Migrate services part

roles/linkwarden/tasks/main.yml

@@ -0,0 +1,12 @@
+---
+- name: Set common facts
+  ansible.builtin.import_tasks: tasks/set-default-facts.yml
+
+- name: Deploy {{ svc.name }}
+  vars:
+    svc: "{{ linkwarden_svc }}"
+    env: "{{ linkwarden_env }}"
+    compose: "{{ linkwarden_compose }}"
+  block:
+    - name: Import tasks to deploy common service
+      ansible.builtin.import_tasks: tasks/deploy-common-service.yml

roles/linkwarden/vars/main.yml

@@ -0,0 +1,39 @@
+---
+linkwarden_secret: "{{ vault_linkwarden.secret }}"
+
+linkwarden_db_host_port: "{{ postgres.host }}:{{ postgres.port }}"
+linkwarden_db_user: "{{ vault_linkwarden.db.user }}"
+linkwarden_db_pass: "{{ vault_linkwarden.db.pass }}"
+linkwarden_db_database: linkwarden
+
+linkwarden_s3_accesskey: "{{ opentofu.scaleway_service_keys.linkwarden.access_key }}"
+linkwarden_s3_secretkey: "{{ opentofu.scaleway_service_keys.linkwarden.secret_key }}"
+
+linkwarden_svc:
+  domain: bookmarks.serguzim.me
+  name: linkwarden
+  port: 3000
+
+linkwarden_env:
+  NEXTAUTH_SECRET: "{{ linkwarden_secret }}"
+  NEXTAUTH_URL: https://bookmarks.serguzim.me/api/v1/auth
+  DATABASE_URL: postgres://{{ linkwarden_db_user }}:{{ linkwarden_db_pass }}@{{ linkwarden_db_host_port }}/{{ linkwarden_db_database }}
+
+  SPACES_KEY: "{{ linkwarden_s3_accesskey }}"
+  SPACES_SECRET: "{{ linkwarden_s3_secretkey }}"
+  SPACES_ENDPOINT: https://s3.nl-ams.scw.cloud
+  SPACES_BUCKET_NAME: linkwarden.serguzim.me
+  SPACES_REGION: ns-ams
+  SPACES_FORCE_PATH_STYLE: false
+
+  NEXT_PUBLIC_DISABLE_REGISTRATION: true
+  NEXT_PUBLIC_CREDENTIALS_ENABLED: true
+  NEXT_PUBLIC_AUTHENTIK_ENABLED: false
+  AUTHENTIK_CUSTOM_NAME: auth.serguzim.me
+  AUTHENTIK_ISSUER: https://auth.serguzim.me/application/o/bookmarks-serguzim-me
+  AUTHENTIK_CLIENT_ID: "{{ vault_linkwarden.oidc_client.id }}"
+  AUTHENTIK_CLIENT_SECRET: "{{ vault_linkwarden.oidc_client.secret }}"
+
+linkwarden_compose:
+  watchtower: true
+  image: ghcr.io/linkwarden/linkwarden:latest