unstable.yml

---
- name: deploy it infrastructure servers
  hosts: unstable
  remote_user: root

  pre_tasks:

    - name: Ensure a locale exists
      community.general.locale_gen:
        name: '{{ item }}'
      with_items:
        - en_US.UTF-8
        - de_DE.UTF-8

    - name: Set timezone to Europe/Berlin
      community.general.timezone:
        name: Europe/Berlin

    - name: Set hostname
      ansible.builtin.hostname:
        name: "{{ ansible_host }}"

    - name: import ssh keys for root
      # https://stackoverflow.com/a/48882051
      ansible.posix.authorized_key:
        user: root
        key: https://github.com/{{ item }}.keys
        comment: '{{ item }}'
      ignore_errors: yes
      with_items:
        - igami
        - leon2225
        - mattn81
        - bongald
        - stikkx
        - ReneHezser

    - name: Ensure /opt/containers/env_files directory exists
      ansible.builtin.file:
        path: /opt/containers/env_files
        state: directory
        mode: '0755'

    - name: copy email.env
      ansible.builtin.copy:
        src: defaults/opt/containers/env_files/email.env
        dest: /opt/containers/env_files/email.env

  roles:

    - role: weareinteractive.apt
      vars: 
        apt_upgrade: dist
        apt_unattended_upgrades_automatic_reboot: yes
        apt_unattended_upgrades_automatic_reboot_time: 02:00

    - role: nickjj.docker

    - role: roles/watchtower

    - role: roles/traefik-crowdsec-stack
      vars:
        SERVICES_TRAEFIK_IMAGE_VERSION: latest
        SERVICES_TRAEFIK_LABELS_TRAEFIK_HOST: "`traefik.{{ ansible_host }}`"
        SERVICES_TRAEFIK_CERTIFICATESRESOLVERS_EMAIL: cyber@makerspace-gt.de

    # - role: roles/zammad-stack

        # # Restore Zammad Backup
        # # https://github.com/DoTheEvo/selfhosted-apps-docker/tree/master/zammad#backup-and-restore
        # # https://restic.readthedocs.io/en/stable/050_restore.html#
        # # https://docs.zammad.org/en/latest/install/docker-compose.html#how-to-run-commands-in-the-stack

        # docker compose --project-directory /opt/containers/zammad-stack down --remove-orphans 
        # docker exec resticker restic restore 74c4f304 --target /
        # docker compose --project-directory /opt/containers/zammad-stack up -d zammad-postgresql
        # docker compose --project-directory /opt/containers/zammad-stack exec zammad-postgresql bash -c "dropdb zammad_production -U zammad"
        # docker compose --project-directory /opt/containers/zammad-stack exec zammad-postgresql bash -c "createdb zammad_production -U zammad"
        # docker compose --project-directory /opt/containers/zammad-stack exec zammad-postgresql bash -c "psql -U zammad zammad_production < /var/tmp/zammad/zammad_production.pg_dump"
        # docker compose --project-directory /opt/containers/zammad-stack up -d --force-recreate
        # docker compose --project-directory /opt/containers/zammad-stack run --rm zammad-railsserver rake zammad:searchindex:rebuild

    # - role: roles/vaultwarden
    #   vars:
    #     SERVICES_VAULTWARDEN_ENVIRONMENT_DOMAIN: "bitwarden.makerspace-gt.de"

        # # Restore Vaultwarden Backup
        # # https://restic.readthedocs.io/en/stable/050_restore.html#

        # docker compose --project-directory /opt/containers/vaultwarden down --remove-orphans 
        # docker exec resticker restic restore a394d8e5:/mnt/volumes/vaultwarden --target /mnt/volumes/vaultwarden
        # docker compose --project-directory /opt/containers/vaultwarden up -d --force-recreate

    # - role: roles/nextcloud-stack
    #   vars:
    #     NEXTCLOUD_OCC_COMMANDS:
    #     - config:system:set overwriteprotocol --value="https"
    #     - config:system:set maintenance_window_start --type=integer --value=1
    #     - db:add-missing-indices
    #     - config:system:set default_language --value="de"
    #     - config:system:set default_locale --value="de_DE"
    #     - config:system:set default_phone_region --value="DE"
    #     - config:system:set default_timezone --value="Europe/Berlin"
    #     - config:system:set upgrade.disable-web --type boolean --value true
    #     - config:system:set simpleSignUpLink.shown --type boolean --value false
    #     - config:system:set trusted_domains 1 --value={{ NEXTCLOUD_HOSTNAME }}
    #     - config:app:set dav generateBirthdayCalendar --value="no"
    #     - config:app:set registration admin_approval_required --value="yes"
    #     - config:app:set registration registered_user_group --value="makerspace-gt"
    #     - group:adduser makerspace-gt makerspace-gt
    #     - user:setting makerspace-gt settings email cyber@makerspace-gt.de
    #     NEXTCLOUD_DESIRED_GROUPFOLDERS:
    #       - name: Vorstand
    #         groups:
    #           - Vorstand: read write share delete
    #       - name: Bilder
    #         groups:
    #           - makerspace-gt: read write share delete
    #       - name: home
    #         groups:
    #         - makerspace-gt: read write share delete
    #       - name: hub
    #         groups:
    #         - makerspace-gt: read write share delete
    #       - name: Projekte
    #         groups:
    #         - makerspace-gt: read write share delete
    #       - name: Social Media
    #         groups:
    #         - Social Media: read write share delete
    #     NEXTCLOUD_HOSTNAME: "cloud.makerspace-gt.de"
    #     NEXTCLOUD_DESIRED_GROUPS:
    #       - Vorstand
    #       - makerspace-gt
    #       - Social Media
    #     NEXTCLOUD_DESIRED_ENABLED_APPS:
    #       - calendar
    #       - calendar_resource_management
    #       - cloud_federation_api
    #       - comments
    #       - contactsinteraction
    #       - dav
    #       - federatedfilesharing
    #       - federation
    #       - files
    #       - files_downloadlimit
    #       - files_pdfviewer
    #       - files_reminders
    #       - files_sharing
    #       - files_trashbin
    #       - files_versions
    #       - groupfolders
    #       - logreader
    #       - lookup_server_connector
    #       - notifications
    #       - oauth2
    #       - photos
    #       - previewgenerator
    #       - privacy
    #       - provisioning_api
    #       - registration
    #       - serverinfo
    #       - settings
    #       - sharebymail
    #       - systemtags
    #       - text
    #       - theming
    #       - twofactor_backupcodes
    #       - updatenotification
    #       - viewer
    #       - workflowengine

    # - role: roles/wikijs-stack
    #   vars:
    #     SERVICES_WIKIJS_LABELS_TRAEFIK_HOST: "`wiki.makerspace-gt.de`"

        # # Transfer wiki.js
        # # https://docs.requarks.io/install/transfer
        # # https://www.postgresql.org/docs/current/backup-dump.html
        # root@discovery:~# cd /var/docker/wiki.js/
        # root@discovery:/var/docker/wiki.js# docker-compose stop wiki 
        # root@discovery:~# docker exec wikijs_db_1 pg_dump wiki -U wikijs > wikibackup.db

        # root@wasdus:~# cd /opt/containers/wikijs-stack/
        # root@wasdus:/opt/containers/wikijs-stack# docker compose stop wikijs
        # root@wasdus:/opt/containers/wikijs-stack# docker compose exec wikijs-postgres dropdb -U wikijs wikijs
        # root@wasdus:/opt/containers/wikijs-stack# docker compose exec wikijs-postgres createdb -U wikijs wikijs
        # root@wasdus:/opt/containers/wikijs-stack# cat wikibackup.dump | docker exec -i wikijs-stack-wikijs-postgres-1 psql -U wikijs wikijs
        # root@wasdus:/opt/containers/wikijs-stack# docker compose up -d --force-recreate 

    - role: roles/resticker-stack