ansible/roles/services/defaults/main.yml

# vim: ft=yaml.ansible
# code: language=ansible
---
volume_root_folder: "/docker-volumes"
volume_website_folder: "{{ volume_root_folder }}/websites"

services:
  ### Internal services ###
  postfix:
    domain: "smtp.{{ base_domain }}"
    volume_folder: "{{ volume_root_folder }}/postfix"
    pre_deploy_tasks: true
    version: "v3.6.1-alpine"

  nginx_proxy:
    volume_folder: "{{ volume_root_folder }}/nginx"
    pre_deploy_tasks: true
    version: "1.3-alpine"
    acme_companion_version: "2.2"

  openldap:
    domain: "ldap.{{ base_domain }}"
    volume_folder: "{{ volume_root_folder }}/openldap"
    pre_deploy_tasks: true
    version: "1.5.0"
    phpldapadmin_version: "0.9.0"

  netdata:
    domain: "netdata.{{ base_domain }}"
    volume_folder: "{{ volume_root_folder }}/netdata"
    version: "v1"

  portainer:
    domain: "portainer.{{ base_domain }}"
    volume_folder: "{{ volume_root_folder }}/portainer"
    version: "2.19.0"

  keycloak:
    domain: sso.{{ base_domain }}
    volume_folder: "{{ volume_root_folder }}/keycloak"
    version: "22.0"
    postgres_version: "10"
    allowed_sender_domain: true

  restic:
    volume_folder: "{{ volume_root_folder }}/restic"
    pre_deploy_tasks: true
    remote_user: dc-user
    remote_domain: rynkeby.skovgaard.tel
    host_key: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBLGol2G+a87ssy0nu/STKBZSiGyhZhZKx/ujfe9IeFo
    repository: restic
    version: "1.7.0"
    disabled_in_vagrant: true
    # mail dance
    domain: "noreply.{{ base_domain }}"
    allowed_sender_domain: true
    mail_from: "backup@noreply.{{ base_domain }}"

  docker_registry:
    domain: "docker.{{ base_domain }}"
    volume_folder: "{{ volume_root_folder }}/docker-registry"
    pre_deploy_tasks: true
    post_deploy_tasks: true
    username: "docker"
    password: "{{ docker_password }}"
    version: "2"

  ### External services ###
  nextcloud:
    domain: "cloud.{{ base_domain }}"
    volume_folder: "{{ volume_root_folder }}/nextcloud"
    pre_deploy_tasks: true
    version: 28-apache
    postgres_version: "10"
    redis_version: 7-alpine
    allowed_sender_domain: true

  forgejo:
    domain: "git.{{ base_domain }}"
    volume_folder: "{{ volume_root_folder }}/forgejo"
    version: "7.0.5"
    allowed_sender_domain: true

  passit:
    domain: "passit.{{ base_domain }}"
    volume_folder: "{{ volume_root_folder }}/passit"
    version: stable
    postgres_version: 15-alpine
    allowed_sender_domain: true

  matrix:
    domain: "matrix.{{ base_domain }}"
    volume_folder: "{{ volume_root_folder }}/matrix"
    pre_deploy_tasks: true
    version: v1.114.0
    postgres_version: 15-alpine
    allowed_sender_domain: true

  element:
    domain: "element.{{ base_domain }}"
    volume_folder: "{{ volume_root_folder }}/element"
    pre_deploy_tasks: true
    version: v1.11.80

  privatebin:
    domain: "paste.{{ base_domain }}"
    volume_folder: "{{ volume_root_folder }}/privatebin"
    pre_deploy_tasks: true
    version: "20221009"

  hedgedoc:
    domain: "pad.{{ base_domain }}"
    volume_folder: "{{ volume_root_folder }}/hedgedoc"
    pre_deploy_tasks: true
    version: 1.9.9-alpine
    postgres_version: 10-alpine

  data_coop_website:
    domain: "{{ base_domain }}"
    www_domain: "www.{{ base_domain }}"
    volume_folder: "{{ volume_website_folder }}/datacoop"
    pre_deploy_tasks: true
    version: stable
    staging_domain: "staging.{{ base_domain }}"
    staging_version: staging

  slides_2022_website:
    domain: "2022.slides.{{ base_domain }}"
    volume_folder: "{{ volume_website_folder }}/slides-2022"
    version: latest

  fedi_dk_website:
    domain: fedi.dk
    volume_folder: "{{ volume_website_folder }}/fedidk"
    version: latest

  vhs_website:
    domain: vhs.data.coop
    volume_folder: "{{ volume_website_folder }}/vhs"
    version: latest

  cryptohagen_website:
    domains:
      - "cryptohagen.dk"
      - "www.cryptohagen.dk"
    volume_folder: "{{ volume_website_folder }}/cryptohagen"

  ulovliglogning_website:
    domains:
      - "ulovliglogning.dk"
      - "www.ulovliglogning.dk"
      - "ulovlig-logning.dk"
      - "www.ulovlig-logning.dk"
    volume_folder: "{{ volume_website_folder }}/ulovliglogning"

  cryptoaarhus_website:
    domains:
      - "cryptoaarhus.dk"
      - "www.cryptoaarhus.dk"
    volume_folder: "{{ volume_website_folder }}/cryptoaarhus"

  drone:
    domain: "drone.{{ base_domain }}"
    volume_folder: "{{ volume_root_folder }}/drone"
    version: "1"

  mailu:
    domain: "mail.{{ base_domain }}"
    volume_folder: "{{ volume_root_folder }}/mailu"
    pre_deploy_tasks: true
    dns: 192.168.203.254
    subnet: 192.168.203.0/24
    version: "2.0"
    postgres_version: 14-alpine
    redis_version: alpine

  mastodon:
    domain: "social.{{ base_domain }}"
    volume_folder: "{{ volume_root_folder }}/mastodon"
    pre_deploy_tasks: true
    post_deploy_tasks: true
    version: v4.2.10
    postgres_version: 14-alpine
    redis_version: 6-alpine
    allowed_sender_domain: true

  rallly:
    domain: "when.{{ base_domain }}"
    volume_folder: "{{ volume_root_folder }}/rallly"
    pre_deploy_tasks: true
    version: "2"
    postgres_version: 14-alpine
    allowed_sender_domain: true

  membersystem:
    domain: "member.{{ base_domain }}"
    django_admins: "Vidir:valberg@orn.li,Balder:benjaoming@data.coop"
    volume_folder: "{{ volume_root_folder }}/membersystem"
    version: latest
    postgres_version: 13-alpine
    allowed_sender_domain: true

  writefreely:
    domain: "write.{{ base_domain }}"
    volume_folder: "{{ volume_root_folder }}/writefreely"
    pre_deploy_tasks: true
    version: v0.15.0
    mariadb_version: "11.2"
    allowed_sender_domain: true

  watchtower:
    volume_folder: "{{ volume_root_folder }}/watchtower"
    version: "1.5.3"

  diun:
    version: "4.28"
    volume_folder: "{{ volume_root_folder }}/diun"
    matrix_user: "@diun:data.coop"
    matrix_room: "#datacoop-services-update:data.coop"

  ### Uptime monitoring ###
  uptime_kuma:
    domain: "uptime.{{ base_domain }}"
    status_domain: "status.{{ base_domain }}"
    volume_folder: "{{ volume_root_folder }}/uptime_kuma"
    pre_deploy_tasks: true
    version: "latest"

services_exclude:
  - uptime_kuma

services_include: "{{ services | dict2items | map(attribute='key') | community.general.lists_difference(services_exclude) }}"