Add homebox service

.gitignore

@@ -17,5 +17,6 @@ diagram_assets/
 /caddy/config/conf.002.d/acme.serguzim.me.conf
 /caddy/config/conf.002.d/analytics.serguzim.me.conf
 /caddy/config/conf.002.d/git.serguzim.me.conf
+/caddy/config/conf.002.d/inventory.serguzim.me.conf
 /caddy/config/conf.002.d/tick.serguzim.me.conf
 /caddy/config/conf.002.d/wiki.serguzim.me.conf

_ansible/node002.yml

@@ -4,7 +4,8 @@
   roles:
     - acme-dns
     - gitea
-    - gitea-runner
+    #- gitea-runner
+    - homebox
     - influxdb
     - umami
     - watchtower

_ansible/roles/gitea/vars/main.yml

@@ -43,6 +43,7 @@ svc_env:
 
   GITEA__service__ALLOW_ONLY_EXTERNAL_REGISTRATION: true
   GITEA__service__ENABLE_BASIC_AUTHENTICATION: false
+  GITEA__service__DEFAULT_KEEP_EMAIL_PRIVATE: true
   GITEA__service__NO_REPLY_ADDRESS: "discard.msrg.cc"
 
   GITEA__webhook__DELIVER_TIMEOUT: 60
@@ -73,12 +74,12 @@ svc_env:
   GITEA__storage__MINIO_LOCATION: "de-contabo-1"
   GITEA__storage__MINIO_USE_SSL: true
 
-  GITEA__other__SHOW_FOOTER_BRANDING: true
+  GITEA__other__SHOW_FOOTER_VERSION: true
   GITEA__other__SHOW_FOOTER_TEMPLATE_LOAD_TIME: false
 
 compose:
   watchtower: true
-  image: gitea/gitea:1.19
+  image: gitea/gitea:1.20
   env: true
   volumes:
     - data:/data

_ansible/roles/homebox/tasks/main.yml

@@ -0,0 +1,7 @@
+---
+- name: Deploy {{ svc.name }}
+  tags:
+    - homebox
+    - inventory
+  block:
+    - import_tasks: deploy-common-service.yml

_ansible/roles/homebox/vars/main.yml

@@ -0,0 +1,24 @@
+svc:
+  domain: "inventory.serguzim.me"
+  name: homebox
+  port: 7745
+
+svc_env:
+  HBOX_OPTIONS_ALLOW_REGISTRATION: false
+  HBOX_MAILER_HOST: mail.serguzim.me
+  HBOX_MAILER_PORT: 587
+  HBOX_MAILER_USERNAME: inventory@serguzim.me
+  HBOX_MAILER_PASSWORD: "{{ vault_homebox.mailer_passwd }}"
+  HBOX_MAILER_FROM: Homebox <inventory@serguzim.me>
+  HBOX_SWAGGER_SCHEMA: https
+
+compose:
+  watchtower: true
+  image: ghcr.io/hay-kot/homebox:latest-rootless
+  env: true
+  volumes:
+    - data:/data
+  file:
+    volumes:
+      data:
+

_ansible/roles/umami/vars/main.yml

@@ -12,7 +12,6 @@ svc_env:
   DATABASE_URL: postgres://{{ svc.db.user }}:{{ svc.db.pass }}@{{ svc.db.host }}/{{ svc.db.db }}
   DATABASE_TYPE: postgresql
   FORCE_SSL: 1
-  HOSTNAME: "{{ svc.domain }}"
   HASH_SALT: "{{ vault_umami.hash_salt }}"
 
 compose: