Add harbor to ansible

_ansible/roles/harbor/vars/main.yml

@@ -0,0 +1,96 @@
+svc_ports:
+  http: 20080
+  https: 20443
+  metrics: 29000
+
+svc:
+  name: harbor
+  domain: "registry.serguzim.me"
+  caddy_extra: |
+    reverse_proxy /metrics host.docker.internal:{{ svc_ports.metrics }}
+    reverse_proxy host.docker.internal:{{ svc_ports.https }} {
+        transport http {
+            tls
+            tls_server_name registry.serguzim.me
+        }
+    }
+  caddy_default: false
+  db:
+    host: "{{ postgres.host }}"
+    port: "{{ postgres.port }}"
+    database: harbor
+    user: "{{ vault_harbor.db.user }}"
+    pass: "{{ vault_harbor.db.pass }}"
+  harbor_version: 2.9.0
+
+svc_yml:
+  hostname: "{{ svc.domain }}"
+  http:
+    port: "{{ svc_ports.http }}"
+  https:
+    port: "{{ svc_ports.https }}"
+    certificate: /opt/services/.lego/certificates/registry.serguzim.me.crt
+    private_key: /opt/services/.lego/certificates/registry.serguzim.me.key
+  external_url: https://registry.serguzim.me
+  harbor_admin_password: "{{ vault_harbor.admin_password }}"
+  data_volume: "{{ (service_path, 'data') | path_join }}"
+  storage_service:
+    s3:
+      accesskey: "{{ vault_harbor.minio.accesskey }}"
+      secretkey: "{{ vault_harbor.minio.secretkey }}"
+      region: de-contabo-1
+      regionendpoint: https://s3.serguzim.me
+      bucket: registry
+      secure: true
+  trivy:
+    ignore_unfixed: false
+    skip_update: false
+    offline_scan: false
+    security_check: vuln
+    insecure: false
+  jobservice:
+    max_job_workers: 10
+    job_loggers:
+      - STD_OUTPUT
+      - FILE
+    logger_sweeper_duration: 1
+  notification:
+    webhook_job_max_retry: 3
+    webhook_job_http_client_timeout: 3
+  log:
+    level: info
+    local:
+      rotate_count: 50
+      rotate_size: 200M
+      location: /var/log/harbor
+  _version: "{{ svc.harbor_version }}"
+  external_database:
+    harbor:
+      host: "{{ svc.db.host }}"
+      port: "{{ svc.db.port }}"
+      db_name: "{{ svc.db.database }}"
+      username: "{{ svc.db.user }}"
+      password: "{{ svc.db.pass }}"
+      ssl_mode: verify-full
+      max_idle_conns: 2
+      max_open_conns: 0
+  proxy:
+    http_proxy: null
+    https_proxy: null
+    no_proxy: null
+    components:
+      - core
+      - jobservice
+      - trivy
+  metric:
+    enabled: enabled
+    port: "{{ svc_ports.metrics }}"
+    path: /metrics
+  upload_purging:
+    enabled: true
+    age: 168h
+    interval: 24h
+    dryrun: false
+  cache:
+    enabled: false
+    expire_hours: 24