Add tandoor to ansible

_ansible/inventory/group_vars/all/main.yml

@@ -1,4 +1,5 @@
 admin_email: tobias@msrg.cc
+timezone: Europe/Berlin
 
 postgres:
   host: db.serguzim.me

_ansible/node002.yml

@@ -9,6 +9,7 @@
     - homebox
     - influxdb
     - jellyfin
+    - tandoor
     - telegraf
     - umami
     - uptime-kuma

_ansible/roles/tandoor/tasks/main.yml

@@ -0,0 +1,7 @@
+---
+- name: Deploy {{ svc.name }}
+  tags:
+    - tandoor
+    - recipies
+  block:
+    - import_tasks: deploy-common-service.yml

_ansible/roles/tandoor/vars/main.yml

@@ -0,0 +1,64 @@
+svc:
+  domain: "recipes.serguzim.me"
+  name: tandoor
+  port: 80
+  db:
+    host: "{{ postgres.host }}"
+    port: "{{ postgres.port }}"
+    database: tandoor
+    user: "{{ vault_tandoor.db.user }}"
+    pass: "{{ vault_tandoor.db.pass }}"
+
+svc_env:
+  DEBUG: 0
+  SQL_DEBUG: 0
+
+  ALLOWED_HOSTS: recipes.serguzim.me
+  SECRET_KEY: 
+  TIMEZONE: "{{ timezone }}"
+
+  DB_ENGINE: django.db.backends.postgresql
+  DB_OPTIONS: "{\"sslmode\": \"require\"}"
+  POSTGRES_HOST: "{{ svc.db.host }}"
+  POSTGRES_PORT: "{{ svc.db.port }}"
+  POSTGRES_DB: "{{ svc.db.database }}"
+  POSTGRES_USER: "{{ svc.db.user }}"
+  POSTGRES_PASSWORD: "{{ svc.db.pass }}"
+
+  SHOPPING_MIN_AUTOSYNC_INTERVAL: 5
+
+  ENABLE_SIGNUP: 0
+  ENABLE_METRICS: 1
+  ENABLE_PDF_EXPORT: 1
+
+  SOCIAL_DEFAULT_ACCESS: 1
+  SOCIAL_DEFAULT_GROUP: guest
+
+compose:
+  watchtower: true
+  image: nginx:mainline-alpine
+  env: true
+  volumes:
+    - nginx_config:/etc/nginx/conf.d:ro
+    - staticfiles:/static
+    - mediafiles:/media
+  file:
+    services:
+      web_recipes:
+        image: vabene1111/recipes
+        restart: always
+        labels:
+          com.centurylinklabs.watchtower.enable: true
+        env_file:
+          - service.env
+        volumes:
+          - staticfiles:/opt/recipes/staticfiles
+          - nginx_config:/opt/recipes/nginx/conf.d
+          - mediafiles:/opt/recipes/mediafiles
+        networks:
+          local-net:
+    volumes:
+      nginx_config:
+      staticfiles:
+      mediafiles:
+