provisioning/site.yml

- hosts: apps.torsion.org
  vars_files:
    - group_vars/vault.yml
  vars:
    admin_email: webmaster@torsion.org
  roles:
    - role: common
    - role: remote_server
    - role: backup
      vars:
        backup_repositories:
          - 1982@usw-s001.rsync.net:apps.borg
          - cbht6li7@cbht6li7.repo.borgbase.com:repo
        backup_source_volumes:
          - /etc/bind:/mnt/source/bind/etc:ro
          - /etc/nginx/certs:/mnt/source/nginx/certs:ro
          - /var/cache/bind:/mnt/source/bind/cache:ro
          #- /var/lib/drone:/mnt/source/drone:ro
          - /var/lib/gitea:/mnt/source/gitea:ro
          - /var/lib/gotify:/mnt/source/gotify:ro
          - /var/lib/mediagoblin/user_dev:/mnt/source/mediagoblin/user_dev:ro
          - /var/lib/portainer:/mnt/source/portainer:ro
          - /var/lib/mailu:/mnt/source/mailu:ro
          - /var/lib/radicale:/mnt/source/radicale:ro
        backup_ssh_key_file: apps-root
        backup_known_hosts_key_files:
          - usw-s001.rsync.net
          - cbht6li7.repo.borgbase.com
        backup_encryption_passphrase: "{{ backup_encryption_passphrase_apps }}"
        backup_postgresql_databases:
          - name: gitea
            hostname: gitea-database
            username: gitea
            password: "{{ gitea_database_password }}"
          - name: mediagoblin
            hostname: mediagoblin-database
            username: mediagoblin
            password: "{{ mediagoblin_database_password }}"
    - role: mail_server
      mail_server_hostname: mail2.torsion.org
      mail_server_secret_key: "{{ mail_server_secret_key_apps }}"
      mail_server_public_hostnames:
        - torsion.org
      mail_server_mailu_version: 1.7
    - role: domain_name_server
    - role: calendar_server
      calendar_server_hostname: calendar.torsion.org
    - role: mediagoblin
      mediagoblin_from_email: media@torsion.org
      mediagoblin_hostname: media.torsion.org
      mediagoblin_email_host: mail2.torsion.org
      mediagoblin_email_port: 587
    - role: gitea
      gitea_hostname: projects.torsion.org
      gitea_version: 1.12.5
    - role: container_dashboard
      container_dashboard_hostname: apps.torsion.org
      portainer_version: 1.24.1
    - role: torsion.org
    - role: monitoring
      monitoring_from_email: monitoring@torsion.org
      monitoring_to_email: root@torsion.org
      monitoring_hostname: monitoring.torsion.org
      monitoring_email_host: mail2.torsion.org
      monitoring_email_port: 587
    - role: notification_server
      notification_server_hostname: notification.torsion.org

- hosts: automation.dandy
  vars_files:
    - group_vars/vault.yml
  roles:
    - role: common
    - role: remote_server
    - role: wireless
    - role: time_synchronization
    - role: home_automation
      mosquitto_version: 1.6.9
      home_assistant_version: 0.104.0
      home_automation_hostname: automation.dandy

- hosts: audio.dandy
  vars_files:
    - group_vars/vault.yml
  vars:
    admin_email: webmaster@torsion.org
  roles:
    - role: common
    - role: remote_server
    - role: time_synchronization
    - role: audio_server
      airsonic_version: v10.6.2-ls61
      audio_server_hostname: audio.torsion.org
      time_zone: America/Los_Angeles
    - role: build_server
      build_server_hostname: build.torsion.org
      gitea_hostname: projects.torsion.org
      drone_version: 1.6.4