Trez/rinoa-docker
4
0
Fork 0
Code Issues 1 Pull Requests 8 Actions Activity

Adding everything in Ansible in full.

Browse Source
This commit is contained in:
Trez.One
2025-01-17 12:58:53 -05:00
parent 3d7de6ae7d
commit 2ac0bf622a
31 changed files with 163 additions and 273 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.cache_ggshield
+1
View File
@@ -0,0 +1 @@
{"last_found_secrets": [{"name": "Generic Password - /home/charish/app-configs/searxng_settings.yml.j2", "match": "6e0d657eb1f0fbc40cf0b8f3c3873ef627cc9cb7c4108d1c07d979c04bc8a4bb"}]}
ansible/app-configs/cloudflared_config.yml.j2
+2 -2
View File
@@ -1,5 +1,5 @@
{% set vault_addr = https://vault.trez.wtf %} {% set vault_addr = 'https://vault.trez.wtf' %}
{% set secrets_path = rinoa-docker/env %} {% set secrets_path = 'rinoa-docker/env' %}
tunnel: 52bdee6e-8ccb-47be-ba9e-f8010b905e41 tunnel: 52bdee6e-8ccb-47be-ba9e-f8010b905e41
credentials-file: /etc/cloudflared/52bdee6e-8ccb-47be-ba9e-f8010b905e41.json credentials-file: /etc/cloudflared/52bdee6e-8ccb-47be-ba9e-f8010b905e41.json
ansible/app-configs/grafana_beyla.yml.j2
+2 -2
View File
@@ -1,5 +1,5 @@
{% set vault_addr = https://vault.trez.wtf %} {% set vault_addr = 'https://vault.trez.wtf' %}
{% set secrets_path = rinoa-docker/env %} {% set secrets_path = 'rinoa-docker/env' %}
routes: routes:
patterns: patterns:
ansible/app-configs/grafana_mimir.yaml.j2
+2 -2
View File
@@ -1,5 +1,5 @@
{% set vault_addr = https://vault.trez.wtf %} {% set vault_addr = 'https://vault.trez.wtf' %}
{% set secrets_path = rinoa-docker/env %} {% set secrets_path = 'rinoa-docker/env' %}
multitenancy_enabled: false multitenancy_enabled: false
no_auth_tenant: rinoa_mimir no_auth_tenant: rinoa_mimir
ansible/app-configs/grafana_pyroscope_config.yaml.j2
+2 -5
View File
@@ -1,14 +1,11 @@
{% set vault_addr = https://vault.trez.wtf %}
{% set secrets_path = rinoa-docker/env %}
storage: storage:
backend: s3 backend: s3
s3: s3:
bucket_name: pyroscope bucket_name: pyroscope
endpoint: minio:9000 endpoint: minio:9000
region: us-east-fh-pln region: us-east-fh-pln
access_key_id: "{{ lookup('community.hashi_vault.hashi_vault', secrets_path + '/access_key_id', url=vault_addr) }}" access_key_id: {{ lookup('community.hashi_vault.vault_kv2_get', 'env', engine_mount_point='rinoa-docker', url=vault_addr, token=vault_token_cleaned)['secret']['MINIO_PYROSCOPE_STORAGE_ACCESS_KEY'] }}
secret_access_key: "{{ lookup('community.hashi_vault.hashi_vault', secrets_path + '/secret_access_key', url=vault_addr) }}" secret_access_key: {{ lookup('community.hashi_vault.vault_kv2_get', 'env', engine_mount_point='rinoa-docker', url=vault_addr, token=vault_token_cleaned)['secret']['MINIO_PYROSCOPE_STORAGE_SECRET_KEY'] }}
insecure: true insecure: true
analytics: analytics:
ansible/app-configs/grafana_tempo_config.yml.j2
+2 -2
View File
@@ -1,5 +1,5 @@
{% set vault_addr = https://vault.trez.wtf %} {% set vault_addr = 'https://vault.trez.wtf' %}
{% set secrets_path = rinoa-docker/env %} {% set secrets_path = 'rinoa-docker/env' %}
target: all target: all
http_api_prefix: "" http_api_prefix: ""
ansible/app-configs/homepage_bookmarks.yaml.j2
+2 -2
View File
@@ -1,5 +1,5 @@
{% set vault_addr = https://vault.trez.wtf %} {% set vault_addr = 'https://vault.trez.wtf' %}
{% set secrets_path = rinoa-docker/env %} {% set secrets_path = 'rinoa-docker/env' %}
--- ---
ansible/app-configs/homepage_docker.yaml.j2
+2 -2
View File
@@ -1,5 +1,5 @@
{% set vault_addr = https://vault.trez.wtf %} {% set vault_addr = 'https://vault.trez.wtf' %}
{% set secrets_path = rinoa-docker/env %} {% set secrets_path = 'rinoa-docker/env' %}
--- ---
ansible/app-configs/homepage_kubernetes.yaml.j2
+2 -2
View File
@@ -1,5 +1,5 @@
{% set vault_addr = https://vault.trez.wtf %} {% set vault_addr = 'https://vault.trez.wtf' %}
{% set secrets_path = rinoa-docker/env %} {% set secrets_path = 'rinoa-docker/env' %}
--- ---
ansible/app-configs/homepage_services.yaml.j2
+2 -2
View File
@@ -1,5 +1,5 @@
{% set vault_addr = https://vault.trez.wtf %} {% set vault_addr = 'https://vault.trez.wtf' %}
{% set secrets_path = rinoa-docker/env %} {% set secrets_path = 'rinoa-docker/env' %}
--- ---
# For configuration options and examples, please see: # For configuration options and examples, please see:
ansible/app-configs/homepage_widgets.yaml.j2
+2 -2
View File
@@ -1,5 +1,5 @@
{% set vault_addr = https://vault.trez.wtf %} {% set vault_addr = 'https://vault.trez.wtf' %}
{% set secrets_path = rinoa-docker/env %} {% set secrets_path = 'rinoa-docker/env' %}
--- ---
# For configuration options and examples, please see: # For configuration options and examples, please see:
ansible/app-configs/hugo_frontmatter.json.j2
-87
View File
@@ -1,87 +0,0 @@
{% set vault_addr = https://vault.trez.wtf %}
{% set secrets_path = rinoa-docker/env %}
{
"$schema": "https://frontmatter.codes/frontmatter.schema.json",
"frontMatter.framework.id": "hugo",
"frontMatter.content.pageFolders": [
{
"title": "content",
"path": "[[workspace]]/it-services/content"
}
],
"frontMatter.content.publicFolder": "static",
"frontMatter.preview.host": "http://192.168.1.254:1313",
"frontMatter.website.host": "https://it-services.trez.wtf",
"frontMatter.taxonomy.contentTypes": [
{
"name": "default",
"pageBundle": false,
"fields": [
{
"title": "Title",
"name": "title",
"type": "string"
},
{
"title": "Description",
"name": "description",
"type": "string"
},
{
"title": "Publishing date",
"name": "date",
"type": "datetime",
"default": "{{now}}",
"isPublishDate": true
},
{
"title": "Content preview",
"name": "preview",
"type": "image"
},
{
"title": "Is in draft",
"name": "draft",
"type": "boolean"
},
{
"title": "Tags",
"name": "tags",
"type": "tags"
},
{
"title": "Categories",
"name": "categories",
"type": "categories"
},
{
"title": "layout",
"name": "layout",
"type": "string"
}
]
},
{
"name": "plain",
"pageBundle": true,
"fields": [
{
"title": "title",
"name": "title",
"type": "string"
},
{
"title": "draft",
"name": "draft",
"type": "draft"
},
{
"title": "layout",
"name": "layout",
"type": "string"
}
]
}
]
}
ansible/app-configs/plausible_clickhouse-config.xml.j2
+2 -2
View File
@@ -1,5 +1,5 @@
{% set vault_addr = https://vault.trez.wtf %} {% set vault_addr = 'https://vault.trez.wtf' %}
{% set secrets_path = rinoa-docker/env %} {% set secrets_path = 'rinoa-docker/env' %}
<clickhouse> <clickhouse>
<profiles> <profiles>
ansible/app-configs/radarec_settings_config.json.j2
+4 -4
View File
@@ -1,11 +1,11 @@
{% set vault_addr = https://vault.trez.wtf %} {% set vault_addr = 'https://vault.trez.wtf' %}
{% set secrets_path = rinoa-docker/env %} {% set secrets_path = 'rinoa-docker/env' %}
{ {
"radarr_address": "http://radarr:7878", "radarr_address": "http://radarr:7878",
"radarr_api_key": "{{ lookup('community.hashi_vault.vault_kv2_get', token=token, url=vault_url, mount_point=secrets_path, key='RADARR_API_KEY') }}", "radarr_api_key": "{{ lookup('community.hashi_vault.vault_kv2_get', 'env', engine_mount_point='rinoa-docker', url=vault_addr, token=vault_token_cleaned)['secret']['RADARR_API_KEY'] }}",
"root_folder_path": "/data/media/movies", "root_folder_path": "/data/media/movies",
"tmdb_api_key": "{{ lookup('community.hashi_vault.vault_kv2_get', token=token, url=vault_url, mount_point=secrets_path, key='TMDB_API_KEY') }}", "tmdb_api_key": "{{ lookup('community.hashi_vault.vault_kv2_get', 'env', engine_mount_point='rinoa-docker', url=vault_addr, token=vault_token_cleaned)['secret']['TMDB_API_KEY'] }}",
"fallback_to_top_result": false, "fallback_to_top_result": false,
"radarr_api_timeout": 120.0, "radarr_api_timeout": 120.0,
"quality_profile_id": 1, "quality_profile_id": 1,
ansible/app-configs/sabnzbd.ini.j2
+6 -6
View File
@@ -1,5 +1,5 @@
{% set vault_addr = https://vault.trez.wtf %} {% set vault_addr = 'https://vault.trez.wtf' %}
{% set secrets_path = rinoa-docker/env %} {% set secrets_path = 'rinoa-docker/env' %}
__version__ = 19 __version__ = 19
__encoding__ = utf-8 __encoding__ = utf-8
@@ -22,7 +22,7 @@ host = 0.0.0.0
port = 8080 port = 8080
https_port = 8090 https_port = 8090
username = thetrezuredone username = thetrezuredone
password = {{ lookup('community.hashi_vault.vault_kv2_get', token=token, url=vault_url, mount_point=secrets_path, key='SABNZBDVPN_PASSWORD') }} password = {{ lookup('community.hashi_vault.vault_kv2_get', 'env', engine_mount_point='rinoa-docker', url=vault_addr, token=vault_token_cleaned)['secret']['SABNZBDVPN_PASSWORD'] }}
bandwidth_max = 1000M bandwidth_max = 1000M
cache_limit = 1G cache_limit = 1G
web_dir = Glitter web_dir = Glitter
@@ -33,7 +33,7 @@ https_chain = ""
enable_https = 1 enable_https = 1
inet_exposure = 0 inet_exposure = 0
local_ranges = , local_ranges = ,
api_key = {{ lookup('community.hashi_vault.vault_kv2_get', token=token, url=vault_url, mount_point=secrets_path, key='SABNZBDVPN_API_KEY') }} api_key = {{ lookup('community.hashi_vault.vault_kv2_get', 'env', engine_mount_point='rinoa-docker', url=vault_addr, token=vault_token_cleaned)['secret']['SABNZBDVPN_API_KEY'] }}
nzb_key = 3c0fa874bb2748b58c1bd7512e649946 nzb_key = 3c0fa874bb2748b58c1bd7512e649946
permissions = 775 permissions = 775
download_dir = /storage/downloads/incomplete download_dir = /storage/downloads/incomplete
@@ -342,7 +342,7 @@ host = news.newshosting.com
port = 563 port = 563
timeout = 60 timeout = 60
username = thetrezuredone username = thetrezuredone
password = "{{ lookup('community.hashi_vault.vault_kv2_get', token=token, url=vault_url, mount_point=secrets_path, key='SLSKD_PASSWORD') }}" password = {{ lookup('community.hashi_vault.vault_kv2_get', 'env', engine_mount_point='rinoa-docker', url=vault_addr, token=vault_token_cleaned)['secret']['SLSKD_PASSWORD'] }}
connections = 8 connections = 8
ssl = 1 ssl = 1
ssl_verify = 3 ssl_verify = 3
@@ -363,7 +363,7 @@ host = news.easynews.com
port = 443 port = 443
timeout = 60 timeout = 60
username = TrezOne username = TrezOne
password = "{{ lookup('community.hashi_vault.vault_kv2_get', token=token, url=vault_url, mount_point=secrets_path, key='SABNZBDVPN_EASYNEWS_PASSWORD') }}" password = {{ lookup('community.hashi_vault.vault_kv2_get', 'env', engine_mount_point='rinoa-docker', url=vault_addr, token=vault_token_cleaned)['secret']['SABNZBDVPN_EASYNEWS_PASSWORD'] }}
connections = 60 connections = 60
ssl = 0 ssl = 0
ssl_verify = 3 ssl_verify = 3
ansible/app-configs/scrutiny_config.yaml.j2
+2 -2
View File
@@ -1,5 +1,5 @@
{% set vault_addr = https://vault.trez.wtf %} {% set vault_addr = 'https://vault.trez.wtf' %}
{% set secrets_path = rinoa-docker/env %} {% set secrets_path = 'rinoa-docker/env' %}
bolt-path: /opt/scrutiny/influxdb/influxd.bolt bolt-path: /opt/scrutiny/influxdb/influxd.bolt
engine-path: /opt/scrutiny/influxdb/engine engine-path: /opt/scrutiny/influxdb/engine
ansible/app-configs/searxng_settings.yml.j2
+86 -86
View File
@@ -1,5 +1,5 @@
{% set vault_addr = https://vault.trez.wtf %} {% set vault_addr = 'https://vault.trez.wtf' %}
{% set secrets_path = rinoa-docker/env %} {% set secrets_path = 'rinoa-docker/env' %}
general: general:
# Debug mode, only for development. Is overwritten by ${SEARXNG_DEBUG} # Debug mode, only for development. Is overwritten by ${SEARXNG_DEBUG}
@@ -82,7 +82,7 @@ server:
# If your instance owns a /etc/searxng/settings.yml file, then set the following # If your instance owns a /etc/searxng/settings.yml file, then set the following
# values there. # values there.
secret_key: "{{ lookup('community.hashi_vault.vault_kv2_get', token=token, url=vault_url, mount_point=secrets_path, key='SEARXNG_SECRET_KEY') }}" # Is overwritten by ${SEARXNG_SECRET} secret_key: {{ lookup('community.hashi_vault.vault_kv2_get', 'env', engine_mount_point='rinoa-docker', url=vault_addr, token=vault_token_cleaned)['secret']['SEARXNG_SECRET_KEY'] }} # Is overwritten by ${SEARXNG_SECRET}
# Proxying image results through searx # Proxying image results through searx
image_proxy: true image_proxy: true
# 1.0 and 1.1 are supported # 1.0 and 1.1 are supported
@@ -1278,7 +1278,7 @@ engines:
url: https://thepiratebay.org/ url: https://thepiratebay.org/
timeout: 3.0 timeout: 3.0
# Required dependency: psychopg2 {# # Required dependency: psychopg2
# - name: postgresql # - name: postgresql
# engine: postgresql # engine: postgresql
# database: postgres # database: postgres
@@ -1286,7 +1286,7 @@ engines:
# password: postgres # password: postgres
# limit: 10 # limit: 10
# query_str: 'SELECT * from my_table WHERE my_column = %(query)s' # query_str: 'SELECT * from my_table WHERE my_column = %(query)s'
# shortcut : psql # shortcut : psql #}
- name: pub.dev - name: pub.dev
engine: xpath engine: xpath
@@ -1362,7 +1362,7 @@ engines:
categories: [videos, web] categories: [videos, web]
network: qwant network: qwant
# - name: library {# # - name: library
# engine: recoll # engine: recoll
# shortcut: lib # shortcut: lib
# base_url: 'https://recoll.example.org/' # base_url: 'https://recoll.example.org/'
@@ -1382,7 +1382,7 @@ engines:
# shortcut: libr # shortcut: libr
# timeout: 30.0 # timeout: 30.0
# categories: files # categories: files
# disabled: true # disabled: true #}
- name: radio browser - name: radio browser
engine: radio_browser engine: radio_browser
@@ -1393,7 +1393,7 @@ engines:
shortcut: re shortcut: re
page_size: 25 page_size: 25
# Required dependency: redis {# # Required dependency: redis
# - name: myredis # - name: myredis
# shortcut : rds # shortcut : rds
# engine: redis_server # engine: redis_server
@@ -1408,7 +1408,7 @@ engines:
# - name: scanr structures # - name: scanr structures
# shortcut: scs # shortcut: scs
# engine: scanr_structures # engine: scanr_structures
# disabled: true # disabled: true #}
- name: sepiasearch - name: sepiasearch
engine: sepiasearch engine: sepiasearch
@@ -1451,20 +1451,20 @@ engines:
shortcut: frl shortcut: frl
disabled: true disabled: true
# - name: searx {# # - name: searx
# engine: searx_engine # engine: searx_engine
# shortcut: se # shortcut: se
# instance_urls : # instance_urls :
# - http://127.0.0.1:8888/ # - http://127.0.0.1:8888/
# - ... # - ...
# disabled: true # disabled: true #}
- name: semantic scholar - name: semantic scholar
engine: semantic_scholar engine: semantic_scholar
disabled: true disabled: true
shortcut: se shortcut: se
# Spotify needs API credentials {# # Spotify needs API credentials
# - name: spotify # - name: spotify
# engine: spotify # engine: spotify
# shortcut: stf # shortcut: stf
@@ -1488,7 +1488,7 @@ engines:
# # working API key, for test & debug: "a69685087d07eca9f13db62f65b8f601" # # working API key, for test & debug: "a69685087d07eca9f13db62f65b8f601"
# api_key: 'unset' # api_key: 'unset'
# shortcut: springer # shortcut: springer
# timeout: 15.0 # timeout: 15.0 #}
- name: startpage - name: startpage
engine: startpage engine: startpage
@@ -2151,84 +2151,84 @@ engines:
use_official_api: false use_official_api: false
require_api_key: false require_api_key: false
results: HTML results: HTML
{#
Doku engine lets you access to any Doku wiki instance:
A public one or a privete/corporate one.
- name: ubuntuwiki
engine: doku
shortcut: uw
base_url: 'https://doc.ubuntu-fr.org'
# Doku engine lets you access to any Doku wiki instance: Be careful when enabling this engine if you are
# A public one or a privete/corporate one. running a public instance. Do not expose any sensitive
# - name: ubuntuwiki information. You can restrict access by configuring a list
# engine: doku of access tokens under tokens.
# shortcut: uw - name: git grep
# base_url: 'https://doc.ubuntu-fr.org' engine: command
command: ['git', 'grep', '{{QUERY}}']
shortcut: gg
tokens: []
disabled: true
delimiter:
chars: ':'
keys: ['filepath', 'code']
# Be careful when enabling this engine if you are Be careful when enabling this engine if you are
# running a public instance. Do not expose any sensitive running a public instance. Do not expose any sensitive
# information. You can restrict access by configuring a list information. You can restrict access by configuring a list
# of access tokens under tokens. of access tokens under tokens.
# - name: git grep - name: locate
# engine: command engine: command
# command: ['git', 'grep', '{{QUERY}}'] command: ['locate', '{{QUERY}}']
# shortcut: gg shortcut: loc
# tokens: [] tokens: []
# disabled: true disabled: true
# delimiter: delimiter:
# chars: ':' chars: ' '
# keys: ['filepath', 'code'] keys: ['line']
# Be careful when enabling this engine if you are Be careful when enabling this engine if you are
# running a public instance. Do not expose any sensitive running a public instance. Do not expose any sensitive
# information. You can restrict access by configuring a list information. You can restrict access by configuring a list
# of access tokens under tokens. of access tokens under tokens.
# - name: locate - name: find
# engine: command engine: command
# command: ['locate', '{{QUERY}}'] command: ['find', '.', '-name', '{{QUERY}}']
# shortcut: loc query_type: path
# tokens: [] shortcut: fnd
# disabled: true tokens: []
# delimiter: disabled: true
# chars: ' ' delimiter:
# keys: ['line'] chars: ' '
keys: ['line']
# Be careful when enabling this engine if you are Be careful when enabling this engine if you are
# running a public instance. Do not expose any sensitive running a public instance. Do not expose any sensitive
# information. You can restrict access by configuring a list information. You can restrict access by configuring a list
# of access tokens under tokens. of access tokens under tokens.
# - name: find - name: pattern search in files
# engine: command engine: command
# command: ['find', '.', '-name', '{{QUERY}}'] command: ['fgrep', '{{QUERY}}']
# query_type: path shortcut: fgr
# shortcut: fnd tokens: []
# tokens: [] disabled: true
# disabled: true delimiter:
# delimiter: chars: ' '
# chars: ' ' keys: ['line']
# keys: ['line']
# Be careful when enabling this engine if you are Be careful when enabling this engine if you are
# running a public instance. Do not expose any sensitive running a public instance. Do not expose any sensitive
# information. You can restrict access by configuring a list information. You can restrict access by configuring a list
# of access tokens under tokens. of access tokens under tokens.
# - name: pattern search in files - name: regex search in files
# engine: command engine: command
# command: ['fgrep', '{{QUERY}}'] command: ['grep', '{{QUERY}}']
# shortcut: fgr shortcut: gr
# tokens: [] tokens: []
# disabled: true disabled: true
# delimiter: delimiter:
# chars: ' ' chars: ' '
# keys: ['line'] keys: ['line'] #}
# Be careful when enabling this engine if you are
# running a public instance. Do not expose any sensitive
# information. You can restrict access by configuring a list
# of access tokens under tokens.
# - name: regex search in files
# engine: command
# command: ['grep', '{{QUERY}}']
# shortcut: gr
# tokens: []
# disabled: true
# delimiter:
# chars: ' '
# keys: ['line']
doi_resolvers: doi_resolvers:
oadoi.org: 'https://oadoi.org/' oadoi.org: 'https://oadoi.org/'
ansible/app-configs/searxng_uwsgi.ini.j2
+2 -2
View File
@@ -1,5 +1,5 @@
{% set vault_addr = https://vault.trez.wtf %} {% set vault_addr = 'https://vault.trez.wtf' %}
{% set secrets_path = rinoa-docker/env %} {% set secrets_path = 'rinoa-docker/env' %}
[uwsgi] [uwsgi]
# Who will run the code # Who will run the code
ansible/app-configs/sonashow_settings_config.json.j2
+4 -4
View File
@@ -1,12 +1,12 @@
{% set vault_addr = https://vault.trez.wtf %} {% set vault_addr = 'https://vault.trez.wtf' %}
{% set secrets_path = rinoa-docker/env %} {% set secrets_path = 'rinoa-docker/env' %}
{ {
"sonarr_address": "http://192.168.1.2:8989", "sonarr_address": "http://192.168.1.2:8989",
"sonarr_api_key": "", "sonarr_api_key": "{{ lookup('community.hashi_vault.vault_kv2_get', 'env', engine_mount_point='rinoa-docker', url=vault_addr, token=vault_token_cleaned)['secret']['SONARR_API_KEY'] }}",
"root_folder_path": "/data/media/shows", "root_folder_path": "/data/media/shows",
"tvdb_api_key": "", "tvdb_api_key": "",
"tmdb_api_key": "{{ lookup('community.hashi_vault.vault_kv2_get', token=token, url=vault_url, mount_point=secrets_path, key='TMDB_API_KEY') }}", "tmdb_api_key": "{{ lookup('community.hashi_vault.vault_kv2_get', 'env', engine_mount_point='rinoa-docker', url=vault_addr, token=vault_token_cleaned)['secret']['TMDB_API_KEY'] }}",
"fallback_to_top_result": false, "fallback_to_top_result": false,
"sonarr_api_timeout": 120.0, "sonarr_api_timeout": 120.0,
"quality_profile_id": 1, "quality_profile_id": 1,
ansible/app-configs/soulseek_slskd.yml.j2
+2 -2
View File
@@ -1,5 +1,5 @@
{% set vault_addr = https://vault.trez.wtf %} {% set vault_addr = 'https://vault.trez.wtf' %}
{% set secrets_path = rinoa-docker/env %} {% set secrets_path = 'rinoa-docker/env' %}
# debug: false # debug: false
# remote_configuration: false # remote_configuration: false
ansible/app-configs/traccar_traccar.xml.j2
+3 -3
View File
@@ -1,5 +1,5 @@
{% set vault_addr = https://vault.trez.wtf %} {% set vault_addr = 'https://vault.trez.wtf' %}
{% set secrets_path = rinoa-docker/env %} {% set secrets_path = 'rinoa-docker/env' %}
<?xml version='1.0' encoding='UTF-8'?> <?xml version='1.0' encoding='UTF-8'?>
@@ -24,6 +24,6 @@
<entry key='database.driver'>org.postgresql.Driver</entry> <entry key='database.driver'>org.postgresql.Driver</entry>
<entry key='database.url'>jdbc:postgresql://traccar-pg:5432/traccar-db</entry> <entry key='database.url'>jdbc:postgresql://traccar-pg:5432/traccar-db</entry>
<entry key='database.user'>traccar</entry> <entry key='database.user'>traccar</entry>
<entry key='database.password'>"{{ lookup('community.hashi_vault.vault_kv2_get', token=token, url=vault_url, mount_point=secrets_path, key='WAZUH_API_PASSWORD') }}"</entry> <entry key='database.password'>{{ lookup('community.hashi_vault.vault_kv2_get', 'env', engine_mount_point='rinoa-docker', url=vault_addr, token=vault_token_cleaned)['secret']['WAZUH_API_PASSWORD'] }}</entry>
</properties> </properties>
ansible/app-configs/unmanic_settings.json.j2
+2 -2
View File
@@ -1,5 +1,5 @@
{% set vault_addr = https://vault.trez.wtf %} {% set vault_addr = 'https://vault.trez.wtf' %}
{% set secrets_path = rinoa-docker/env %} {% set secrets_path = 'rinoa-docker/env' %}
{ {
"always_keep_failed_tasks": true, "always_keep_failed_tasks": true,
ansible/app-configs/wazuh_certs.yml.j2
+2 -2
View File
@@ -1,5 +1,5 @@
{% set vault_addr = https://vault.trez.wtf %} {% set vault_addr = 'https://vault.trez.wtf' %}
{% set secrets_path = rinoa-docker/env %} {% set secrets_path = 'rinoa-docker/env' %}
nodes: nodes:
# Wazuh indexer server nodes # Wazuh indexer server nodes
ansible/app-configs/wazuh_wazuh.indexer.yml.j2
+2 -2
View File
@@ -1,5 +1,5 @@
{% set vault_addr = https://vault.trez.wtf %} {% set vault_addr = 'https://vault.trez.wtf' %}
{% set secrets_path = rinoa-docker/env %} {% set secrets_path = 'rinoa-docker/env' %}
network.host: "0.0.0.0" network.host: "0.0.0.0"
node.name: "wazuh.indexer" node.name: "wazuh.indexer"
ansible/app-configs/wazuh_wazuh.yml.j2
+3 -3
View File
@@ -1,10 +1,10 @@
{% set vault_addr = https://vault.trez.wtf %} {% set vault_addr = 'https://vault.trez.wtf' %}
{% set secrets_path = rinoa-docker/env %} {% set secrets_path = 'rinoa-docker/env' %}
hosts: hosts:
- 1513629884013: - 1513629884013:
url: "https://wazuh.manager" url: "https://wazuh.manager"
port: 55000 port: 55000
username: wazuh-wui username: wazuh-wui
password: "{{ lookup('community.hashi_vault.vault_kv2_get', token=token, url=vault_url, mount_point=secrets_path, key='WAZUH_API_PASSWORD') }}" password: {{ lookup('community.hashi_vault.vault_kv2_get', 'env', engine_mount_point='rinoa-docker', url=vault_addr, token=vault_token_cleaned)['secret']['WAZUH_API_PASSWORD'] }}
run_as: false run_as: false
ansible/app-configs/youtubedl_config.yml.j2
+2 -2
View File
@@ -1,5 +1,5 @@
{% set vault_addr = https://vault.trez.wtf %} {% set vault_addr = 'https://vault.trez.wtf' %}
{% set secrets_path = rinoa-docker/env %} {% set secrets_path = 'rinoa-docker/env' %}
ydl_server: # youtube-dl-server specific settings ydl_server: # youtube-dl-server specific settings
port: 8080 # Port youtube-dl-server should listen on port: 8080 # Port youtube-dl-server should listen on
ansible/app-configs/zitadel_config.yaml.j2
+4 -4
View File
@@ -1,5 +1,5 @@
{% set vault_addr = https://vault.trez.wtf %} {% set vault_addr = 'https://vault.trez.wtf' %}
{% set secrets_path = rinoa-docker/env %} {% set secrets_path = 'rinoa-docker/env' %}
# All possible options and their defaults: https://github.com/zitadel/zitadel/blob/main/cmd/defaults.yaml # All possible options and their defaults: https://github.com/zitadel/zitadel/blob/main/cmd/defaults.yaml
Log: Log:
@@ -37,7 +37,7 @@ SMTPConfiguration:
SMTP: SMTP:
# must include the port, like smtp.mailtrap.io:2525. IPv6 is also supported, like [2001:db8::1]:2525 # must include the port, like smtp.mailtrap.io:2525. IPv6 is also supported, like [2001:db8::1]:2525
Host: 'postal-smtp:25' Host: 'postal-smtp:25'
User: "{{ lookup('community.hashi_vault.vault_kv2_get', token=token, url=vault_url, mount_point=secrets_path, key='POSTAL_SMTP_AUTH_USER') }}" User: {{ lookup('community.hashi_vault.vault_kv2_get', 'env', engine_mount_point='rinoa-docker', url=vault_addr, token=vault_token_cleaned)['secret']['POSTAL_SMTP_AUTH_USER'] }}
Password: "{{ lookup('community.hashi_vault.vault_kv2_get', token=token, url=vault_url, mount_point=secrets_path, key='POSTAL_SMTP_AUTH_PASSWORD') }}" Password: {{ lookup('community.hashi_vault.vault_kv2_get', 'env', engine_mount_point='rinoa-docker', url=vault_addr, token=vault_token_cleaned)['secret']['POSTAL_SMTP_AUTH_PASSWORD'] }}
From: 'noreply@trez.wtf' From: 'noreply@trez.wtf'
FromName: 'Zitadel @ Rinoa' FromName: 'Zitadel @ Rinoa'
ansible/app-configs/zitadel_init-steps.yaml.j2
+2 -2
View File
@@ -1,5 +1,5 @@
{% set vault_addr = https://vault.trez.wtf %} {% set vault_addr = 'https://vault.trez.wtf' %}
{% set secrets_path = rinoa-docker/env %} {% set secrets_path = 'rinoa-docker/env' %}
# All possible options and their defaults: https://github.com/zitadel/zitadel/blob/main/cmd/setup/steps.yaml # All possible options and their defaults: https://github.com/zitadel/zitadel/blob/main/cmd/setup/steps.yaml
FirstInstance: FirstInstance:
ansible/app-configs/zitadel_secrets.yaml.j2
+4 -4
View File
@@ -1,5 +1,5 @@
{% set vault_addr = https://vault.trez.wtf %} {% set vault_addr = 'https://vault.trez.wtf' %}
{% set secrets_path = rinoa-docker/env %} {% set secrets_path = 'rinoa-docker/env' %}
# If not using the docker compose example, adjust these values for connecting ZITADEL to your PostgreSQL # If not using the docker compose example, adjust these values for connecting ZITADEL to your PostgreSQL
Database: Database:
@@ -7,7 +7,7 @@ Database:
User: User:
# If the user doesn't exist already, it is created # If the user doesn't exist already, it is created
Username: 'zitadel' Username: 'zitadel'
Password: "{{ lookup('community.hashi_vault.vault_kv2_get', token=token, url=vault_url, mount_point=secrets_path, key='ZITADEL_DB_PASSWORD') }}" Password: {{ lookup('community.hashi_vault.vault_kv2_get', 'env', engine_mount_point='rinoa-docker', url=vault_addr, token=vault_token_cleaned)['secret']['ZITADEL_DB_PASSWORD'] }}
Admin: Admin:
Username: 'root' Username: 'root'
Password: "{{ lookup('community.hashi_vault.vault_kv2_get', token=token, url=vault_url, mount_point=secrets_path, key='ZITADEL_DB_ADMIN_PASSWORD') }}" Password: {{ lookup('community.hashi_vault.vault_kv2_get', 'env', engine_mount_point='rinoa-docker', url=vault_addr, token=vault_token_cleaned)['secret']['ZITADEL_DB_ADMIN_PASSWORD'] }}
ansible/docker_config_deploy.yml
+6 -20
View File
@@ -1,34 +1,20 @@
--- ---
- name: Deploy config templates and trigger GitHub workflow - name: Deploy config templates and trigger GitHub workflow
hosts: rinoa hosts: all
vars: vars:
appdata_base_path: "/home/charish/.docker/config/appdata" appdata_base_path: "~/.docker/config/appdata"
tasks: tasks:
- name: Ensure target directories exist - name: Ensure target directories exist
ansible.builtin.file: ansible.builtin.file:
path: "{{ appdata_base_path }}/{{ item | basename | regex_replace('\\.j2$', '') | regex_replace('_', '/') | regex_replace('/[^/]+$', '') }}" path: "{{ appdata_base_path }}/{{ (item | basename | regex_replace('\\.j2$', '') | regex_replace('_', '/') | regex_replace('/[^/]+$', '')) }}"
state: directory state: directory
mode: '0755' mode: '0755'
loop: "{{ lookup('fileglob', 'app-configs/*.j2') }}" loop: "{{ query('fileglob', 'app-configs/*.j2') }}"
- name: Deploy configuration templates - name: Deploy configuration templates
ansible.builtin.template: ansible.builtin.template:
src: "{{ item }}" src: "{{ item }}"
dest: "{{ appdata_base_path }}/{{ item | basename | regex_replace('\\.j2$', '') | regex_replace('_', '/') }}" dest: "{{ appdata_base_path }}/{{ item | basename | regex_replace('\\.j2$', '') | regex_replace('_', '/') }}"
mode: '0644' mode: '0644'
loop: "{{ lookup('fileglob', 'app-configs/*.j2') }}" loop: "{{ query('fileglob', 'app-configs/*.j2') }}"
# - name: Trigger GitHub workflow
# uri:
# url: "https://api.github.com/repos/<owner>/<repo>/actions/workflows/<workflow_id>/dispatches"
# method: POST
# headers:
# Authorization: "Bearer {{ github_token }}"
# Accept: "application/vnd.github.v3+json"
# body:
# ref: "main"
# body_format: json
# vars:
# github_token: "YOUR_GITHUB_PERSONAL_ACCESS_TOKEN"
# # Replace <owner>, <repo>, and <workflow_id> with actual values
# delegate_to: localhost
ansible/secrets.yml
-7
View File
@@ -1,7 +0,0 @@
$ANSIBLE_VAULT;1.1;AES256
38346631616139316365316566386362396661323163306339303635646331373061323531626431
3435373031363739356261656239633835393963636663370a613166653463656337666366633639
37373637326633363430633336646165343764303063663636313835326130663532323037663331
6332353339656134370a353435396532663932313535646636333262353238386331313764633635
63383065623930653134666261353439366535646661383434386261393232373432353937636535
3432336137393737643735346665303832653630316439333565