add personal samba share; split -web configurations to make services

easier to run on other devices

roles/docker/tasks/main.yml

@@ -26,7 +26,6 @@
       - docker-ce
       - docker-ce-cli
       - containerd.io
-      - docker-compose
       - cron
     state: present
 

roles/lander-web/tasks/main.yml

@@ -0,0 +1,9 @@
+---
+- name: Ensure Caddyfile is present
+  template:
+    src: 'lander.Caddyfile.j2'
+    dest: '/etc/caddy/lander.Caddyfile'
+    owner: root
+    group: root
+    mode: '0644'
+  notify: caddy-reload

roles/lander-web/templates/lander.Caddyfile.j2

@@ -0,0 +1,3 @@
+s.roosens.me {
+    reverse_proxy {{ groups['lander'][0] }}:18080
+}

roles/lander/files/lander.Caddyfile

@@ -1,3 +0,0 @@
-s.roosens.me {
-    reverse_proxy localhost:18080
-}

roles/lander/tasks/main.yml

@@ -67,12 +67,3 @@
     name: 'lander'
     state: started
     enabled: true
-
-- name: Ensure Caddyfile is present
-  copy:
-    src: 'lander.Caddyfile'
-    dest: '/etc/caddy/lander.Caddyfile'
-    owner: root
-    group: root
-    mode: '0644'
-  notify: caddy-reload

roles/miniflux-web/meta/main.yml

@@ -0,0 +1,3 @@
+---
+dependencies:
+  - role: caddy

roles/miniflux-web/tasks/main.yml

@@ -0,0 +1,9 @@
+---
+- name: Ensure Caddyfile is present
+  template:
+    src: 'miniflux.Caddyfile.j2'
+    dest: '/etc/caddy/miniflux.Caddyfile'
+    owner: root
+    group: root
+    mode: '0644'
+  notify: caddy-reload

roles/miniflux-web/templates/miniflux.Caddyfile.j2

@@ -0,0 +1,3 @@
+nws.roosens.me {
+    reverse_proxy {{ groups['miniflux'][0] }}:8080
+}

roles/rclone/templates/rclone.conf.j2

@@ -15,6 +15,11 @@ endpoint = https://s3.gra.io.cloud.ovh.net/
 [photos-crypt]
 type = crypt
 remote = ovh-s3:pi-s3/photos
-password = {{ rclone_photos_obf_pass }}
-password2 = {{ rclone_photos_obf_pass2 }}
+password = {{ rclone_obf_pass }}
+password2 = {{ rclone_obf_pass2 }}
 
+[jef-crypt]
+type = crypt
+remote = ovh-s3:pi-s3/jef
+password = {{ rclone_obf_pass }}
+password2 = {{ rclone_obf_pass2 }}

roles/samba/files/smb.conf

@@ -246,8 +246,14 @@
   writeable = yes
   guest ok = no
 
-[jellyfin-libraries]
-  path = /mnt/data1/jellyfin/libraries
+[media]
+  path = /mnt/data1/media
   browseable = no
   writeable = yes
   guest ok = no
+
+[jef]
+    path = /mnt/data1/jef
+    browseable = no
+    writeable = yes
+    guest ok = no

roles/samba/tasks/main.yml

@@ -20,6 +20,14 @@
     shell: /sbin/nologin
   notify: smbpasswd-lambroek
 
+- name: Ensure Jef share directory is present
+  ansible.builtin.file:
+    path: '/mnt/data1/jef'
+    state: 'directory'
+    mode: '0775'
+    owner: 'debian'
+    group: 'data'
+
 - name: Copy over smb config file
   copy:
     src: smb.conf