mastodon, don't recreate for now

tasks/mastodon.yml

@@ -0,0 +1,97 @@
+---
+- name: Create folder structure
+  file:
+    path: "{{ item }}"
+    state: directory
+  with_items:
+    - "{{ data_dir }}/mastodon"
+    - "{{ data_dir }}/mastodon/db"
+    - "{{ data_dir }}/mastodon/redis"
+    - "{{ data_dir }}/mastodon/public"
+
+- name: Create Mastodon Network
+  docker_network:
+    name: mastodon
+
+- name: Pull latest Postgres Docker Image
+  docker_image:
+    name: postgres
+    tag: 14-alpine
+    source: pull
+- name: Pull latest Redis Docker Image
+  docker_image:
+    name: redis
+    tag: 7-alpine
+    source: pull
+- name: Pull latest Mastodon Docker Image
+  docker_image:
+    name: lscr.io/linuxserver/mastodon
+    tag: latest
+    source: pull
+
+- name: Create Mastodon DB Container
+  docker_container:
+    name: mastodon_db
+    image: postgres:14-alpine
+    recreate: true
+    restart_policy: unless-stopped
+    networks:
+      - name: mastodon
+    volumes:
+      - "{{ data_dir }}/mastodon/db:/var/lib/postgresql/data"
+    healthcheck:
+      test: CMD pg_isready -U postgres
+    env:
+      POSTGRES_HOST_AUTH_METHOD: "trust"
+      POSTGRES_USER: mastodon
+      POSTGRES_PASSWORD: "{{ MASTODON_DB_PASS }}"
+      POSTGRES_DB: mastodon
+
+- name: Create Mastodon Redis Container
+  docker_container:
+    name: mastodon_redis
+    image: redis:7-alpine
+    recreate: true
+    restart_policy: unless-stopped
+    healthcheck:
+      test: CMD redis-cli ping
+    networks:
+      - name: mastodon
+    volumes:
+      - "{{ data_dir }}/mastodon/redis:/data"
+
+- name: Create Mastodon Container
+  docker_container:
+    name: mastodon
+    image: lscr.io/linuxserver/mastodon:latest
+    recreate: true
+    restart_policy: unless-stopped
+    command: bundle exec puma -C config/puma.rb
+    networks:
+      - name: mastodon
+      - name: "{{ docker_network_name }}"
+    volumes:
+      - "{{ data_dir }}/mastodon/public:/config"
+    env:
+      PUID: "{{ PUID }}"
+      PGID: "{{ PGID }}"
+      TZ: "{{ TZ }}"
+      LOCAL_DOMAIN: "{{ MASTODON_LOCAL_DOMAIN }}"
+      REDIS_HOST: "mastodon_redis"
+      REDIS_PORT: "6379"
+      DB_HOST: "mastodon_db"
+      DB_USER: "mastodon"
+      DB_PASS: "{{ MASTODON_DB_PASS }}"
+      DB_PORT: "5432"
+      ES_ENABLED: "false"
+      SECRET_KEY_BASE: "{{ MASTODON_SECRET_KEY_BASE }}"
+      VAPID_PRIVATE_KEY: "{{ MASTODON_VAPID_PRIVATE_KEY }}"
+      VAPID_PUBLIC_KEY: "{{ MASTODON_VAPID_PUBLIC_KEY }}"
+      OTP_SECRET: "{{ MASTODON_OTP_SECRET }}"
+      S3_ENABLED: "false"
+    labels:
+      traefik.enable: "true"
+      traefik.http.routers.mst.rule: Host(`mst.fntz.net`)
+      traefik.http.routers.mst.entrypoints: webSecure
+      traefik.http.routers.mst.certresolver: letsencrypt
+      traefik.http.services.mst.loadbalancer.server.port: 80