provisioning/site.yml

- hosts: apps.torsion.org
  vars_files:
    - group_vars/vault.yml
  vars:
    admin_email: webmaster@torsion.org
  roles:
    - role: common
    - role: remote_server
    - role: docker
    - role: podman
    - role: docker_compose
      also_install_v1_for_root: true
#    - role: backup
#      vars:
#        backup_repositories:
#          - ssh://1982@usw-s001.rsync.net/./apps.borg
#          - ssh://cbht6li7@cbht6li7.repo.borgbase.com/./repo
#        backup_source_volumes:
#          - /etc/coredns:/mnt/source/coredns/etc:ro
#          - /etc/nginx/certs:/mnt/source/nginx/certs:ro
#          - /var/lib/gitea:/mnt/source/gitea:ro
#          - /var/lib/gotify:/mnt/source/gotify:ro
#          - /var/lib/mediagoblin/user_dev:/mnt/source/mediagoblin/user_dev:ro
#          - /var/lib/mailu:/mnt/source/mailu:ro
#          - /var/lib/radicale:/mnt/source/radicale:ro
#        backup_ssh_key_file: apps-root
#        backup_known_hosts_key_files:
#          - usw-s001.rsync.net
#          - cbht6li7.repo.borgbase.com
#        backup_encryption_passphrase: "{{ backup_encryption_passphrase_apps }}"
#        backup_postgresql_databases:
#          - name: gitea
#            hostname: gitea-database
#            username: gitea
#            password: "{{ gitea_database_password }}"
#          - name: mediagoblin
#            hostname: mediagoblin-database
#            username: mediagoblin
#            password: "{{ mediagoblin_database_password }}"
    - role: reverse_proxy
      http_port: 81
      https_port: 444
      self_signed_certificate_hostname: podman.dandy
    - role: torsion.org
    - role: domain_name_server
      domain_name_server_hostnames:
        - torsion.org
    - role: mail_server
      mail_server_hostname: mail2.torsion.org
      mail_server_secret_key: "{{ mail_server_secret_key_apps }}"
      mail_server_public_hostnames:
        - torsion.org
      mail_server_mailu_version: 2.0
    - role: notification_server
      notification_server_hostname: notification.torsion.org
    - role: calendar_server
      calendar_server_hostname: calendar.torsion.org
    - role: gitea
      gitea_hostname: projects.torsion.org
      gitea_version: 1.19.3
    - role: mediagoblin
      mediagoblin_from_email: media@torsion.org
      mediagoblin_hostname: media.torsion.org
      mediagoblin_email_host: mail2.torsion.org
      mediagoblin_email_port: 587

- hosts: automation.dandy
  vars:
    admin_email: webmaster@torsion.org
  vars_files:
    - group_vars/vault.yml
  roles:
    - role: common
    - role: remote_server
    - role: podman
    - role: docker_compose
    - role: backup
      vars:
        backup_repositories:
          - ssh://er75p27p@er75p27p.repo.borgbase.com/./repo
        backup_source_volumes:
          - /etc/home-assistant:/mnt/source/home-assistant:ro
          - /etc/zwave-js-ui:/mnt/source/zwave-js-ui:ro
        backup_ssh_key_file: automation-root
        backup_known_hosts_key_files:
          - er75p27p.repo.borgbase.com
        backup_encryption_passphrase: "{{ backup_encryption_passphrase_automation }}"
        backup_borgmatic_image: projects.torsion.org/borgmatic-collective/docker-borgmatic-arm7
        backup_host_user: podman
    - role: wireless
    - role: time_synchronization
    - role: home_automation
      mosquitto_version: 2.0.14
      midea_ac_lan_version: 0.3.16
      zwave_js_ui_version: 8.18.0
      home_assistant_version: 2023.2.5
      home_automation_hostname: automation.dandy
      zwave_js_ui_hostname: zwave.dandy
    - role: build_server_runner
      build_server_runner_architecture: arm
      build_server_hostname: build.torsion.org
      user: podman

- hosts: audio.dandy
  vars_files:
    - group_vars/vault.yml
  vars:
    admin_email: webmaster@torsion.org
  roles:
    - role: common
    - role: remote_server
    - role: podman
    - role: docker_compose
    - role: backup
      vars:
        backup_repositories:
          - ssh://f3l303e6@f3l303e6.repo.borgbase.com/./repo
        backup_source_volumes:
          - /var/lib/drone:/mnt/source/drone:ro
          - /var/lib/navidrome/data:/mnt/source/navidrome:ro
          - /var/lib/audiobookshelf/config:/mnt/source/audiobookshelf/config:ro
          - /var/lib/audiobookshelf/metadata:/mnt/source/audiobookshelf/metadata:ro
        backup_ssh_key_file: audio-root
        backup_known_hosts_key_files:
          - f3l303e6.repo.borgbase.com
        backup_encryption_passphrase: "{{ backup_encryption_passphrase_audio }}"
        backup_host_user: podman
    - role: time_synchronization
    - role: audio_server
      audio_server_hostname: audio.torsion.org
      time_zone: America/Los_Angeles
    - role: audiobook_server
      audiobook_server_hostname: audiobooks.torsion.org
      audiobookshelf_version: 2.2.22
    - role: build_server
      build_server_hostname: build.torsion.org
      gitea_hostname: projects.torsion.org
      drone_version: 2.17.0
    - role: build_server_runner
      build_server_runner_architecture: amd64
      build_server_hostname: build.torsion.org
      user: podman

- hosts: lyra-music.dandy
  vars_files:
    - group_vars/vault.yml
  roles:
    - role: common
    - role: remote_server
    - role: podman
    - role: time_synchronization
    - role: kids_music_player
      local_username: lyra
      audio_server_hostname: audio.torsion.org
    - role: podman