Cut the comment bloat from the Podman playbooks
Comment blocks now stay within three lines and explain only the non-obvious. Long histories, include examples, and commented-out code are gone. No task, key, or value changed; the only data change is comment text inside the generated unit files.
This commit is contained in:
tanshu committed
1 parent
2aab1aec1e
commit
476a6d7cd0
85 files changed
+372
-2433
No files matched your search
@@ -1,41 +1,26 @@
|
||||
---
|
||||
# ---------------------------------------------------------------------------
|
||||
# Rootless Podman / Quadlet
|
||||
# ---------------------------------------------------------------------------
|
||||
# Duplicated from caddy/vars/default.yml (which also sets `host_directory` for
|
||||
# Caddy, so it cannot be included wholesale). Keep the three in sync. Its fourth,
|
||||
# podman_unprivileged_port_start, is not needed here: Nextcloud publishes nothing
|
||||
# host-side.
|
||||
# Duplicated from caddy/vars/default.yml, so keep them in sync.
|
||||
podman_user: "{{ ansible_facts['user_id'] }}"
|
||||
podman_data_dir: "{{ ansible_facts['user_dir'] }}/podman-data"
|
||||
quadlet_dir: "{{ ansible_facts['user_dir'] }}/.config/containers/systemd"
|
||||
|
||||
# ---------------------------------------------------------------------------
|
||||
# Nextcloud
|
||||
# ---------------------------------------------------------------------------
|
||||
# The site's hostname: what Caddy serves, and the trusted domain for an unattended
|
||||
# install.
|
||||
# What Caddy serves, and the trusted domain for an unattended install.
|
||||
host: cloud.hopsngrains.com
|
||||
|
||||
container_name: nextcloud
|
||||
unit_name: "{{ container_name }}.service"
|
||||
|
||||
# Fully qualified: rootless Podman resolves short names against
|
||||
# unqualified-search-registries, and a unit has no TTY to answer the prompt.
|
||||
# Fully qualified because rootless Podman would otherwise prompt for a registry, and a unit has no TTY.
|
||||
image: docker.io/library/nextcloud:latest
|
||||
|
||||
# caddy/roles/register pins the Podman network name to <network_name>_net, so the
|
||||
# file is nextcloud.network and the network is nextcloud_net.
|
||||
# caddy/roles/register pins the Podman network to <network_name>_net, so the Quadlet file is nextcloud.network.
|
||||
network_name: "{{ container_name }}"
|
||||
|
||||
# The image's VOLUME and Apache document root, and — unlike the other services
|
||||
# here — the code as well as the state: config.php, data/, custom_apps/ and every
|
||||
# PHP file live under it. See readme.md, "What is state, and what is not".
|
||||
# The image's VOLUME and Apache docroot, and unlike other services it holds the code as well as the state.
|
||||
host_directory: "{{ podman_data_dir }}/{{ container_name }}"
|
||||
webroot: /var/www/html
|
||||
|
||||
# www-data. The entrypoint rsyncs the code in as this uid and Apache runs its
|
||||
# workers as it, so this is the one uid to map onto the connection user.
|
||||
# www-data. The entrypoint rsyncs the code in as this uid, and Apache workers run as it.
|
||||
app_uid: 33
|
||||
app_gid: 33
|
||||
|
||||
@@ -44,48 +29,28 @@ container_port: 80
|
||||
|
||||
env_file: "{{ host_directory }}/nextcloud.env"
|
||||
|
||||
# ---------------------------------------------------------------------------
|
||||
# Shared services (each its own playbook)
|
||||
# ---------------------------------------------------------------------------
|
||||
# Postgres, and the alias its attach role adds.
|
||||
postgres_container: postgres
|
||||
postgres_unit: "{{ postgres_container }}.service"
|
||||
db_host: db
|
||||
|
||||
# The database this play creates if it is missing, and the credentials in
|
||||
# postgres/vars/default.yml that the cluster was initialised with.
|
||||
# The database this play creates, and the credentials the cluster was initialised with.
|
||||
pg_user: postgres
|
||||
pg_password: '123456'
|
||||
pg_database: nextcloud
|
||||
|
||||
# Valkey, which the attach role puts this app's network on with the alias
|
||||
# `redis`. Whether Nextcloud uses it is config.php's decision: the cache and
|
||||
# `memcache.locking` live there, not in this playbook. See readme.md.
|
||||
# Valkey's attach role adds the `redis` alias, which config.php uses for cache and locking.
|
||||
valkey_container: valkey
|
||||
valkey_unit: "{{ valkey_container }}.service"
|
||||
|
||||
caddy_name: caddy
|
||||
caddyfile_path: "{{ podman_data_dir }}/{{ caddy_name }}/conf/Caddyfile"
|
||||
|
||||
# ---------------------------------------------------------------------------
|
||||
# First-run install (optional)
|
||||
# ---------------------------------------------------------------------------
|
||||
# Empty by default: a fresh webroot is initialised by the image and the setup
|
||||
# wizard takes over. Set both to have the image install unattended instead, with
|
||||
# trusted_domains set from `host`. Inert once config.php exists.
|
||||
# Empty keeps the setup wizard. Set both to install unattended, with trusted_domains from `host`.
|
||||
nextcloud_admin_user: ""
|
||||
nextcloud_admin_password: ""
|
||||
|
||||
# ---------------------------------------------------------------------------
|
||||
# Background jobs
|
||||
# ---------------------------------------------------------------------------
|
||||
# Nextcloud wants cron.php every five minutes. Not a variable worth exposing
|
||||
# beyond the interval, since the schedule is the part someone may change.
|
||||
cron_minute: "*/5"
|
||||
|
||||
# ---------------------------------------------------------------------------
|
||||
# Caddy site block
|
||||
# ---------------------------------------------------------------------------
|
||||
snippet_block: |
|
||||
{{ host }} {
|
||||
reverse_proxy {{ container_name }}:{{ container_port }}
|
||||
|
||||
Reference in new issue
Block a user