docker_env:
+      

roles/unifi/tasks/main.yml

@@ -0,0 +1,28 @@
+---
+
+- name: Create git group on host for gitea ssh
+  group:
+    name: git
+    gid: 2132
+    system: yes
+
+- name: Create git user on host for gitea ssh
+  user:
+    name: git
+    uid: 2132
+    group: git
+    system: yes
+    home: /var/lib/gitea
+    generate_ssh_key: yes
+  register: git_user
+
+- name: Add git user's own ssh key to its authorized keys
+  authorized_key:
+    user: git
+    key: "{{ git_user.ssh_public_key }}"
+
+- name: Put gitea ssh forwarder in place
+  template:
+    src: gitea_ssh_forward.j2
+    dest: /usr/local/bin/gitea
+    mode: '755'