Added mastodon, tautulli

2023-04-12 13:50:33 +01:00
parent e37782b856
commit 4fbe12c336
25 changed files with 533 additions and 2 deletions
@@ -0,0 +1,8 @@
+---
+# Unable to use ansible.builtin.lineinfile, because we need to run this through the proxmox host (because SSH is not enabled duh)
+
+- name: Allow SSH into LXC
+  ansible.builtin.command: lxc-attach -n 611 -- sed -i "s/#PermitRootLogin prohibit-password/PermitRootLogin yes/g" /etc/ssh/sshd_config
+
+- name: Restart SSH Service
+  ansible.builtin.command: lxc-attach -n 611 service ssh restart
@@ -0,0 +1,28 @@
+---
+- name: Create directory for docker-compose
+  ansible.builtin.file:
+    path: /root/docker/
+    state: directory
+    mode: "0755"
+
+- name: Copy .env file
+  template:
+    src: ".env"
+    dest: /root/docker/.env
+    owner: root
+    group: root
+    mode: 0755
+
+- name: Copy docker-compose file
+  template:
+    src: "docker-compose.yml"
+    dest: /root/docker/docker-compose.yml
+    owner: root
+    group: root
+    mode: 0755
+
+- name: Run docker-compose
+  ansible.builtin.shell:
+  args:
+    cmd: docker compose up -d
+    chdir: /root/docker/
@@ -0,0 +1,39 @@
+PUID=1000
+PGID=1000
+TZ=Europe/Lisbon
+LOCAL_DOMAIN=social.lino.cooking
+REDIS_HOST=redis
+REDIS_PORT=6379
+DB_HOST=database
+DB_USER={{ mastodon_db_user }}
+DB_NAME={{ mastodon_db_name }}
+DB_PASS={{ mastodon_db_pass }}
+DB_PORT=5432
+POSTGRES_PASSWORD={{ mastodon_db_pass }}
+POSTGRES_USER={{ mastodon_db_user }}
+POSTGRES_DB={{ mastodon_db_name }}
+ES_ENABLED=false
+SECRET_KEY_BASE={{ mastodon_key_base }}
+OTP_SECRET={{ mastodon_otp_secret }}
+VAPID_PRIVATE_KEY={{ mastodon_vapid_private_key }}
+VAPID_PUBLIC_KEY={{ mastodon_vapid_public_key }}
+SMTP_SERVER=smtp.gmail.com
+SMTP_PORT=587
+SMTP_LOGIN=okulto@gmail.com
+SMTP_PASSWORD={{ gmail_smtp_pass }}
+SMTP_FROM_ADDRESS=mastodon@lino.cooking
+S3_ENABLED=false
+WEB_DOMAIN=social.lino.cooking
+#ES_HOST=es #optional
+#ES_PORT=9200 #optional
+#ES_USER=elastic #optional
+#ES_PASS=elastic #optional
+#S3_BUCKET= #optional
+#AWS_ACCESS_KEY_ID= #optional
+#AWS_SECRET_ACCESS_KEY= #optional
+#S3_ALIAS_HOST= #optional
+#SIDEKIQ_ONLY=false #optional
+#SIDEKIQ_QUEUE= #optional
+#SIDEKIQ_DEFAULT=false #optional
+#SIDEKIQ_THREADS=5 #optional
+#DB_POOL=5 #optional
@@ -0,0 +1,30 @@
+version: "2.1"
+services:
+  mastodon:
+    image: lscr.io/linuxserver/mastodon:latest
+    container_name: mastodon
+    env_file:
+      - .env
+    volumes:
+      - /config:/config
+    ports:
+      - 80:80
+    restart: unless-stopped
+  
+  redis:
+    container_name: redis
+    image: redis:latest
+    restart: always
+    env_file:
+      - .env
+
+  database:
+    container_name: database
+    image: postgres:14
+    env_file:
+      - .env
+    environment:
+      PG_DATA: /var/lib/postgresql/data
+    volumes:
+      - /psql/data:/var/lib/postgresql/data
+    restart: always
@@ -0,0 +1,27 @@
+---
+- name: Get convenience script
+  uri:
+    url: "https://get.docker.com"
+    method: GET
+    dest: /tmp/get-docker.sh
+    mode: a+x
+    creates: /tmp/get-docker.sh
+
+- name: Execute script
+  ansible.builtin.shell: /tmp/get-docker.sh
+
+- name: Ensure group "docker" exists
+  ansible.builtin.group:
+    name: docker
+    state: present
+
+- name: Add root user to docker group
+  ansible.builtin.user:
+    name: root
+    groups: docker
+    append: yes
+
+- name: Enable docker on startup
+  ansible.builtin.shell: |
+    systemctl enable docker.service
+    systemctl enable containerd.service
@@ -0,0 +1,28 @@
+---
+- name: Create container
+  community.general.proxmox:
+    vmid: 611
+    node: epona
+    api_user: root@pam
+    api_password: "{{ proxmox_api_password }}"
+    api_host: 10.0.2.2
+    password: "{{ lxc_password }}"
+    hostname: mastodon
+    ostemplate: "hyrule-8tb-nfs:vztmpl/debian-11-standard_11.3-1_amd64.tar.zst"
+    netif: "{'net0':'name=eth0,\
+      gw=10.0.0.1,\
+      ip=10.0.2.20/21,\
+      hwaddr=cc:c6:cf:de:17:80,\
+      bridge=vmbr0'}"
+    cores: 4
+    memory: 8192
+    unprivileged: no
+    swap: 0
+    searchdomain: "home"
+    onboot: 1
+    features:
+      - nesting=1
+      - keyctl=1
+    disk: local-lvm:50
+    mounts: '{"mp0":"local-lvm:5,mp=/psql,backup=1", "mp1":"local-lvm:5,mp=/redis,backup=1", "mp2":"local-lvm:1,mp=/config,backup=1"}'
+    force: yes
@@ -0,0 +1,26 @@
+---
+- name: Stop container
+  community.general.proxmox:
+    vmid: "{{ vmid }}"
+    api_user: root@pam
+    api_password: "{{ proxmox_api_password }}"
+    api_host: 10.0.2.2
+    state: stopped
+  ignore_errors: true
+  timeout: 90
+
+- name: Remove containers
+  community.general.proxmox:
+    vmid: "{{ vmid }}"
+    api_user: root@pam
+    api_password: "{{ proxmox_api_password }}"
+    api_host: 10.0.2.2
+    state: absent
+  ignore_errors: true
+  timeout: 90
+
+- name: Remove .ssh/known_hosts lines
+  ansible.builtin.lineinfile:
+    path: /Users/lino.silva/.ssh/known_hosts
+    state: absent
+    regexp: "^10.0.2.20"
@@ -0,0 +1,8 @@
+---
+- name: Start deployments
+  community.general.proxmox:
+    vmid: "{{ vmid }}"
+    api_user: root@pam
+    api_password: "{{ proxmox_api_password }}"
+    api_host: 10.0.2.2
+    state: started
@@ -0,0 +1,6 @@
+---
+- name: Update all packages to their latest version
+  become: true
+  ansible.builtin.apt:
+    update_cache: yes
+    upgrade: full