Merge pull request 'basic tags' (#10) from services_user into main

Reviewed-on: #10

ansible/playbooks/borg_backups.yaml

@@ -1,6 +1,7 @@
 ---
 - name: Evaluate borg client nodes
   hosts: all
+  tags: clients
   gather_facts: false
   tasks:
   - name: Gather configured clients
@@ -10,6 +11,7 @@
 
 
 - name: Configure borg backups system
+  tags: server
   hosts: borg_clients_True:borg
   debugger: on_failed
   tasks: 

ansible/playbooks/roles/forgejo/tasks/forgejo_docker.yaml

@@ -8,7 +8,7 @@
 
 - name: Create data directory
   ansible.builtin.file:
-    path: "/home/{{ ansible_user }}/forgejo/data"
+    path: "{{ compose_dir.path }}/data"
     state: directory
     mode: '0755'
   register: forgejo_data_dir
@@ -16,7 +16,7 @@
 
 - name: Create DB data directory
   ansible.builtin.file:
-    path: "/home/{{ ansible_user }}/forgejo/db"
+    path: "{{ compose_dir.path }}/db"
     state: directory
     mode: '0755'
   register: forgejo_db_dir

ansible/playbooks/roles/forgejo/tasks/main.yaml

@@ -1,2 +1,4 @@
 ---
-- include_tasks: forgejo_docker.yaml
+- include_tasks: forgejo_docker.yaml
+  tags:
+    - forgejo

ansible/playbooks/roles/forgejo/templates/forgejo_compose.yaml.j2

@@ -7,7 +7,8 @@ networks:
 
 services:
   server:
-    image: codeberg.org/forgejo/forgejo:16.0.1
+    image: codeberg.org/forgejo/forgejo:16.0.1-rootless
+    user: "{{ ansible_user_uid }}:{{ ansible_group_uid }}"
     container_name: forgejo
     restart: always
     environment:
@@ -26,11 +27,11 @@ services:
       - newt
       
     volumes:
-      - {{ forgejo_data_dir.path }}:/data
       - /etc/localtime:/etc/localtime:ro
+      - {{ forgejo_data_dir.path }}/gitea:/var/lib/gitea
     ports:
       - '3000:3000'
-      - '222:22'
+      - "222:2222"
 
     depends_on:
       - db
@@ -39,6 +40,7 @@ services:
   db:
     image: postgres:14
     restart: always
+    user: "{{ ansible_user_uid }}:{{ ansible_group_uid }}"
     environment:
       - POSTGRES_USER=forgejo
       - POSTGRES_PASSWORD={{ forgejo_db_password }}

ansible/playbooks/roles/newt_client/tasks/main.yaml

@@ -1,2 +1,4 @@
 ---
 - include_tasks: docker_newt.yaml
+  tags:
+    - newt

ansible/playbooks/roles/nextcloud_aio/tasks/main.yaml

@@ -1,2 +1,4 @@
 ---
-- import_tasks: nextcloud_docker_aio.yaml
+- import_tasks: nextcloud_docker_aio.yaml
+  tags:
+    - nextcloud

ansible/playbooks/roles/nginx/tasks/main.yaml

@@ -1,2 +1,4 @@
 ---
-- include_tasks: docker_nginx.yaml
+- include_tasks: docker_nginx.yaml
+  tags:
+    - nginx

ansible/playbooks/roles/pangolin/tasks/main.yaml

@@ -1,3 +1,5 @@
 ---
-- ansible.builtin.include_tasks: 
+- include_tasks: docker_pangolin.yaml
-    file: docker_pangolin.yaml
+  tags:
+    - pamgolin
+

ansible/playbooks/roles/vaultwarden/defaults/main.yaml

@@ -0,0 +1,2 @@
+vaultwarden_signup_allowed: true
+vaultwarden_image_tag: 1.37.2

ansible/playbooks/roles/vaultwarden/tasks/main.yaml

@@ -0,0 +1,4 @@
+---
+- include_tasks: vaultwarden_docker.yaml
+  tags:
+    - vaultwarden

ansible/playbooks/roles/vaultwarden/tasks/vaultwarden_docker.yaml

@@ -0,0 +1,24 @@
+---
+- name: Create docker compose directory
+  ansible.builtin.file:
+    path: "{{ docker_compose_projects_base_path }}/vaultwarden"
+    state: directory
+    mode: '0755'
+  register: compose_dir
+
+- name: Create data directory
+  ansible.builtin.file:
+    path: "{{ compose_dir.path }}/data"
+    state: directory
+    mode: '0755'
+  register: vaultwarden_data_dir
+
+- name: Copy compose file
+  ansible.builtin.template:
+    src: templates/vaultwarden_compose.yaml.j2
+    dest: "{{ compose_dir.path }}/compose.yaml"
+
+
+- name: Starting Vaultwarden compose project
+  community.docker.docker_compose_v2:
+    project_src: "{{ compose_dir.path }}" 

ansible/playbooks/roles/vaultwarden/templates/vaultwarden_compose.yaml.j2

@@ -0,0 +1,19 @@
+networks:
+  newt:
+    name: newt_compose_default
+    external: true
+
+services:
+  vaultwarden:
+    image: vaultwarden/server:{{ vaultwarden_image_tag }}
+    container_name: vaultwarden
+    restart: always
+    environment:
+      # DOMAIN: "https://vaultwarden.example.com"  # required when using a reverse proxy; your domain; vaultwarden needs to know it's https to work properly with attachments
+      SIGNUPS_ALLOWED: "{{ vaultwarden_signup_allowed }}" # Deactivate this with "false" after you have created your account so that no strangers can register
+    volumes:
+      - {{ vaultwarden_data_dir.path }}:/data # the path before the : can be changed
+    ports:
+      - 11001:80 # you can replace the 11001 with your preferred port
+    networks:
+      - newt

ansible/playbooks/vaultwarden.yaml

@@ -0,0 +1,15 @@
+---
+- name: Install Vaultwarden
+  hosts: vaultwarden
+  tasks:
+    - include_role:
+        name: geerlingguy.docker
+        apply:
+          become: true
+          become_exe: "{{ become_exe_value }}"
+          
+    - include_role:
+        name: "{{ item }}"
+      loop:
+        - newt_client
+        - vaultwarden