Add paperless

playbooks/roles/paperless/defaults/main.yml

@@ -0,0 +1,72 @@
+---
+paperless_uid: 1000
+paperless_gid: 1000
+
+paperless_svc:
+  domain: "{{ all_services | service_get_domain(role_name) }}"
+  port: 8000
+
+paperless_env:
+  USERMAP_UID: "{{ paperless_uid }}"
+  USERMAP_GID: "{{ paperless_gid }}"
+
+  PAPERLESS_URL: "https://{{ paperless_svc.domain }}"
+  PAPERLESS_SECRET_KEY: "{{ vault_paperless.secret_key }}"
+  PAPERLESS_TIME_ZONE: "{{ timezone }}"
+  PAPERLESS_OCR_LANGUAGE: deu
+
+  PAPERLESS_CONSUMER_DISABLE: true
+  PAPERLESS_WEBHOOKS_ALLOW_INTERNAL_REQUESTS: false
+
+  PAPERLESS_ADMIN_USER: serguzim
+  PAPERLESS_ADMIN_PASSWORD: changeme
+  PAPERLESS_AUTO_LOGIN_USERNAME: serguzim
+  PAPERLESS_ACCOUNT_ALLOW_SIGNUPS: false
+
+  PAPERLESS_REDIS: redis://redis:6379
+
+  PAPERLESS_DBENGINE: postgresql
+  PAPERLESS_DBHOST: "{{ postgres.host }}"
+  PAPERLESS_DBPORT: "{{ postgres.port }}"
+  PAPERLESS_DBNAME: "{{ opentofu.postgresql_data.paperless.database }}"
+  PAPERLESS_DBUSER: "{{ opentofu.postgresql_data.paperless.user }}"
+  PAPERLESS_DBPASS: "{{ opentofu.postgresql_data.paperless.pass }}"
+  PAPERLESS_DBSSLMODE: verify-full
+  PGSSLROOTCERT: system
+
+  PAPERLESS_EMAIL_HOST: "{{ mailer.host }}"
+  PAPERLESS_EMAIL_PORT: "{{ mailer.port }}"
+  PAPERLESS_EMAIL_HOST_USER: "{{ opentofu.mailcow_data.paperless.address }}"
+  PAPERLESS_EMAIL_HOST_PASSWORD: "{{ opentofu.mailcow_data.paperless.password }}"
+  PAPERLESS_EMAIL_USE_TLS: true
+  PAPERLESS_EMAIL_USE_SSL: false
+  PAPERLESS_EMAIL_FROM: "{{ opentofu.mailcow_data.paperless.address }}"
+
+paperless_compose:
+  watchtower: update
+  image: ghcr.io/paperless-ngx/paperless-ngx:latest
+  volumes:
+    - data:/usr/src/paperless/data
+    - media:/usr/src/paperless/media
+  file:
+    services:
+      app:
+        depends_on:
+          - redis
+      redis:
+        image: docker.io/library/redis:8
+        restart: always
+        volumes:
+          - redisdata:/data
+    volumes:
+      redisdata:
+      data:
+      media:
+        driver_opts:
+          type: cifs
+          o: "seal,\
+              username={{ opentofu.hcloud_storage_box_accounts.paperless.user }},\
+              password={{ opentofu.hcloud_storage_box_accounts.paperless.pass }},\
+              uid={{ paperless_uid }},\
+              gid={{ paperless_gid }}"
+          device: "//{{ opentofu.hcloud_storage_box_accounts.paperless.host }}/{{ opentofu.hcloud_storage_box_accounts.paperless.user }}"

playbooks/roles/paperless/tasks/main.yml

@@ -0,0 +1,12 @@
+---
+- name: Set common facts
+  ansible.builtin.import_tasks: tasks/set-default-facts.yml
+
+- name: Deploy {{ role_name }}
+  vars:
+    svc: "{{ paperless_svc }}"
+    env: "{{ paperless_env }}"
+    compose: "{{ paperless_compose }}"
+  block:
+    - name: Import tasks to deploy common service
+      ansible.builtin.import_tasks: tasks/deploy-common-service.yml

services.auto.tfvars

@@ -600,6 +600,27 @@ services = {
     database = false
   },
 
+  "paperless" = {
+    host = "node002"
+    dns = [{
+      domain = "documents.serguzim.me"
+      vpn = true
+    }]
+    backup = [
+      {
+        name = "paperless_media"
+        type = "docker_cifs"
+      }
+    ]
+    monitoring = {
+      group = "3-services"
+    }
+    auth = false
+    database = true
+    storage_box = true
+    mail = "documents"
+  },
+
   "postgresql" = {
     host = "node001"
     dns = [{