summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
Diffstat
-rw-r--r--.gitignore3
-rw-r--r--inventory.ini2
-rw-r--r--playbook.yml68
-rw-r--r--templates/cafe_bot-compose.yaml.j218
-rw-r--r--templates/cafe_bot.env.j20
-rw-r--r--templates/docker-compose.yml.j238
-rw-r--r--templates/git-compose.yml.j215
-rw-r--r--templates/huginn-compose.yml.j240
-rw-r--r--templates/hugo_kitchen-compose.yml.j213
-rw-r--r--templates/journal-compose.yml.j231
-rw-r--r--templates/kitchen-compose.yml.j238
-rw-r--r--templates/miniflux-compose.yml.j231
-rw-r--r--templates/mumble-compose.yml.j239
-rw-r--r--templates/podcast-compose.yml.j211
-rw-r--r--templates/rss_bridge-compose.yml.j210
-rw-r--r--templates/soundboard_config.js.j27
-rw-r--r--templates/tracker-compose.yml.j264
-rw-r--r--templates/util/traefik_labels.txt.j26
18 files changed, 434 insertions, 0 deletions
diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..ed5ab6f
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,3 @@
+.venv
+.vscode
+out/
diff --git a/inventory.ini b/inventory.ini
new file mode 100644
index 0000000..574a128
--- /dev/null
+++ b/inventory.ini
@@ -0,0 +1,2 @@
+[kitchen]
+localhost \ No newline at end of file
diff --git a/playbook.yml b/playbook.yml
new file mode 100644
index 0000000..40177d0
--- /dev/null
+++ b/playbook.yml
@@ -0,0 +1,68 @@
+- name: Setup kitchen
+ hosts: localhost
+ connection: local
+ tasks:
+ - name: Create output directory
+ ansible.builtin.file:
+ path: ./out/
+ state: directory
+ mode: '0775'
+
+ - name: Create data directory
+ ansible.builtin.file:
+ path: ./out/data
+ state: directory
+ mode: '0775'
+
+ - name: Clone repos
+ ansible.builtin.git:
+ repo: "{{ item }}"
+ dest: "./out/{{ item | basename }}/"
+ version: main
+ loop:
+ - https://git.marks.kitchen/cgit/journal_api.git
+ - https://git.marks.kitchen/cgit/docker_cgit.git
+ - https://github.com/Mark-Powers/cafe_bot.git
+
+ - name: Clone repos
+ ansible.builtin.git:
+ repo: "{{ item }}"
+ dest: "./out/{{ item | basename }}/"
+ version: master
+ loop:
+ - https://git.marks.kitchen/cgit/soundboard.git
+ - https://git.marks.kitchen/cgit/markskitchen.git
+ - https://git.marks.kitchen/cgit/games.git
+ - https://git.marks.kitchen/cgit/tracker-spa.git
+ - https://git.marks.kitchen/cgit/markskitchen_hugo.git
+
+ - name: Template docker-compose files
+ ansible.builtin.template:
+ src: "{{ item }}.j2"
+ dest: ./out/{{ item }}
+ mode: u=rw,g=r,o=r
+ loop:
+ - git-compose.yml
+ - huginn-compose.yml
+ - hugo_kitchen-compose.yml
+ - journal-compose.yml
+ - kitchen-compose.yml
+ - miniflux-compose.yml
+ - mumble-compose.yml
+ - podcast-compose.yml
+ - rss_bridge-compose.yml
+ - tracker-compose.yml
+ - cafe_bot-compose.yaml
+ - docker-compose.yml
+
+ - name: Template soundboard config
+ ansible.builtin.template:
+ src: "soundboard_config.js.j2"
+ dest: ./out/soundboard.git/config.js
+ mode: u=rw,g=r,o=r
+
+ - name: Template bot config
+ ansible.builtin.template:
+ src: "cafe_bot.env.j2"
+ dest: ./out/cafe_bot.git/.env
+ mode: u=rw,g=r,o=r
diff --git a/templates/cafe_bot-compose.yaml.j2 b/templates/cafe_bot-compose.yaml.j2
new file mode 100644
index 0000000..6cc1987
--- /dev/null
+++ b/templates/cafe_bot-compose.yaml.j2
@@ -0,0 +1,18 @@
+services:
+ matrix-bot:
+ build: cafe_bot.git
+ container_name: cafe_bot
+ volumes:
+ - ./data/cafe_bot/res/:/res
+ - ./data/cafe_bot/data/:/data
+ - ./data/botamusique/music/out:/out
+ environment:
+{% for key, value in cafe_bot_env.items() %}
+ - {{ key }}={{ value }}
+{% endfor %}
+
+ restart: always
+ labels:
+{% with router_name="bot", host_prefix="bot", container_port="8080" %}
+{% include "util/traefik_labels.txt.j2" %}
+{% endwith %}
diff --git a/templates/cafe_bot.env.j2 b/templates/cafe_bot.env.j2
new file mode 100644
index 0000000..e69de29
--- /dev/null
+++ b/templates/cafe_bot.env.j2
diff --git a/templates/docker-compose.yml.j2 b/templates/docker-compose.yml.j2
new file mode 100644
index 0000000..0e8a558
--- /dev/null
+++ b/templates/docker-compose.yml.j2
@@ -0,0 +1,38 @@
+include:
+ - huginn-compose.yml
+ - miniflux-compose.yml
+ - tracker-compose.yml
+ - kitchen-compose.yml
+ - journal-compose.yml
+ - hugo_kitchen-compose.yml
+ - git-compose.yml
+ - rss_bridge-compose.yml
+ - mumble-compose.yml
+ - podcast-compose.yml
+ - cafe_bot-compose.yaml
+
+services:
+ traefik:
+ image: "traefik:v2.10"
+ restart: always
+ container_name: "traefik"
+ ports:
+ - "8080:8080"
+ - "443:443"
+ - "80:80"
+ volumes:
+ - "/var/run/docker.sock:/var/run/docker.sock:ro"
+ - "./data/letsencrypt:/letsencrypt"
+ command:
+ - "--log.level={{log_level}}"
+ - "--api.insecure=true"
+ - "--providers.docker=true"
+ - "--providers.docker.exposedbydefault=false"
+ - "--entrypoints.websecure.address=:443"
+ - "--entrypoints.web.address=:80"
+ - "--entrypoints.web.http.redirections.entryPoint.to=websecure"
+ - "--entrypoints.web.http.redirections.entryPoint.scheme=https"
+ - "--entrypoints.web.http.redirections.entrypoint.permanent=true"
+ - "--certificatesresolvers.letsencrypt.acme.tlschallenge=true"
+ - "--certificatesresolvers.letsencrypt.acme.email={{email}}"
+ - "--certificatesresolvers.letsencrypt.acme.storage=/letsencrypt/acme.json"
diff --git a/templates/git-compose.yml.j2 b/templates/git-compose.yml.j2
new file mode 100644
index 0000000..af35c0b
--- /dev/null
+++ b/templates/git-compose.yml.j2
@@ -0,0 +1,15 @@
+services:
+ cgit:
+ build: ./docker_cgit.git/
+ restart: always
+ volumes:
+ - /srv/git:/srv/git
+ labels:
+{% with router_name="git", host_prefix="git", container_port="80" %}
+{% include "util/traefik_labels.txt.j2" %}
+{% endwith %}
+
+ - traefik.http.middlewares.remove-cgit.replacepathregex.regex=^/cgit/(.*)
+ - traefik.http.middlewares.remove-cgit.replacepathregex.replacement=/$$1
+ - traefik.http.middlewares.add-cgit.addprefix.prefix=/cgit
+ - traefik.http.routers.git.middlewares=remove-cgit,add-cgit
diff --git a/templates/huginn-compose.yml.j2 b/templates/huginn-compose.yml.j2
new file mode 100644
index 0000000..9f66b64
--- /dev/null
+++ b/templates/huginn-compose.yml.j2
@@ -0,0 +1,40 @@
+services:
+ huginn_postgres:
+ image: postgres:9.5
+ restart: always
+ environment:
+{% for key, value in huginn_env.items() %}
+ - {{ key }}={{ value }}
+{% endfor %}
+
+ volumes:
+ - ./data/huginn-db:/var/lib/postgresql/data
+
+ huginn_web:
+ image: ghcr.io/huginn/huginn-single-process
+ restart: always
+ environment:
+{% for key, value in huginn_env.items() %}
+ - {{ key }}={{ value }}
+{% endfor %}
+
+ depends_on:
+ - huginn_postgres
+ labels:
+{% with router_name="huginn", host_prefix="huginn", container_port="3000" %}
+{% include "util/traefik_labels.txt.j2" %}
+{% endwith %}
+
+ huginn_threaded:
+ image: ghcr.io/huginn/huginn-single-process
+ command: /scripts/init bin/threaded.rb
+ restart: always
+ environment:
+{% for key, value in huginn_env.items() %}
+ - {{ key }}={{ value }}
+{% endfor %}
+
+ depends_on:
+ - huginn_postgres
+ - huginn_web
+
diff --git a/templates/hugo_kitchen-compose.yml.j2 b/templates/hugo_kitchen-compose.yml.j2
new file mode 100644
index 0000000..622abf3
--- /dev/null
+++ b/templates/hugo_kitchen-compose.yml.j2
@@ -0,0 +1,13 @@
+services:
+ kitchen_nginx:
+ container_name: kitchen_nginx
+ image: nginx
+ restart: always
+ volumes:
+ - "./markskitchen_hugo.git/public:/usr/share/nginx/html"
+ labels:
+ - traefik.enable=true
+ - traefik.http.routers.kitchen.rule=Host(`{{host}}`)
+ - traefik.http.routers.kitchen.tls=true
+ - traefik.http.routers.kitchen.tls.certresolver=letsencrypt
+ - traefik.http.routers.kitchen.entrypoints=websecure
diff --git a/templates/journal-compose.yml.j2 b/templates/journal-compose.yml.j2
new file mode 100644
index 0000000..8cf20dc
--- /dev/null
+++ b/templates/journal-compose.yml.j2
@@ -0,0 +1,31 @@
+services:
+ journal_api:
+ container_name: journal_api
+ build: ./journal_api.git/
+ restart: always
+ environment:
+{% for key, value in journal_env.items() %}
+ - {{ key }}={{ value }}
+{% endfor %}
+
+ volumes:
+ - ./data/journal_static:/static
+ - ./data/journal_data:/data
+ command: ["gunicorn", "--max-requests", "1000", "--max-requests-jitter", "50", "journal.wsgi", "--bind=0.0.0.0:80", "--capture-output", "--access-logfile" ,"-" ]
+ labels:
+{% with router_name="journal", host_prefix="api.journal", container_port="80" %}
+{% include "util/traefik_labels.txt.j2" %}
+{% endwith %}
+
+ journal_static_files:
+ image: nginx
+ restart: always
+ volumes:
+ - ./data/journal_static:/usr/share/nginx/html/static
+ labels:
+ - traefik.enable=true
+ - traefik.http.routers.journal_static.rule=Host(`api.journal.{{host}}`) && Pathprefix(`/static`)
+ - traefik.http.routers.journal_static.tls=true
+ - traefik.http.routers.journal_static.tls.certresolver=letsencrypt
+ - traefik.http.routers.journal_static.entrypoints=websecure
+ - traefik.http.services.journal_static.loadbalancer.server.port=80
diff --git a/templates/kitchen-compose.yml.j2 b/templates/kitchen-compose.yml.j2
new file mode 100644
index 0000000..02b13c7
--- /dev/null
+++ b/templates/kitchen-compose.yml.j2
@@ -0,0 +1,38 @@
+services:
+ kitchen:
+ build: ./markskitchen.git/
+ restart: always
+ depends_on:
+ - kitchen_db
+ environment:
+{% for key, value in kitchen_env.items() %}
+ - {{ key }}={{ value }}
+{% endfor %}
+
+ labels:
+{% with router_name="kitchenv1", host_prefix="v1", container_port="8080" %}
+{% include "util/traefik_labels.txt.j2" %}
+{% endwith %}
+
+ kitchen_db:
+ image: mariadb
+ restart: always
+ environment:
+{% for key, value in kitchen_env.items() %}
+ - {{ key }}={{ value }}
+{% endfor %}
+
+ volumes:
+ - ./data/kitchen_db:/var/lib/mysql
+ games:
+ build: ./games.git/
+ restart: always
+ environment:
+{% for key, value in games_env.items() %}
+ - {{ key }}={{ value }}
+{% endfor %}
+
+ labels:
+{% with router_name="games", host_prefix="games", container_port="8080" %}
+{% include "util/traefik_labels.txt.j2" %}
+{% endwith %}
diff --git a/templates/miniflux-compose.yml.j2 b/templates/miniflux-compose.yml.j2
new file mode 100644
index 0000000..26fd829
--- /dev/null
+++ b/templates/miniflux-compose.yml.j2
@@ -0,0 +1,31 @@
+services:
+ miniflux:
+ image: miniflux/miniflux:latest
+ restart: always
+ depends_on:
+ miniflux_db:
+ condition: service_healthy
+ environment:
+{% for key, value in miniflux_env.items() %}
+ - {{ key }}={{ value }}
+{% endfor %}
+
+ labels:
+{% with router_name="miniflux", host_prefix="miniflux", container_port="8080" %}
+{% include "util/traefik_labels.txt.j2" %}
+{% endwith %}
+
+ miniflux_db:
+ image: postgres:15
+ restart: always
+ environment:
+{% for key, value in miniflux_env.items() %}
+ - {{ key }}={{ value }}
+{% endfor %}
+
+ volumes:
+ - ./data/miniflux-db:/var/lib/postgresql/data
+ healthcheck:
+ test: ["CMD", "pg_isready", "-U", "miniflux"]
+ interval: 60s
+ start_period: 30s
diff --git a/templates/mumble-compose.yml.j2 b/templates/mumble-compose.yml.j2
new file mode 100644
index 0000000..96668d1
--- /dev/null
+++ b/templates/mumble-compose.yml.j2
@@ -0,0 +1,39 @@
+services:
+ mumble-server:
+ image: mumblevoip/mumble-server:latest
+ container_name: mumble-server
+ restart: on-failure
+ ports:
+ - 64738:64738
+ - 64738:64738/udp
+ volumes:
+ - ./data/mumble-data:/data
+ environment:
+{% for key, value in mumble_env.items() %}
+ - {{ key }}={{ value }}
+{% endfor %}
+
+ botamusique:
+ image: azlux/botamusique
+ restart: on-failure
+ environment:
+{% for key, value in mumble_env.items() %}
+ - {{ key }}={{ value }}
+{% endfor %}
+
+ volumes:
+ - ./data/botamusique/music:/music
+ - ./data/botamusique/config:/config
+ cpus: 1
+ labels:
+{% with router_name="bard", host_prefix="bard", container_port="8181" %}
+{% include "util/traefik_labels.txt.j2" %}
+{% endwith %}
+
+ soundboard:
+ build: ./soundboard.git/
+ restart: on-failure
+ labels:
+{% with router_name="soundboard", host_prefix="soundboard", container_port="8080" %}
+{% include "util/traefik_labels.txt.j2" %}
+{% endwith %}
diff --git a/templates/podcast-compose.yml.j2 b/templates/podcast-compose.yml.j2
new file mode 100644
index 0000000..825c859
--- /dev/null
+++ b/templates/podcast-compose.yml.j2
@@ -0,0 +1,11 @@
+services:
+ podcast_nginx:
+ container_name: podcast_nginx
+ image: nginx
+ restart: always
+ volumes:
+ - "./data/podcast:/usr/share/nginx/html"
+ labels:
+{% with router_name="podcast", host_prefix="podcast", container_port="80" %}
+{% include "util/traefik_labels.txt.j2" %}
+{% endwith %}
diff --git a/templates/rss_bridge-compose.yml.j2 b/templates/rss_bridge-compose.yml.j2
new file mode 100644
index 0000000..3caaade
--- /dev/null
+++ b/templates/rss_bridge-compose.yml.j2
@@ -0,0 +1,10 @@
+services:
+ rss-bridge:
+ image: my-rss-bridge
+ restart: always
+ volumes:
+ - ./data/rss_bridge_config:/config
+ labels:
+{% with router_name="rssbridge", host_prefix="rb", container_port="80" %}
+{% include "util/traefik_labels.txt.j2" %}
+{% endwith %}
diff --git a/templates/soundboard_config.js.j2 b/templates/soundboard_config.js.j2
new file mode 100644
index 0000000..cc8c42f
--- /dev/null
+++ b/templates/soundboard_config.js.j2
@@ -0,0 +1,7 @@
+module.exports = {
+ "user": "{{soundboard.user}}",
+ "pass": "{{soundboard.pass}}",
+ "baseURL": "{{soundboard.url}}",
+ "names": {{soundboard.names}},
+ "port": 8080,
+} \ No newline at end of file
diff --git a/templates/tracker-compose.yml.j2 b/templates/tracker-compose.yml.j2
new file mode 100644
index 0000000..0f866d5
--- /dev/null
+++ b/templates/tracker-compose.yml.j2
@@ -0,0 +1,64 @@
+services:
+ tracker_db:
+ image: postgres
+ restart: always
+ environment:
+{% for key, value in tracker_env.items() %}
+ - {{ key }}={{ value }}
+{% endfor %}
+
+ volumes:
+ - ./data/tracker_db:/var/lib/postgresql/data
+ grafana:
+ image: grafana/grafana
+ restart: always
+ depends_on:
+ - tracker_db
+ environment:
+{% for key, value in tracker_env.items() %}
+ - {{ key }}={{ value }}
+{% endfor %}
+
+ volumes:
+ - ./data/grafana_data:/var/lib/grafana
+ labels:
+{% with router_name="grafana", host_prefix="grafana", container_port="3000" %}
+{% include "util/traefik_labels.txt.j2" %}
+{% endwith %}
+
+ tracker:
+ container_name: tracker_nginx
+ restart: always
+ image: nginx
+ volumes:
+ - "./tracker-spa.git/dist/spa/:/usr/share/nginx/html"
+ labels:
+{% with router_name="tracker", host_prefix="tracker", container_port="80" %}
+{% include "util/traefik_labels.txt.j2" %}
+{% endwith %}
+
+ - traefik.http.routers.tracker.middlewares=myauth
+ - "traefik.http.middlewares.myauth.basicauth.users={{auth_string}}"
+ postgrest:
+ image: postgrest/postgrest
+ restart: always
+ environment:
+{% for key, value in tracker_env.items() %}
+ - {{ key }}={{ value }}
+{% endfor %}
+
+ depends_on:
+ - tracker_db
+ labels:
+{% with router_name="postgrest", host_prefix="postgrest", container_port="3000" %}
+{% include "util/traefik_labels.txt.j2" %}
+{% endwith %}
+
+ - traefik.http.routers.postgrest.middlewares=corsheader,postgrest-auth
+ - "traefik.http.middlewares.postgrest-auth.basicauth.users={{auth_string}}"
+ - "traefik.http.middlewares.corsheader.headers.accesscontrolallowmethods=*"
+ - "traefik.http.middlewares.corsheader.headers.accesscontrolallowheaders=*"
+ - "traefik.http.middlewares.corsheader.headers.accesscontrolalloworiginlist=https://tracker.{{host}}"
+ - "traefik.http.middlewares.corsheader.headers.accesscontrolmaxage=100"
+ - "traefik.http.middlewares.corsheader.headers.addvaryheader=true"
+
diff --git a/templates/util/traefik_labels.txt.j2 b/templates/util/traefik_labels.txt.j2
new file mode 100644
index 0000000..bb6beb1
--- /dev/null
+++ b/templates/util/traefik_labels.txt.j2
@@ -0,0 +1,6 @@
+ - traefik.enable=true
+ - traefik.http.routers.{{router_name}}.rule=Host(`{{host_prefix}}.{{host}}`)
+ - traefik.http.routers.{{router_name}}.tls=true
+ - traefik.http.routers.{{router_name}}.tls.certresolver=letsencrypt
+ - traefik.http.routers.{{router_name}}.entrypoints=websecure
+ - traefik.http.services.{{router_name}}.loadbalancer.server.port={{container_port}}
generated by cgit v1.2.3 (git 2.39.1) at 2024-09-16 20:06:19 +0000