Migrate services part

inventory/group_vars/all/compose_defaults.yml

@@ -0,0 +1,37 @@
+compose_file_main:
+  services:
+    app:
+      image: "{{ compose.image }}"
+      restart: always
+      labels:
+        com.centurylinklabs.watchtower.enable: "{{ compose.watchtower | default(false) }}"
+
+compose_file_env:
+  services:
+    app:
+      env_file:
+        - service.env
+
+compose_file_networks:
+  services:
+    app:
+      networks:
+        default:
+        apps:
+          aliases:
+            - "{{ svc.name }}"
+  networks:
+    default:
+    apps:
+      external: true
+
+compose_file_volumes:
+  services:
+    app:
+      volumes: "{{ compose.volumes }}"
+
+compose_file_monitoring_label:
+  services:
+    app:
+      labels:
+        com.influxdata.telegraf.enable: true

inventory/group_vars/all/main.yml

@@ -0,0 +1,22 @@
+admin_email: tobias@msrg.cc
+timezone: Europe/Berlin
+
+postgres:
+  host: db.serguzim.me
+  port: 5432
+
+mailer:
+  host: mail.serguzim.me
+  port: 587
+
+acme_dns:
+  host: acme.serguzim.me
+
+
+services_path: /opt/services/
+
+caddy_path: "{{ (services_path, 'caddy') | path_join }}"
+caddy_config_path: "{{ (caddy_path, 'config', 'conf.d') | path_join }}"
+managed_sites: []
+
+certificates_path: "{{ (services_path, '_certificates') | path_join }}"

inventory/serguzim.net.yml

@@ -0,0 +1,58 @@
+all:
+  hosts:
+    local-dev:
+      ansible_connection: local
+
+    node001:
+      ansible_host: node001.vpn.serguzim.net
+      ansible_port: "{{ vault_node001.ansible_port }}"
+      ansible_user: "{{ vault_node001.ansible_user }}"
+      interactive_user: "{{ vault_node001.interactive_user }}"
+      host_vpn:
+        domain: node001.vpn.serguzim.net
+        ip: 100.64.0.1
+      host_backup:
+        hc_uid: "{{ vault_node001.backup.hc_uid }}"
+        uptime_kuma_token: "{{ vault_node001.backup.uptime_kuma_token }}"
+        volumes:
+          - minecraft-2_data
+
+    node002:
+      ansible_host: node002.vpn.serguzim.net
+      ansible_port: "{{ vault_node002.ansible_port }}"
+      ansible_user: "{{ vault_node002.ansible_user }}"
+      interactive_user: "{{ vault_node002.interactive_user }}"
+      host_vpn:
+        domain: node002.vpn.serguzim.net
+        ip: 100.64.0.2
+      host_backup:
+        hc_uid: "{{ vault_node002.backup.hc_uid }}"
+        uptime_kuma_token: "{{ vault_node002.backup.uptime_kuma_token }}"
+        volumes:
+          - forgejo_data
+          - homebox_data
+          - immich_upload
+          - influxdb_data
+          - jellyfin_config
+          #- jellyfin_media # TODO
+          - minio_data
+          - ntfy_data
+          - reitanlage-oranienburg_data
+          - synapse_media_store
+          - tandoor_mediafiles
+          - teamspeak-fallback-data
+          - uptime-kuma_data
+          - vikunja_data
+
+    node003:
+      ansible_host: node003.vpn.serguzim.net
+      ansible_port: "{{ vault_node003.ansible_port }}"
+      ansible_user: "{{ vault_node003.ansible_user }}"
+      interactive_user: "{{ vault_node003.interactive_user }}"
+      host_vpn:
+        domain: node003.vpn.serguzim.net
+        ip: 100.110.16.30
+      host_backup:
+        hc_uid: "{{ vault_node003.backup.hc_uid }}"
+        uptime_kuma_token: "{{ vault_node003.backup.uptime_kuma_token }}"
+        volumes: []