organize

2026-05-20 20:31:24 -04:00
parent 894be8a440
commit c08dc6b088
40 changed files with 32 additions and 223 deletions
@@ -0,0 +1,27 @@
+---
+- name: Deploy PocketID
+  include_role:
+    name: docker
+  vars:
+    name: pocketid
+    directories:
+      - "{{ data_dir }}/pocketid"
+    image:
+      name: ghcr.io/pocket-id/pocket-id
+      tag: v2
+    networks:
+      - name: homelab
+    volumes:
+      - "{{ data_dir }}/pocketid:/app/data"
+    env:
+      ENCRYPTION_KEY: "{{ POCKETID_ENCRYPTION_KEY }}"
+      APP_URL: "{{ POCKETID_APP_URL }}"
+      TRUST_PROXY: "{{ POCKETID_TRUST_PROXY }}"
+      PUID: "{{ PUID }}"
+      PGID: "{{ PGID }}"
+    labels:
+      traefik.enable: "true"
+      traefik.http.routers.oidc.rule: Host(`oidc.fntz.net`)
+      traefik.http.routers.oidc.entrypoints: webSecure
+      traefik.http.routers.oidc.tls.certresolver: letsencrypt
+      traefik.http.services.oidc.loadbalancer.server.port: "1411"
@@ -0,0 +1,33 @@
+---
+- name: Deploy Tinyauth
+  include_role:
+    name: docker
+  vars:
+    name: tinyauth
+    image:
+      name: ghcr.io/steveiliop56/tinyauth
+      tag: v5
+    networks:
+      - name: "{{ docker_network_name }}"
+    volumes:
+      - "/var/run/docker.sock:/var/run/docker.sock"
+    env:
+      TINYAUTH_AUTH_USERS: "{{ TINYAUTH_USERS }}"
+      TINYAUTH_APPURL: "{{ TINYAUTH_APP_URL }}"
+      TINYAUTH_OAUTH_PROVIDERS_POCKETID_CLIENTID: "{{ TINYAUTH_GENERIC_CLIENT_ID }}"
+      TINYAUTH_OAUTH_PROVIDERS_POCKETID_CLIENTSECRET: "{{ TINYAUTH_GENERIC_CLIENT_SECRET }}"
+      TINYAUTH_OAUTH_PROVIDERS_POCKETID_AUTHURL: "{{ TINYAUTH_GENERIC_AUTH_URL }}"
+      TINYAUTH_OAUTH_PROVIDERS_POCKETID_TOKENURL: "{{ TINYAUTH_GENERIC_TOKEN_URL }}"
+      TINYAUTH_OAUTH_PROVIDERS_POCKETID_USERINFOURL: "{{ TINYAUTH_GENERIC_USER_URL }}"
+      TINYAUTH_OAUTH_PROVIDERS_POCKETID_SCOPES: "{{ TINYAUTH_GENERIC_SCOPES }}"
+      TINYAUTH_OAUTH_PROVIDERS_POCKETID_NAME: "{{ TINYAUTH_GENERIC_NAME }}"
+      TINYAUTH_OAUTH_PROVIDERS_POCKETID_REDIRECTURL: "{{ TINYAUTH_REDIRECT_URL }}"
+      TINYAUTH_OAUTH_WHITELIST: "{{ TINYAUTH_OAUTH_WHITELIST }}"
+      TINYAUTH_UI_TITLE: "{{ TINYAUTH_APP_TITLE }}"
+      TINYAUTH_UI_BACKGROUNDIMAGE: "{{ TINYAUTH_BACKGROUND_IMAGE }}"
+    labels:
+      traefik.enable: "true"
+      traefik.http.routers.tinyauth.rule: Host(`{{ TINYAUTH_HOSTNAME }}`)
+      traefik.http.routers.tinyauth.entrypoints: webSecure
+      traefik.http.routers.tinyauth.tls.certresolver: letsencrypt
+      traefik.http.middlewares.tinyauth.forwardauth.address: http://tinyauth:3000/api/auth/traefik