Initial Commit

2024-09-09 22:37:51 +10:00 · 2024-09-09 22:37:51 +10:00 · ca1eea8f56
commit ca1eea8f56
49 changed files with 2271 additions and 0 deletions
--- a/.gitea/ISSUE_TEMPLATE/adding.yml
+++ b/.gitea/ISSUE_TEMPLATE/adding.yml
@ -0,0 +1,74 @@
+name: 'Add Application'
+description: 'Track the process of adding a new application'
+title: 'Add Application: [Application Name]'
+labels: 
+  - addition
+assignees: ''
+
+body:
+  - type: markdown
+    attributes:
+      value: |
+        ## Application Details                        
+
+  - type: input
+    id: application-name
+    attributes:
+      label: Application Name
+      description: Name of the application to be added
+      placeholder: Name of the application
+
+  - type: textarea
+    id: application-description
+    attributes:
+      label: Application Description
+      description: Provide a brief description of the application and its purpose
+      placeholder: Description of the application
+
+  - type: checkboxes
+    id: application-reason
+    attributes:
+      label: Reason for Addition
+      description: Please select one or more reasons for adding the application
+      options:
+        - label: New functionality
+        - label: Performance improvement
+        - label: Security enhancement
+        - label: Replacing another application
+          description: Provide the name of the application being replaced, if applicable
+        - label: Other (please specify)
+          description: Provide additional details
+
+  - type: markdown
+    attributes:
+      value: |
+        ## Steps to Add                        
+
+  - type: checkboxes
+    id: steps-to-add
+    attributes:
+      label: Steps to Add
+      description: Please check off each step as it is completed
+      options:
+        - label: Add Configuration Files
+          description: Create and add configuration files for the new application
+        - label: Update Wiki
+          description: Create or update the Wiki page for the new application and update any relevant architecture diagrams or flowcharts
+        - label: Update README(s)
+          description: Add the new application to the main table and any other relevant sections
+        - label: Add to CD Platform Logic
+          description: Add necessary logic to the CD platform for the new application
+        - label: Testing and Validation
+          description: Ensure the application is tested and validated in the environment
+
+  - type: markdown
+    attributes:
+      value: |
+        ## Commit IDs for Completed Steps                
+
+  - type: textarea
+    id: commit-ids
+    attributes:
+      label: Commit IDs
+      description: Enter the commit IDs for the completed steps above
+      placeholder: Enter commit IDs separated by commas
--- a/.gitea/ISSUE_TEMPLATE/feature-request.yml
+++ b/.gitea/ISSUE_TEMPLATE/feature-request.yml
@ -0,0 +1,50 @@
+name: 'Feature Request'
+description: 'Suggest a new feature for the project'
+title: 'Feature Request: [Summary]'
+labels: 
+  - enhancement
+assignees: ''
+
+body:
+  - type: markdown
+    attributes:
+      value: |
+        ## Feature Request
+
+        **Please fill out this template with the requested information.**                
+
+  - type: input
+    id: summary
+    attributes:
+      label: Summary
+      description: A concise description of the feature you'd like to see added.
+      placeholder: Brief summary of the feature request
+
+  - type: textarea
+    id: motivation
+    attributes:
+      label: Motivation
+      description: Explain why this feature would be beneficial to the project. What problem does it solve or what value does it bring?
+      placeholder: Describe the motivation behind the feature request
+
+  - type: textarea
+    id: detailed-description
+    attributes:
+      label: Detailed Description
+      description: |
+        Provide a detailed explanation of the proposed feature. Include:
+        - How would this feature be used?
+        - What are the expected benefits of this feature?
+        - Are there any potential drawbacks or limitations to consider?                
+      placeholder: Provide a detailed description of the feature
+
+  - type: textarea
+    id: additional-context
+    attributes:
+      label: Additional Context
+      description: |
+        Include any relevant information such as:
+        - Links to external resources (e.g., documentation, articles)
+        - Screenshots or mockups to illustrate the feature
+        - Use cases and examples of how the feature would be used                
+      placeholder: Add any other context or screenshots about the feature request here
--- a/.gitea/workflows/deploy-containers.yml
+++ b/.gitea/workflows/deploy-containers.yml
@ -0,0 +1,39 @@
+name: Deploy
+
+on:
+  push:
+    branches:
+      - master
+
+jobs:
+  deploy:
+    name: Prepare Build
+    runs-on: alpine-latest
+    container: alpine:latest
+    steps:
+      - name: Install dependencies
+        run: |
+          apk update
+          apk add --no-cache nodejs npm git bash openssh python3 py3-pip py3-passlib
+          python3 -m pip install --user ansible  --break-system-packages
+          export PATH="/root/.local/bin:$PATH"
+         
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      
+      - name: Deploy containers
+        run: |
+          mkdir -p ~/.ssh
+          echo "${{ secrets.SSH_KNOWN_HOSTS }}" >> ~/.ssh/known_hosts
+          chmod 644 ~/.ssh/known_hosts
+          eval $(ssh-agent -s)
+          ssh-add <(echo "${{ secrets.SSH_PRIVATE_KEY }}")
+          echo "HOST *" > ~/.ssh/config
+          echo "StrictHostKeyChecking no" >> ~/.ssh/config
+          echo "${{ secrets.ANSIBLE_VAULT_PASSWORD }}" > ~/.vault_password.txt
+          echo "nameserver 10.10.10.1" > /etc/resolv.conf
+          ./.gitea/workflows/deploy.sh "${{ github.event.before }}" "${{ github.sha }}"
+
+          
--- a/.gitea/workflows/deploy.sh
+++ b/.gitea/workflows/deploy.sh
@ -0,0 +1,14 @@
+#!/bin/bash
+
+changed_tasks=($(git diff --name-only $1 $2 | grep '\.yml$'))
+if [ ! -z "$changed_tasks" ]; then
+    for task in "${changed_tasks[@]}"; do
+        tag=$(echo "$task" | awk -F/ '{print $2}')
+        if [[ "$tag" != "deploy-homelab.yml" && "$tag" != "main.yml" && "$tag" != "all.yml" && "$tag" != "all.example.yml" && "$tag" != "ISSUE_TEMPLATE" && "$tag" != "workflows"   ]] ; then
+           tag=${tag%.*}_install
+           /root/.local/bin/ansible-playbook main.yml --tags "$tag" --vault-password-file ~/.vault_password.txt          
+        fi
+    done
+else
+    echo "No changes detected in task files. Skipping Ansible playbook execution."
+fi
--- a/README.md
+++ b/README.md
@ -0,0 +1,175 @@
+![Header Image](https://miro.medium.com/v2/resize:fit:4000/1*16DgdobhWUUXKzF4fwjOdw.png)
+
+<div align = "center">
+
+# Homelab
+
+Homelab deployed as Infrastructure as Code (IaC) using ansible and terraform. Using Gitea Actions and Renovate bot for CI/CD to keep containers updated.
+</div>
+
+<!-- [![deploy-containers](https://gitea.comprofix.com/mmckinnon/homelab/actions/workflows/deploy-containers.yml/badge.svg)](https://gitea.comprofix.com/mmckinnon/homelab/actions) -->
+
+<div align="center">
+
+
+
+| Provider | OS | Tools 
+|---|---|---|
+| [![BinaryLane](https://img.shields.io/badge/BinaryLane-8A2BE2)](https://binarylane.com.au) | [![Debian](https://img.shields.io/badge/Debian-%23c9d1d9?&logo=Debian&logoColor=red)](https://www.debian.org/releases/stable/) | [![Gitea](https://img.shields.io/badge/gitea-%23c9d1d9?logo=gitea&logoColor=green)](https://about.gitea.com/) [![Docker](https://img.shields.io/badge/-Docker-%23c9d1d9?logo=docker)](https://www.docker.com/) 
+
+</div>
+
+This VPS contains containers and services that need to be always online as part of the HomeLab setup.
+
+<!-- <div align="center">
+
+## Apps in Repo:
+
+<table>
+    <tr>
+        <th>Logo</th>
+        <th>Name</th>
+        <th>Description</th>
+    </tr>
+    <tr>
+        <td><img vertical-align=baseline width="32" src="https://www.vectorlogo.zone/logos/letsencrypt/letsencrypt-icon.svg"></td>
+        <td><a href="https://certbot.eff.org/">Certbot</a></td>
+        <td>Used to generate Let's Encrypt Certificates</td>
+    </tr>
+    <tr>
+        <td><img vertical-align=baseline width="32" src="https://code.visualstudio.com/assets/images/code-stable.png"></td>
+        <td><a href="https://github.com/coder/code-server">codeserver</a></td>
+        <td>Run VS Code on any machine anywhere and access it in the browser</td>
+    </tr>
+    <tr>
+        <td><img vertical-align=baseline width="32" src="https://raw.githubusercontent.com/amir20/dozzle/master/assets/favicon.svg"></td>
+        <td><a href="https://dozzle.dev">dozzle</a></td>
+        <td>Real-time logging and monitoring for Docker in the browser</td>
+    </tr>
+    <tr>
+        <td><img vertical-align=baseline width="32" src="https://raw.githubusercontent.com/go-gitea/gitea/main/assets/logo.svg"></td>
+        <td><a href="https://docs.gitea.com/category/installation">Gitea</a></td>
+        <td>Self-Hosted Git Service</td>
+    </tr>
+    <tr>
+        <td><img vertical-align=baseline width="32" src="https://raw.githubusercontent.com/go-gitea/gitea/main/assets/logo.svg"></td>
+        <td><a href="https://docs.gitea.com/usage/actions/act-runner">Act Runner (Gitea Runner)</a></td>
+        <td>Self-Hosted Runner Service</td>
+    </tr>
+    <tr>
+        <td><img vertical-align=baseline width="32" src="https://raw.githubusercontent.com/thomiceli/opengist/a9dd531f676d01b93bb6bd70751a69382ca563b0/public/opengist.svg"></td>
+        <td><a href="https://github.com/thomiceli/opengist">Opengist</a></td>
+        <td>Opengist is a self-hosted pastebin powered by Git</td>
+    </tr>
+    <tr>
+        <td><img vertical-align=baseline width="32" src="https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/homepage.png"></td>
+        <td><a href="https://gethomepage.dev/latest/">Homepage</a></td>
+        <td>A modern, fully static, fast, secure fully proxied, highly customizable application dashboard with integrations for over 100 services and translations into multiple languages. Easily configured via YAML files or through docker label discovery</td>
+    </tr>
+    <tr>
+        <td><img vertical-align=baseline width="32" src="https://raw.githubusercontent.com/walkxcode/dashboard-icons/dd34fba44b97d3d5753dda032487890cb6fa5879/svg/invoiceninja.svg"></td>
+        <td><a href="https://invoiceninja.com/">Invoice Ninja</a></td>
+        <td>Free Invoicing Software for Small Businesses</td>
+    </tr>
+    <tr>
+        <td><img vertical-align=baseline width="32" src="https://raw.githubusercontent.com/walkxcode/dashboard-icons/dd34fba44b97d3d5753dda032487890cb6fa5879/svg/jellyfin.svg"></td>
+        <td><a href="https://jellyfin.org/">Jellyfin</a></td>
+        <td>Jellyfin is a Free Software Media System that puts you in control of managing and streaming your media.</td>
+    </tr>
+    <tr>
+        <td><img vertical-align=baseline width="32" src="https://raw.githubusercontent.com/walkxcode/dashboard-icons/dd34fba44b97d3d5753dda032487890cb6fa5879/svg/jellyseerr.svg"></td>
+        <td><a href="https://github.com/Fallenbagel/jellyseerr">Jellyseerr</a></td>
+        <td>Jellyseerr is a free and open source software application for managing requests for your media library.</td>
+    </tr>
+    <tr>
+        <td><img vertical-align=baseline width="32" src="https://raw.githubusercontent.com/walkxcode/dashboard-icons/dd34fba44b97d3d5753dda032487890cb6fa5879/svg/lidarr.svg"></td>
+        <td><a href="https://lidarr.audio/">Lidarr</a></td>
+        <td>Lidarr is a music collection manager for Usenet and BitTorrent users. </td>
+    </tr>
+    <tr>
+        <td><img vertical-align=baseline width="32" src="https://raw.githubusercontent.com/walkxcode/dashboard-icons/dd34fba44b97d3d5753dda032487890cb6fa5879/svg/mariadb.svg"></td>
+        <td><a href="https://mariadb.org/">MariaDB</a></td>
+        <td>MariaDB Server is one of the most popular open source relational databases. It’s made by the original developers of MySQL and guaranteed to stay open source.</td>
+    </tr>
+    <tr>
+        <td><img vertical-align=baseline width="32" src="https://raw.githubusercontent.com/walkxcode/dashboard-icons/dd34fba44b97d3d5753dda032487890cb6fa5879/svg/mealie.svg"></td>
+        <td><a href="https://mealie.io">Mealie</a></td>
+        <td>Mealie is an intuitive and easy to use recipe management app.</td>
+    </tr>
+    <tr>
+        <td><img vertical-align=baseline width="32" src="https://raw.githubusercontent.com/walkxcode/dashboard-icons/dd34fba44b97d3d5753dda032487890cb6fa5879/svg/osticket.svg"></td>
+        <td><a href="https://osticket.com/">osTicket</a></td>
+        <td>osTicket is a widely used and trusted open source support ticketing system.</td>
+    </tr>
+    <tr>
+        <td><img vertical-align=baseline width="32" src="https://raw.githubusercontent.com/walkxcode/dashboard-icons/dd34fba44b97d3d5753dda032487890cb6fa5879/svg/planka.svg"></td>
+        <td><a href="https://planka.app/">Planka</a></td>
+        <td>Elegant open source project tracking</td>
+    </tr>
+    <tr>
+        <td><img vertical-align=baseline width="32" src="https://raw.githubusercontent.com/walkxcode/dashboard-icons/dd34fba44b97d3d5753dda032487890cb6fa5879/svg/portainer.svg"></td>
+        <td><a href="https://portainer.io/">Portainer</a></td>
+        <td>Portainer is your container management software</td>
+    </tr>
+    <tr>
+        <td><img vertical-align=baseline width="32" src="https://raw.githubusercontent.com/walkxcode/dashboard-icons/dd34fba44b97d3d5753dda032487890cb6fa5879/svg/postgres.svg"></td>
+        <td><a href="https://portainer.io/">PostgreSQL</a></td>
+        <td>PostgreSQL, also known as Postgres, is a free and open-source relational database management system emphasizing extensibility and SQL compliance</td>
+    </tr>
+    <tr>
+        <td><img vertical-align=baseline width="32" src="https://raw.githubusercontent.com/walkxcode/dashboard-icons/dd34fba44b97d3d5753dda032487890cb6fa5879/svg/privatebin.svg"></td>
+        <td><a href="https://privatebin.info/">Privatebin</a></td>
+        <td>PrivateBin is a minimalist, open source online pastebin where the server has zero knowledge of pasted data.</td>
+    </tr>
+    <tr>
+        <td><img vertical-align=baseline width="32" src="https://raw.githubusercontent.com/walkxcode/dashboard-icons/dd34fba44b97d3d5753dda032487890cb6fa5879/svg/prowlarr.svg"></td>
+        <td><a href="https://github.com/Prowlarr/Prowlarr">Prowlarr</a></td>
+        <td>Prowlarr supports management of both Torrent Trackers and Usenet Indexers.</td>
+    </tr>
+    <tr>
+        <td><img vertical-align=baseline width="32" src="https://icons.veryicon.com/png/o/miscellaneous/cookd-pc/kms-management.png"></td>
+        <td><a href="https://github.com/Py-KMS-Organization/py-kms">py-kms</a></td>
+        <td>KMS activates Microsoft products on a local network, eliminating the need for individual computers to connect to Microsoft.</td>
+    </tr>
+    <tr>
+        <td><img vertical-align=baseline width="32" src="https://raw.githubusercontent.com/walkxcode/dashboard-icons/dd34fba44b97d3d5753dda032487890cb6fa5879/svg/qbittorrent.svg"></td>
+        <td><a href="https://qbittorrent.org">qBittorrent</a></td>
+        <td>qBittorrent is a cross-platform free and open-source BitTorrent client </td>
+    </tr>
+    <tr>
+        <td><img vertical-align=baseline width="32" src="https://raw.githubusercontent.com/walkxcode/dashboard-icons/dd34fba44b97d3d5753dda032487890cb6fa5879/svg/radarr.svg"></td>
+        <td><a href="https://radarr.video">Radarr</a></td>
+        <td>Radarr is a movie collection manager for Usenet and BitTorrent users.</td>
+    </tr>
+    <tr>
+        <td><img vertical-align=baseline width="32" src="https://raw.githubusercontent.com/walkxcode/dashboard-icons/dd34fba44b97d3d5753dda032487890cb6fa5879/svg/readarr.svg"></td>
+        <td><a href="https://readarr.com">Readarr</a></td>
+        <td>Readarr is a ebook collection manager for Usenet and BitTorrent users. </td>
+    </tr>
+    <tr>
+        <td><img vertical-align=baseline width="32" src="https://raw.githubusercontent.com/walkxcode/dashboard-icons/dd34fba44b97d3d5753dda032487890cb6fa5879/svg/sabnzbd.svg"></td>
+        <td><a href="https://sabnzbd.com">Sabnzbd</a></td>
+        <td>Free and easy binary newsreader</td>
+    </tr>
+    <tr>
+        <td><img vertical-align=baseline width="32" src="https://raw.githubusercontent.com/walkxcode/dashboard-icons/dd34fba44b97d3d5753dda032487890cb6fa5879/svg/sonarr.svg"></td>
+        <td><a href="https://sonarr.tv">Sonarr</a></td>
+        <td>Sonarr is a PVR for Usenet and BitTorrent users.</td>
+    </tr>
+    <tr>
+        <td><img vertical-align=baseline width="32" src="https://raw.githubusercontent.com/linuxserver/docker-templates/master/linuxserver.io/img/speedtest-tracker-logo.png"></td>
+        <td><a href="https://sonarr.tv">Speedtest-Tracker</a></td>
+        <td>Speedtest-tracker is a self-hosted internet performance tracking application that runs speedtest checks against Ookla's Speedtest service.</td>
+    </tr>
+    <tr>
+        <td><img vertical-align=baseline width="32" src="https://raw.githubusercontent.com/walkxcode/dashboard-icons/dd34fba44b97d3d5753dda032487890cb6fa5879/svg/stirling-pdf.svg"></td>
+        <td><a href="https://github.com/Stirling-Tools/Stirling-PDF">Stirling-PDF</a></td>
+        <td>This is a robust, locally hosted web-based PDF manipulation tool using Docker. </td>
+    </tr>
+    <tr>
+        <td><img vertical-align=baseline width="32" src="https://raw.githubusercontent.com/walkxcode/dashboard-icons/dd34fba44b97d3d5753dda032487890cb6fa5879/svg/vaultwarden.svg"></td>
+        <td><a href="https://github.com/dani-garcia/vaultwarden">Vaultwarden</a></td>
+        <td>Self-Hosted implementation of the Bitwarden server API written in Rust and compatible with upstream Bitwarden clients</td>
+    </tr>
+
+</div>    -->
--- a/ansible.cfg
+++ b/ansible.cfg
@ -0,0 +1,6 @@
+[defaults]
+inventory=hosts
+deprecation_warnings=False
+host_key_checking=False
+interpreter_python=auto_silent
+
--- a/build-debian-promox-template.yml
+++ b/build-debian-promox-template.yml
@ -0,0 +1,77 @@
+---
+- hosts: proxmox
+  become: yes
+
+  tasks:
+    # - name: Delete existing template
+    #   community.general.proxmox_kvm:
+    #     api_host: "{{ api_host }}"
+    #     api_user: "{{ api_user }}"
+    #     api_password: "{{ api_password }}"
+    #     node: "{{ node_target }}"
+    #     name: "debian-12-generic-amd64"
+    #     state: absent
+
+    # - name: Download cloud-init image
+    #   register: image
+    #   ansible.builtin.get_url:
+    #     url: "https://cloud.debian.org/images/cloud/bookworm/latest/debian-12-generic-amd64.qcow2"
+    #     dest: /tmp
+    #     mode: '0644'
+    #     force: true
+
+    # - name: Install Tools
+    #   ansible.builtin.apt:
+    #     name:
+    #       - libguestfs-tools
+    #       - python3
+    #       - python3-pip
+    #       - python3-proxmoxer
+    #     update_cache: true
+    #     install_recommends: false
+    #     state: present
+    
+    # - name: Install Tools to cloud-init image
+    #   ansible.builtin.shell: |
+    #     virt-customize -a {{ image.dest }} --install qemu-guest-agent
+    #     virt-customize -a {{ image.dest }} --install vim
+    #     virt-customize -a {{ image.dest }} --install git
+  
+    - name: Create new VM template from cloud-init image
+      community.general.proxmox_kvm:
+        api_host: "{{ api_host }}"
+        api_user: "{{ api_user }}"
+        # api_password: "{{ api_password }}"
+        api_token_id: "{{ api_token_id }}"
+        api_token_secret: "{{ api_token_secret }}"
+        api_port: "8006"
+        node: "{{ node_target }}"
+        name: "debian-12-generic-amd64"
+        agent: "enabled=1"
+        bios: ovmf
+        boot: 'order=scsi0'
+        cores: 4
+        sockets: 1
+        machine: q35
+        memory: 4096
+        ostype: "l26"
+        vga: std
+        scsihw: 'virtio-scsi-single'
+        #scsi:
+          #scsi0: "{{ storage_target }}:0,iothread=1,discard=on,import-from={{ image.dest }},format=raw"
+          #scsi0: "{{ storage_target }}:0,import-from=/tmp/debian-12-generic-amd64.qcow2,format=raw"
+        net:
+          net0: 'virtio,bridge=vmbr0,firewall=1,tag=10'
+        ipconfig:
+          ipconfig0: 'ip=dhcp'
+        template: true
+        timeout: 600
+        vmid: 10000
+    
+    # - name: Pause for 5 seconds while template imported
+    #   ansible.builtin.pause:
+    #     seconds: 10
+    
+    - name: Import HDD to Template
+      command:
+        cmd: "qm set 10000 --scsi0 {{ storage_target }}:0,iothread=1,discard=on,import-from=/tmp/debian-12-generic-amd64.qcow2,format=raw"
--- a/group_vars/all.yml
+++ b/group_vars/all.yml
@ -0,0 +1,100 @@
+$ANSIBLE_VAULT;1.1;AES256
+32656263363465383531613338653130323635653238383232646265326433616462363464656539
+3162306463653134666135376366643861353862663765630a343165613030633661353463316463
+30633162376563663166616366643836316363663065333366643338383939636531323538616536
+3136383363636131360a326661366265653364323966386634656465376433633035343033653034
+38613637613431616637323038363933383037396236386633303366313835333865316563373966
+35623038613166356132633264366361313030313765333335343136326165326333656361363462
+61383538356434643333653534346264396335653535343362386234316666626431643130346436
+34363265613632666431343735376166383466633338353339646337613135613461363366346562
+39333135633061376139333030666365366438366434326139313265643034363934306134643630
+65356338373564346362633830383337373131366263323166386435313931633139646233623033
+36666334613766356463333963653034316636376364303063666237383732396335636231303764
+63343963633664393632613263333563643737393466326665633766663764363236333834313737
+66353833636661643536633066366666306231643038623632306230656534336666303930303461
+62323137353530396135376364316331353138616161303265376334303666633032646631323664
+31323336386339326530646237666239333963343732376235306537323336303030613164623765
+33383534326532383230616561376136646632643634393563346565336139656339383631333539
+66613830313134313239366232323965343063633433653434373564663861323330323663363965
+36363132626535663734653739333331616532666635333936306334656264646336366233356562
+34383135343335653130636132633631623634333961376262316536633339313033326239356663
+38666361636239356665626139643735333461633436373362373034383536326664336663623038
+31383237643733613533633535383939313835313363633362343965633336626263623932663862
+32376265666438333663373364613861656564326139363731313731343234373934656633613532
+35396535306164323237376232633830613432633735663636396137356361303730376239373130
+61313630313235373363333862363961313938303332366233656364616536316366326466316439
+39376632663062666135623639343136643065363734366430386563613530343061326661653733
+63323036633363386636333636633864333334306164306431663662383562396434306336303337
+32383137363834633731393564353238636237313361643438306536386432666663383563653834
+38613031353265316230363464353638373564636234303266396264306231383634623664626535
+64363033373535666135316364303862343732393036396334326136323437646239363361373762
+61633761343362653261316434636664353564363330303131333236336230643161623863376634
+34613466396330313837643139333565366263363430343536386266323937336466623931383062
+62626363383163663637353235343035323233393033623132336664396464343638303839376561
+65376537666430666330323430393337666233636165356665323032343563333833383830616165
+33636662633961346561373231646664643932386465343537626237663338613836356430393961
+39363963633237306561353161643133396366633762336437633138393139653261373539303539
+36316464643362336135363631666130653131326435306463366236323830663965363662646361
+35643430666365613465666436386332346561326439643863333138363263306331653733343432
+63363932303735396234323963363336353133376362306539333131323262336535333733393639
+63613064636333303532623935393262373363636161653566373830636131633835366463363533
+61333163326262343037313462303930363234316462623963323563303864383163643936643761
+61623461326334396539633364643031366231316535643135313935633439643361656136616532
+34653635303631623639656165666231363563383336666337323361636137643564373565323238
+35353965633230663166353161643033383666373530623739396139366137316438396333666231
+34613136363939633565393336336633636665363838323230346262386335386365376262326462
+34393539393365346364393432313665356465653866666538323134636630613137333261383364
+39313362333832623837313235353331346434303166633137303234303062646337373664373861
+32343037613362346134636531356463303739396364646339333138363064376632356534323834
+64313864323065303531366435393864303035303331313737316137376361656438353739333830
+64333234353837383938393861643236373338323436323863393933643332366363653935646264
+37376336616162346161623136393662306137616638383134363964313835333332366430353364
+64363730626564393134383534313130313633623137336630386364326365336262373963396239
+32393061663964643036323233633232326232656363613339376663633761316639323737383365
+33356562643530313434383639393766633733383263366162316332306532366362653737356539
+63656366356333396165383330626535626232336137646464323665316464626139373964623163
+31626230393661333164303834396331623934356538326166313635656437316236313630313463
+65303633616637383436383737366361313736383262663130343932323830383763643235353264
+36643966303937336636653037633739303364626638636438396332373862306665623037306336
+61626330313364333639353366363131343434663139643361323836353065656137333162333130
+65326364396665613763373565323165383638386135366235646437383130333434346635393566
+61303263343132663531663237666337326365653737653731626364383665663334643139346338
+66613266633263613037646334346661393063373330616431346161376137656139366166616264
+64343737643662663134363265653063636665656366656135633932653165343361633835336665
+35336139653939656162323366386435623134623062313461613261343264323731613732313435
+65313436396464366662366533313162343233323836323336393665646361343438383063623964
+63303761316666643237323364336139323536643664363331643565336166316163663731393065
+30643638356231303563343433616335306435316161333937363937633131373536346464356539
+36663865633336666539363734613131303931363732643665363866643533643763343433616561
+66656238653734383131376330616535636138663933393032613166396436623436393563643336
+38656164313566356566613331396539656531666462336163373034613232666439346633616166
+35316636323064346531656631363265366335336265316362623438336230626332333838626265
+61313834393664353133623132303332353633636464343764643334323866303664346563353839
+34366534383963383366633765366337363835326133366264323239323266313433636538303537
+65306230666335386332613638333738363965623934366338653133623434373831656361386437
+37323232346236616236346539613739313237326433363961666535343634643937343331653366
+32313864633562346132343538633035303432383033363939306663613939376261653662666161
+39383639646338656233376130633966343637353238346435383637376636363631343037336236
+36393361646161613736363135343964383364316265343939393333323937376661356331376465
+62616333306137643366386561343234663836653833666239383835393031303163393365356661
+31356537313530333934653564353039623766326236663635396539616533303831613135653738
+31373234346439373230613139636661656636393238363132383732376436646638643131376435
+36376435336232353333353563616164643632363565633639623161386436643663656132373135
+35646365336365333931653665343461663263333432306131633335333766396165363631663930
+66633039383564613739653436666330363661666631353461613333313632333032373939626263
+38326164303131386461613962326166666434393031633365306332383663303638666330363632
+31343135613065623464646661623865643765613838376434393765663366343961646432306135
+62356234323436653166613462373931616236333265616465346564653563323233383962306162
+33393030663330336332316332343731666561346539633531653431303934316663363964616236
+37336236346563346533643338366433343035653766383663306333633031343462383931343465
+38663432383865616432326236376633353935323434333431313739353232343762626439366263
+39333762343761613861396431643561653665303831613964363733396663356333373437383766
+66343831373463623233646438393537313966613238366334356331356234356232663066316635
+66636666333465643132383536643234343135396632393265663465393930346138383761363139
+62623966613964373963623362343164623837626638623330383932396638363766383166653462
+65346634646264313132623332633536383236376336313339356561663339656430623866306336
+66393263656461316433663735353733646638633430663635643064386633666334326437613839
+36316333326663663664363436613933636532393630346430313931633533623035346366343934
+61303437666334323231343336366330656261646566653938653733633933653562373938633962
+30386438343166316366646565333766393930303435663362303432646337323465316261623565
+363632346536336638383065656231373538
--- a/9
+++ b/9
@ -0,0 +1,9 @@
+[cloud] 
+vps02.comprofix.com
+
+# [docker]
+# docker.comprofix.xyz
+
+
+
+
--- a/main.yml
+++ b/main.yml
@ -0,0 +1,132 @@
+---
+
+- hosts: all
+  name: Configure all servers
+  tasks:
+  - name: Gather facts if run with tags
+    ansible.builtin.setup:
+    when: ansible_run_tags | length
+  tags: always
+
+- hosts: all
+  become: yes
+  tasks:
+    - include_tasks: tasks/base.yml
+  tags: base_install
+
+- hosts: cloud
+  become: yes
+  roles: 
+    - role: docker
+      tags: docker_install
+   
+    - name: traefik
+      vars:
+        traefik_host: traefik01.comprofix.com
+      tags: traefik_install
+
+  tasks: 
+    # - name: Deploy Homepage
+    #   import_tasks: tasks/homepage.yml
+    #   tags: homepage_install
+    
+    - name: Deploy Vaultwarden
+      import_tasks: tasks/vaultwarden.yml
+      tags: vaultwarden_install
+
+    - name: Deploy gitea
+      import_tasks: tasks/gitea.yml
+      tags: gitea_install
+  tags: cloud_install
+
+# - hosts: docker
+#   become: yes
+#   roles:
+#     - role: docker
+#       tags: docker_install
+#     - role: nfs
+#       mounts:
+#       - name: Docker share
+#         path: /mnt/nfs/docker
+#         src: truenas.comprofix.xyz:/mnt/datapool/docker
+#       - name: Data share
+#         path: /mnt/nfs/data
+#         src: truenas.comprofix.xyz:/mnt/datapool/data
+#       tags: nfs_install
+#     - role: traefik
+#       vars:
+#         traefik_host: traefik02.comprofix.xyz
+#         data_folder: "/mnt/nfs/docker"
+#       tags: traefik_install
+#   tasks: 
+#     - name: Deploy iDrac Fan Controller
+#       import_tasks: tasks/idrac.yml
+#       tags: idrac_install
+   
+#     - name: Deploy MariaDB
+#       import_tasks: tasks/mariadb.yml
+#       tags: mariadb_install
+     
+#     - name: Deploy InvoiceNinja
+#       import_tasks: tasks/invoiceninja.yml
+#       tags: invoiceninja_install
+    
+#     - name: Deploy osTicket
+#       import_tasks: tasks/osticket.yml
+#       tags: osticket_install
+
+#     - name: Deploy speedtest-tracker
+#       import_tasks: tasks/speedtest.yml
+#       tags: speedtest_install
+
+#     - name: Deploy dozzle
+#       import_tasks: tasks/dozzle.yml
+#       tags: dozzle_install
+    
+#     - name: Deploy jellyseerr
+#       import_tasks: tasks/jellyseerr.yml
+#       tags: jellyseerr_install
+    
+#     - name: Deploy lidarr
+#       import_tasks: tasks/lidarr.yml
+#       tags: lidarr_install
+    
+#     - name: Deploy prowlarr
+#       import_tasks: tasks/prowlarr.yml
+#       tags: prowlarr_install
+    
+#     - name: Deploy radarr
+#       import_tasks: tasks/radarr.yml
+#       tags: radarr_install
+
+#     - name: Deploy readarr
+#       import_tasks: tasks/readarr.yml
+#       tags: readarr_install
+    
+#     - name: Deploy sonarr
+#       import_tasks: tasks/sonarr.yml
+#       tags: sonarr_install
+
+#     - name: Deploy sabnzbd
+#       import_tasks: tasks/sabnzbd.yml
+#       tags: sabnzbd_install
+
+#     - name: Deploy mealie
+#       import_tasks: tasks/mealie.yml
+#       tags: mealie_install
+    
+#     - name: Deploy pyKMS
+#       import_tasks: tasks/pykms.yml
+#       tags: pykms_install
+#   tags: dockerserver_install
+
+
+
+
+
+
+
+
+
+  
+
--- a/renovate.json
+++ b/renovate.json
@ -0,0 +1,22 @@
+{
+    "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+    "extends": [
+      "config:base",
+      "renovatebot/renovate-config",
+      ":semanticCommitTypeAll(chore)"
+    ],
+  //   "automerge": true,
+  //   "automergeType": "branch",
+  //   "automergeStrategy": "rebase",
+  //   "commitBodyTable": true,
+  //   "ignoreTests": true,
+  //   "major": {
+  //     "automerge": false,
+  //     "dependencyDashboardApproval": true,
+  //     "commitMessagePrefix": "chore(deps-major): ",
+  //     "labels": ["dependencies", "breaking"]
+  //   },
+  //   "ignorePaths": [
+  //     "terraform/"
+  // ]
+  }
--- a/roles/docker/defaults/main.yml
+++ b/roles/docker/defaults/main.yml
@ -0,0 +1,2 @@
+---
+# defaults file for docker
--- a/roles/docker/meta/main.yml
+++ b/roles/docker/meta/main.yml
@ -0,0 +1,52 @@
+galaxy_info:
+  author: Matthew McKinnon
+  description: Mounting NFS filesystem
+  company: support@comprofix.com
+
+  # If the issue tracker for your role is not on github, uncomment the
+  # next line and provide a value
+  # issue_tracker_url: http://example.com/issue/tracker
+
+  # Choose a valid license ID from https://spdx.org - some suggested licenses:
+  # - BSD-3-Clause (default)
+  # - MIT
+  # - GPL-2.0-or-later
+  # - GPL-3.0-only
+  # - Apache-2.0
+  # - CC-BY-4.0
+  license: license (GPL-2.0-or-later, MIT, etc)
+
+  min_ansible_version: 2.1
+
+  # If this a Container Enabled role, provide the minimum Ansible Container version.
+  # min_ansible_container_version:
+
+  #
+  # Provide a list of supported platforms, and for each platform a list of versions.
+  # If you don't wish to enumerate all versions for a particular platform, use 'all'.
+  # To view available platforms and versions (or releases), visit:
+  # https://galaxy.ansible.com/api/v1/platforms/
+  #
+  # platforms:
+  # - name: Fedora
+  #   versions:
+  #   - all
+  #   - 25
+  # - name: SomePlatform
+  #   versions:
+  #   - all
+  #   - 1.0
+  #   - 7
+  #   - 99.99
+
+  galaxy_tags: []
+    # List tags for your role here, one per line. A tag is a keyword that describes
+    # and categorizes the role. Users find roles by searching for tags. Be sure to
+    # remove the '[]' above, if you add tags to this list.
+    #
+    # NOTE: A tag is limited to a single word comprised of alphanumeric characters.
+    #       Maximum 20 tags per role.
+
+dependencies: []
+  # List your role dependencies here, one per line. Be sure to remove the '[]' above,
+  # if you add dependencies to this list.
--- a/roles/docker/tasks/main.yml
+++ b/roles/docker/tasks/main.yml
@ -0,0 +1,48 @@
+---
+- name: Add Docker apt key.
+  ansible.builtin.get_url:
+    url: "{{ docker_apt_gpg_key }}"
+    dest: /etc/apt/trusted.gpg.d/docker.asc
+    mode: '0644'
+    force: false
+    checksum: "{{ docker_apt_gpg_key_checksum | default(omit) }}"
+  ignore_errors: true
+
+- name: Add Docker repository.
+  apt_repository:
+    repo: "{{ docker_apt_repository }}"
+    state: present
+    filename: "{{ docker_apt_filename }}"
+    update_cache: true
+
+- name: Install Docker packages.
+  package:
+    name: "{{ docker_packages }}"
+    state: "present"
+
+- name: Install Docker Module for Python
+  pip:
+    name:
+      - PyYAML==5.3.1
+      - docker
+      - docker-compose
+      - pymysql
+      - passlib
+    state: "present"
+
+- name: Ensure docker users are added to the docker group.
+  user:
+    name: "{{ item }}"
+    groups: docker
+    append: true
+  with_items: "{{ docker_users }}"
+
+- name: Reset ssh connection to apply user changes.
+  meta: reset_connection
+
+- name: Setup cron job for backup
+  cron:
+    name: Docker Prune
+    minute: 0
+    hour: 5
+    job: "docker system prune -af && docker image prune -af && docker system prune -af --volumes"
--- a/roles/docker/vars/main.yml
+++ b/roles/docker/vars/main.yml
@ -0,0 +1,51 @@
+$ANSIBLE_VAULT;1.1;AES256
+36326633353666613166393030633363373435666230663138303735323132663930663663383138
+3131616265626633663430353835663866356436373533390a623564333539306162613532393661
+61326437363033383862343034356639316162363364356135616132396136383962333062653566
+3966323033663162640a323461656637633062373134656237323339346638663338353266386164
+30653839343165663937653534313335316336356262303331643839643733663264643265633337
+62633265656330353536663762643130636466353165336535393033663937396364373064363133
+66323931663164313235316638393838326532643233636663333635656162343333643233646131
+33336239393035613839646434643633313239393764613836343039383361613437626334643534
+33373461336363636162646631323266353235326361393338366563653663343537633765653261
+30393863323134376466346663376432623938376638393135356439326562656534376233646364
+31353336396362323363323964383635303264646661626662333161303961383333636437393264
+61623638303066343832303034633736343031333732633437356134393837663637653738303837
+65643264663564643432363830373861323062393561386261323638353339663835663830653633
+35373865383832656665333263323463303631343239346632336565393032333865353364386431
+34633064356233626337646439623665613039666632366162346534656438393965623836366230
+38323765633333663266656161376233343131646165343538653335653061363435316536313339
+65366539313338623030663233633766373865653938616437323664633537306162353438373564
+30383831353563663834373731356330393535613162313461303265353461643434613833376330
+39653063363666353261373161636434366464306539306538623533373764666466383766646166
+63313263626539316163656431393534393266666632366430323439373931636235663137393363
+66323338643835356338646565653235333762343162636434653561626630333233343232633365
+64353139376236363039343432636563316562383263336434376236613734396564393137366531
+35613232646638313435326234366335356538393331363862353232353961373734646332646635
+37323930623932326164323831393462653331373562336264613635396339653161303863623739
+34303532376335623533373466366464666662653533363963326536633938333833376432616330
+62326261366463323934663939316338306535323935623935323337333866353539336132326564
+64623739623064333932386363353235356431656339663039643631353264376234316430356235
+33326233356638646163633333613736343732626263333631336333343434353164333436653331
+64376539336562393538613134633933373339363737363364623066383130653033633966316665
+36323361656131623435346565323638313030343762313765646264396461616165393762366436
+65363563313439376437626533386262323036346436663030303736363061396639633338386337
+65623534393561643662653538633630363663326430383030393062323934326465313533303662
+30323861613333353465396536653632373934363162393465373466636132383064663063383834
+66653938346463663335333737386339666430643034386335353938633232323333633238643035
+37643239383936393233353735333164663566663833383763306635646666666365336161316437
+64343032376139373036366433376263376565656435336662656661336530323130356266353265
+32316361623238386530303533343763646533653631613965386639386237303965636634353366
+31363137376633376532383361376631663734653262616237373933363330323337386434623261
+63656364653162323463626361633533353132666563393538383332306263316639396530323131
+63646566623064393930343137623564323234383430363365313834336464333432623466646139
+33343833353339633236613439623735316538373962663365623963663639663264396238363465
+61313338343435313035643163316631303433383738393162633032613830663264386538343763
+30363434653461396239306334333366333232373732353362666538323063313934346433666334
+35363236333038333363653737656362653362376338653364636566346637376566306632326438
+32663930613066343361616665396334393863643963316239313735363539333263656133356665
+62663236366665373637373436656630336630393333393164343265306533666366333964333338
+36376337376366333835326565323735613961323264663466356635653763343331373561666632
+61343466643661636335373663386466333232393064623538666636653439363639386462373238
+38613862656363373434353037613135363464313864386361323136613762306632653838616463
+3438636539363664613934313333336535623165306438353130
--- a/roles/nfs/defaults/main.yml
+++ b/roles/nfs/defaults/main.yml
@ -0,0 +1,8 @@
+---
+# defaults file for roles/nfs-mount
+
+# List of NFS shares
+nfs_share_mounts: []
+
+# Default NFS4 mount options
+nfs_mount_opts: "rw,sync,hard"
--- a/roles/nfs/meta/main.yml
+++ b/roles/nfs/meta/main.yml
@ -0,0 +1,52 @@
+galaxy_info:
+  author: Matthew McKinnon
+  description: Mounting NFS filesystem
+  company: support@comprofix.com
+
+  # If the issue tracker for your role is not on github, uncomment the
+  # next line and provide a value
+  # issue_tracker_url: http://example.com/issue/tracker
+
+  # Choose a valid license ID from https://spdx.org - some suggested licenses:
+  # - BSD-3-Clause (default)
+  # - MIT
+  # - GPL-2.0-or-later
+  # - GPL-3.0-only
+  # - Apache-2.0
+  # - CC-BY-4.0
+  license: license (GPL-2.0-or-later, MIT, etc)
+
+  min_ansible_version: 2.1
+
+  # If this a Container Enabled role, provide the minimum Ansible Container version.
+  # min_ansible_container_version:
+
+  #
+  # Provide a list of supported platforms, and for each platform a list of versions.
+  # If you don't wish to enumerate all versions for a particular platform, use 'all'.
+  # To view available platforms and versions (or releases), visit:
+  # https://galaxy.ansible.com/api/v1/platforms/
+  #
+  # platforms:
+  # - name: Fedora
+  #   versions:
+  #   - all
+  #   - 25
+  # - name: SomePlatform
+  #   versions:
+  #   - all
+  #   - 1.0
+  #   - 7
+  #   - 99.99
+
+  galaxy_tags: []
+    # List tags for your role here, one per line. A tag is a keyword that describes
+    # and categorizes the role. Users find roles by searching for tags. Be sure to
+    # remove the '[]' above, if you add tags to this list.
+    #
+    # NOTE: A tag is limited to a single word comprised of alphanumeric characters.
+    #       Maximum 20 tags per role.
+
+dependencies: []
+  # List your role dependencies here, one per line. Be sure to remove the '[]' above,
+  # if you add dependencies to this list.
--- a/roles/nfs/tasks/main.yml
+++ b/roles/nfs/tasks/main.yml
@ -0,0 +1,20 @@
+---
+  
+- name: Install NFS mount utility
+  ansible.builtin.apt:
+    update_cache: true
+    pkg: nfs-common
+    state: present
+  when: ansible_os_family == "Debian"
+
+- name: Mount an NFS volume
+  ansible.posix.mount:
+    src: "{{ item.src }}"
+    path: "{{ item.path }}"
+    opts: "{{ item.opts | default(nfs_mount_opts) }}"
+    state: "{{ item.state | default( 'mounted' ) }}"
+    fstype: nfs
+  with_items: "{{ mounts }}"
+    
+
+
--- a/roles/portainer/defaults/main.yml
+++ b/roles/portainer/defaults/main.yml
@ -0,0 +1,2 @@
+---
+# defaults file for common
--- a/roles/portainer/meta/main.yml
+++ b/roles/portainer/meta/main.yml
@ -0,0 +1,52 @@
+galaxy_info:
+  author: Matthew McKinnon
+  description: Portainer CE
+  company: support@comprofix.com
+
+  # If the issue tracker for your role is not on github, uncomment the
+  # next line and provide a value
+  # issue_tracker_url: http://example.com/issue/tracker
+
+  # Choose a valid license ID from https://spdx.org - some suggested licenses:
+  # - BSD-3-Clause (default)
+  # - MIT
+  # - GPL-2.0-or-later
+  # - GPL-3.0-only
+  # - Apache-2.0
+  # - CC-BY-4.0
+  license: license (GPL-2.0-or-later, MIT, etc)
+
+  min_ansible_version: 2.1
+
+  # If this a Container Enabled role, provide the minimum Ansible Container version.
+  # min_ansible_container_version:
+
+  #
+  # Provide a list of supported platforms, and for each platform a list of versions.
+  # If you don't wish to enumerate all versions for a particular platform, use 'all'.
+  # To view available platforms and versions (or releases), visit:
+  # https://galaxy.ansible.com/api/v1/platforms/
+  #
+  # platforms:
+  # - name: Fedora
+  #   versions:
+  #   - all
+  #   - 25
+  # - name: SomePlatform
+  #   versions:
+  #   - all
+  #   - 1.0
+  #   - 7
+  #   - 99.99
+
+  galaxy_tags: []
+    # List tags for your role here, one per line. A tag is a keyword that describes
+    # and categorizes the role. Users find roles by searching for tags. Be sure to
+    # remove the '[]' above, if you add tags to this list.
+    #
+    # NOTE: A tag is limited to a single word comprised of alphanumeric characters.
+    #       Maximum 20 tags per role.
+
+dependencies: []
+  # List your role dependencies here, one per line. Be sure to remove the '[]' above,
+  # if you add dependencies to this list.
--- a/roles/portainer/tasks/main.yml
+++ b/roles/portainer/tasks/main.yml
@ -0,0 +1,29 @@
+---
+- name: Create directories
+  file:
+    path: "{{ item }}"
+    state: directory
+  with_items:
+    - "{{ data_folder }}/portainer"
+ 
+- name: Create Portainer Container
+  docker_container:
+    name: portainer
+    image: portainer/portainer-ce:2.21.0
+    command: --admin-password "{{PORTAINER_ADMIN_PASSWORD}}"
+    restart_policy: unless-stopped
+    volumes:
+      - "{{ data_folder }}/portainer/data:/data"
+      - '/var/run/docker.sock:/var/run/docker.sock'
+    networks:
+      - name: proxy
+    labels:
+      traefik.enable: "true"
+      traefik.http.routers.portainer-secure.rule: "Host(`{{portainer_host}}`)"
+      traefik.http.routers.portainer-secure.entrypoints: "https"
+      traefik.http.routers.portainer-secure.tls: "true"
+      traefik.http.routers.portainer-secure.service: "portainer"
+      traefik.http.services.portainer.loadbalancer.server.port: "9443"
+      traefik.http.services.portainer.loadbalancer.server.scheme: "https"
+  register: container_portainer
+
--- a/roles/portainer/vars/main.yml
+++ b/roles/portainer/vars/main.yml
@ -0,0 +1,14 @@
+$ANSIBLE_VAULT;1.1;AES256
+66663364383263343838636561393437373730633165306539633566356166313664656166633537
+6333663336336463613565666465663430303665323766300a393063366230643139363061633636
+65303631383230396461303836386335306261613664393762393266636437333634663464353137
+6563366664663331380a346534323264633738663063356565643137323964663964656137633363
+33333264383830666637376337633432353732353630333134353638653234333730636166356164
+33363433343432623762393834336637626562613633393963323963623661643862636362313930
+37346233373231663762346633323634666436323364653136656630636462333638316632626435
+30336433353961333334386134383032356633643261656639623237386439653739363133633836
+65333065336464386164363037363766353066396163386561323338326439376138316131306636
+65376230383666393762393938313535386131313134613033393936633139363366373065623033
+33353733613439383366393864623130396231323433393732653966653132313262346538646334
+63303831333465613962653661656237326364396465366234383663333431366233363133623936
+62663632356361323930326230326565366366663733633137633938643564373766
--- a/roles/traefik/defaults/main.yml
+++ b/roles/traefik/defaults/main.yml
@ -0,0 +1,2 @@
+---
+# defaults file for common
--- a/roles/traefik/meta/main.yml
+++ b/roles/traefik/meta/main.yml
@ -0,0 +1,52 @@
+galaxy_info:
+  author: Matthew McKinnon
+  description: Traefik Proxy
+  company: support@comprofix.com
+
+  # If the issue tracker for your role is not on github, uncomment the
+  # next line and provide a value
+  # issue_tracker_url: http://example.com/issue/tracker
+
+  # Choose a valid license ID from https://spdx.org - some suggested licenses:
+  # - BSD-3-Clause (default)
+  # - MIT
+  # - GPL-2.0-or-later
+  # - GPL-3.0-only
+  # - Apache-2.0
+  # - CC-BY-4.0
+  license: license (GPL-2.0-or-later, MIT, etc)
+
+  min_ansible_version: 2.1
+
+  # If this a Container Enabled role, provide the minimum Ansible Container version.
+  # min_ansible_container_version:
+
+  #
+  # Provide a list of supported platforms, and for each platform a list of versions.
+  # If you don't wish to enumerate all versions for a particular platform, use 'all'.
+  # To view available platforms and versions (or releases), visit:
+  # https://galaxy.ansible.com/api/v1/platforms/
+  #
+  # platforms:
+  # - name: Fedora
+  #   versions:
+  #   - all
+  #   - 25
+  # - name: SomePlatform
+  #   versions:
+  #   - all
+  #   - 1.0
+  #   - 7
+  #   - 99.99
+
+  galaxy_tags: []
+    # List tags for your role here, one per line. A tag is a keyword that describes
+    # and categorizes the role. Users find roles by searching for tags. Be sure to
+    # remove the '[]' above, if you add tags to this list.
+    #
+    # NOTE: A tag is limited to a single word comprised of alphanumeric characters.
+    #       Maximum 20 tags per role.
+
+dependencies: []
+  # List your role dependencies here, one per line. Be sure to remove the '[]' above,
+  # if you add dependencies to this list.
--- a/roles/traefik/tasks/main.yml
+++ b/roles/traefik/tasks/main.yml
@ -0,0 +1,86 @@
+---
+- name: Create directories
+  file:
+    path: "{{ item }}"
+    state: directory
+  with_items:
+    - "{{ data_folder }}/traefik"
+    - "{{ data_folder }}/traefik/data"
+
+- name: Create a network
+  docker_network:
+    name: proxy
+  register: network
+
+- name: Copy Traefik config
+  template:
+    src: templates/traefik.yml.j2
+    dest: "{{ data_folder }}/traefik/data/traefik.yml"
+    mode: '0600'
+
+- name: Check if {{ data_folder }}/traefik/data/acme.json exists
+  ansible.builtin.stat:
+    path: "{{ data_folder }}/traefik/data/acme.json"
+  register: file_status
+
+- name: Creates {{ data_folder }}/traefik/data/acme.json if it doesn't exists
+  ansible.builtin.file:
+    path: "{{ data_folder }}/traefik/data/acme.json"
+    state: touch
+    owner: root
+    group: root
+    mode: '0600'
+  when: not file_status.stat.exists
+
+- name: Check if {{ data_folder }}/traefik/data/traefik.json.log exists
+  ansible.builtin.stat:
+    path: "{{ data_folder }}/traefik/data/traefik.json.log"
+  register: file_status
+
+- name: Creates {{ data_folder }}/traefik/data/traefik.json.log if it doesn't exists
+  ansible.builtin.file:
+    path: "{{ data_folder }}/traefik/data/traefik.json.log"
+    state: touch
+    owner: root
+    group: root
+    mode: '0600'
+  when: not file_status.stat.exists
+
+- name: Create traefik Container
+  docker_container:
+    name: traefik
+    image: traefik:v3.1
+    restart_policy: unless-stopped
+    networks:
+      - name: "proxy"
+    ports:
+      - 80:80
+      - 443:443
+    env:
+      CF_API_EMAIL: "{{ CF_API_EMAIL }}"
+      CF_DNS_API_TOKEN: "{{CF_DNS_API_TOKEN}}"
+    volumes:
+      - /etc/localtime:/etc/localtime:ro
+      - /var/run/docker.sock:/var/run/docker.sock:ro
+      - "{{ data_folder }}/traefik/data/traefik.yml:/traefik.yml:ro"
+      - "{{ data_folder }}/traefik/data/acme.json:/acme.json"
+      - "{{ data_folder }}/traefik/data/traefik.json.log:/traefik.json.log"
+      # - ./data/config.yml:/config.yml:ro
+    labels:
+      traefik.enable: "true"
+      traefik.http.routers.traefik.entrypoints: "http"
+      traefik.http.routers.traefik.rule: "Host(`{{traefik_host}}`)"
+      traefik.http.middlewares.traefik-auth.basicauth.users: "{{ traefik_api_user }}:{{ traefik_api_password | password_hash('blowfish','1234567890123456789012') }}"
+      traefik.http.middlewares.traefik-https-redirect.redirectscheme.scheme: "https"
+      traefik.http.middlewares.sslheader.headers.customrequestheaders.X-Forwarded-Proto: "https"
+      traefik.http.routers.traefik.middlewares: "traefik-https-redirect"
+      traefik.http.routers.traefik-secure.entrypoints: "https"
+      traefik.http.routers.traefik-secure.rule: "Host(`{{traefik_host}}`)"
+      traefik.http.routers.traefik-secure.middlewares: "traefik-auth"
+      traefik.http.routers.traefik-secure.tls: "true"
+      traefik.http.routers.traefik-secure.tls.certresolver: "cloudflare"
+      traefik.http.routers.traefik-secure.tls.domains[0].main: "comprofix.com"
+      traefik.http.routers.traefik-secure.tls.domains[0].sans: "*.comprofix.com"
+      traefik.http.routers.traefik-secure.tls.domains[1].main: "comprofix.xyz"
+      traefik.http.routers.traefik-secure.tls.domains[1].sans: "*.comprofix.xyz"
+      traefik.http.routers.traefik-secure.service: "api@internal"
--- a/roles/traefik/templates/traefik.yml.j2
+++ b/roles/traefik/templates/traefik.yml.j2
@ -0,0 +1,42 @@
+api:
+  dashboard: true
+  debug: true
+
+entryPoints:
+  http:
+    address: ":80"
+    http:
+      redirections:
+        entryPoint:
+          to: https
+          scheme: https
+  https:
+    address: ":443"
+
+serversTransport:
+  insecureSkipVerify: true
+
+log:
+  level: DEBUG
+  filePath: /traefik.json.log
+  format: json
+
+providers:
+  docker:
+    endpoint: "unix:///var/run/docker.sock"
+    exposedByDefault: false
+  file:
+    filename: /config.yml
+
+certificatesResolvers:
+  cloudflare:
+    acme:
+      email: {{ CF_API_EMAIL }}
+      storage: acme.json
+      dnsChallenge:
+        provider: cloudflare
+        #disablePropagationCheck: true # uncomment this if you have issues pulling certificates through cloudflare, By setting this flag to true disables the need to wait for the propagation of the TXT record to all authoritative name servers.
+        resolvers:
+          - "1.1.1.1:53"
+          - "1.0.0.1:53"
+  
--- a/roles/traefik/vars/main.yml
+++ b/roles/traefik/vars/main.yml
@ -0,0 +1,14 @@
+$ANSIBLE_VAULT;1.1;AES256
+65353236643865303034613264613133353338613962646164333936353761336231643332303164
+3834613038663965376661373336646433353437373132300a353663633034643265653937396238
+66326632323432646239663762626230326338666138653330323566633864623734396639323062
+3735326666306239370a383439646335343965316464386265613437646163636335393139316232
+61396631356263333933626334313438633132663764326539393663636631303538636131303830
+31633037376231326436306463376134633031666431303133383237316530646261383733313132
+62343261303266613764633861393939343937343038383231353137333337383936623338313561
+64633330356639643863336437653137393364653833653934633762333461393035393963313432
+39633563636164363461326231306237343265626533366562626136643561636464663866303434
+64363663396334623738316238316135616162393566613631396163666134663765343230656135
+35646364666531303361623833643136663832363737623161386562393234393533306636363265
+37343438386439303931633434303939393062363138353732373163663761366337326437316537
+6137
--- a/scripts/backupvpsdocker
+++ b/scripts/backupvpsdocker
@ -0,0 +1,30 @@
+#!/bin/bash
+#
+#
+# Backup vps02 docker data
+
+
+#Stop all containers
+docker stop $(docker ps -a -q)
+
+date=$(date +%F)
+
+cd /data
+for dir in */; do
+    dir=${dir%*/}
+    backupfile="$dir-$date.tar.gz"
+    #echo "backup $dir"
+    tar -zcf /tmp/$backupfile $dir 
+
+    if [ $dir == "vaultwarden" ]; then
+        #echo "rclone vaultwarden"
+        rclone copy /tmp/$backupfile BitwardenBackup:BitwardenBackup
+    else
+        #echo "scp $backupfile"
+       #scp /tmp/$backupfile mmckinnon@truenas.comprofix.xyz:/mnt/datapool/data/backup/docker/
+    fi
+    rm /tmp/$backupfile
+done
+
+#Start all containers
+docker start $(docker ps -a -q)
--- a/scripts/rclone.conf
+++ b/scripts/rclone.conf
@ -0,0 +1,176 @@
+$ANSIBLE_VAULT;1.1;AES256
+31393237373262646664663739633130643562326538336561353265633064383466363532366332
+3966346334336430633238376438353961393936393037340a666263623538653061646366653831
+65363535646434393035626435353630626133643634373961393063343361646561643233633733
+3263323166336638380a626231353030393766376534333438643930313432383266323763633130
+33633333616561316465666133626261363361333433343733653266633337663863383137376533
+62363038363631626463303563643638623231306363386261646639316332613134383334383737
+63356561303735656638306566323432626531393332643634626531336230666338363433363435
+32313539326265643637656435613965626232333631343264343038393564663831343063646533
+61333835306632666136313637306165316434376234316632626632653133326633363734663033
+35396235646335653065313664383861323033306636636336376264326534353635396530313462
+30386237636438663363653032623030666438336438346434656637336662633930316536613832
+64323966656337666239616636333533366636383833356561643734613664303236333939663262
+63643736626163363362343161613532343564323661366261313331303466343639343437386439
+32616133316236363339333338336566366236333337623232366139353461353335383466316639
+64626661613530626639323233383065353033316238346635393633336431656666336436356638
+32336637356336666630323036326562353737316231386636666136616465353764313236643761
+65373836313037363065346339333031626230306366353632653936326463366665363664643161
+31623962383363663964326439396362643932633130313332633363666537363564333830613730
+31633766613639356161386132313863633830363963393663663564343732633366386235393464
+66643831643735353066626566356363643131376265346665623666366663343939636638383631
+66616562323164646235616137646632373631343834353832333632366636646332393537643439
+64326138343462343064303234646362633862383336306237643636623734363165616362313035
+37346437353566646133316631363735346561326565623965373833376438646439376630363634
+35333133643135333761646261646566626562623962636161616163316433613261386466613937
+35613531356265636339366139663865643863383035303365373034633239386261306539343539
+31633039363134363731616136343031363264323734623462383233613437656265666165616330
+39383661653561366365383462363538386439646436313761666163646334623737326563653034
+61636538643263366264343265353436346433643837623838666638343130663466656365663839
+33376332626537623865316136363938396161643466356131643736646138383462373961616531
+38376665386133373939396261336531333738646135326165363864663463356638633337363232
+62303736316263613431646263306436393932353062393531383965353137393163663664396461
+33636631623234383835343436313764663538306164386465356265396130343364343665376665
+38316533333338613439356465366663616231396234663633623264373366313432396134653663
+35353038626337346434326465343230653861323432653438623337653333393266613566326231
+35653465333062383863376365353832633731323066646366386262396431656330663666333038
+37663035613136393063373765373034376631613363643035666533323230303065333065656565
+38613633353862376436393838326664303330306538313363623862316131393064316530383432
+36653664613834336165653364643436643333316333306438643638643634363430633466373564
+30633032356430383239623466393339616639623661333339313337613734363237643539303862
+38323963383361623333336437333066366332643030623162653162303065313761666564366131
+32393431383731393233333138363138396139633831306137613534326535656265353736636364
+33643834353633343962386361303564393032303432626138626535623132333732623937366230
+30666530636130643737363039376463643161373437303235616564363132393836306430396366
+30363064316666626532323832343132313264653338653130643439656662633566363237303837
+64663661646462303761636130666561333636393962333232666134386439303166396637666265
+65313330373862363534373666393536333666643032306466626263646530353534316134363662
+63383965393731313138643035633064366130326562663763383963303339383233336331626361
+31366431336663356463306639613366396534626235326437383666643165333832333338386533
+35643763643938346437353365393333336263623533623936366337333730653632373037636434
+38323730336539303664386339356463616531376230383762666361663030653639343135326165
+33323234353766303839323736646463313733636133656561373038656431356338626632643534
+66616333646233656365346261633034383536393635613161373338343431383931353930343166
+61316332663065366365306632353963393766333036663137303462613262396561613664633434
+32376265306636323439333335316261626262636161646437316463333833343565663335383436
+34366531383361383532343630613965386465316463396535396132356635346635643465613065
+32333838303263323839633061373135303136343336323565326334343331333163393766643133
+32393439636632356330643662376365333238316230633430653133323965393330643065363866
+30643839373936316639373331363739356531333065303937646131663162343430346133633931
+36386464376238643461373133646638373439313431643831313064653666613537393264306665
+32653662303465303639323639636238633231306665396239376530326437383764386563633562
+66616238616336633265656463653036363932323964623135643936663961386164303365363661
+62303866643463613365333363613463623336306336306566383639363030343761316330353833
+32303066643464616639313666386330663433633831366338326665613538336539373439656532
+32356463363662666266663263333562363861626462666461343834383335333731336137303464
+38376633643439666538636439326266646239343664666266356665653565656339353261623462
+30336261653432376537356162613361636139366265343439353330653836336337646433316361
+63363638653435373635633834353161326230626138666439643531333031663335663638653361
+61633335396166336465623263343863373961643735623631383762613763656261383966323838
+30623264366138343839363636663733613836313166646137656165323662356139363564663837
+39656333346435633536383130383730313732653363666266303230363939653331653936356565
+31366663653332303630346438646431633161636230326330363862336466383161353732636431
+30666339383766626433633435643564323939366435363435636232343935373063316637316434
+39383461376466373165613639343362393732316532336535633465616434326464306162303066
+34666637356563393930326665616330643262633639663635626635313330336334633361393566
+37646263323731353764366563393866373435343361653539376533363332393736326261326338
+64303439356633343164633137373433363237663034383365653630393364383038313062316665
+38653038316339303035396234626438383863656332316535633231393232633332323331626661
+66666435653433623031393332613834613566643338646430393361636131333466356466663465
+61376461363238366566373635623464366139356430336162636232343061643634643230343332
+62363461393266666563326237326133616431393461353538366233386266303432663531373662
+63303866333865656663623565653664643934623566396565326264663237393566643135316130
+65386666343262373832663637346531663066363565396437373330373665376635653661616637
+39383233623262393361313264316230626565326466306563613930616465623531373636343439
+30643030616637313639306234643035326639643533613564303731373731646464323737356166
+39393839653431343431373034653536633531643934353432653636393937346230303162646537
+61623463343833613636316165633430613134663537333665303632613637326563373266383063
+33366439303538613134633130343439373666363566333663346536623464653334323533343939
+35316437653537396135326330653834613863356562323765346432343234636263376238356633
+36393334303635626535636134333863363333656632373430343264373832636138663338643565
+31323434346337653934666537303563306562666532376630643637626532613730643837303634
+39393565613034336339386366636661313330396232303832316666353965336563373466613563
+61633565653137386633343631653232373162346633366362373632623534616562343637653062
+35396265323930323938656663633030623766366239306435633438663136333865643263303261
+37313564383935653565633066313862633364323462373638613331386438383830656635316661
+35386236356331376565616633356631626661366339393163343739373735633062323930326430
+39643137383761623132323931303461366232323132323064386538373133613531393665353832
+66303338626639353539323063666235353532333437373433376337363035623639316431616264
+64343665306139666661623635396130373464646663393438366163613634336465396535373935
+33376530633266386664316532623863366131623766643364663061333964373331363366383631
+33313361646134363964366330356437386662323536306164663661346630376238333966346135
+33653134643564623263626432356562653833363935613863343834306436323137356239376437
+35626134646661633736666330663861396536326137376337346136366433323338373332623566
+65373966326232656337653139333762643961313162356461623536366230363034613066336133
+31613565383064306431333664396237373537646236636634373932326632346266373065356339
+31353466626530623431653366636663353263336332663164636366643134346239653239626434
+34373535316133366265333337663334646630383035653637663864663264306131343039663739
+32343037383537356331306539313130303961656164373533663839646530356562303964313135
+36626164333963313566633033393266363161353065343530303064646465616661313238663839
+39346134343735323561396631333838626434376663393661373436363962373564633634346339
+64356230623936356632313665633163343233366339626631396162343866636361373437336164
+36353666623930666565363932386232643062333836636638633035353061383932613332386636
+61396135623430323438633537346132363063326337653032353737356261616338363634663134
+32306638643835333331613432353766313530643034396632353762316436623336363662386137
+34353061666238613065323739656332313330323165373231383638306436383166393961633337
+36643235376532306137653237386563653337356331326435346431316564353462623038383838
+63636361383634313530666463653962303938356238393134326332623164663239316433313161
+62383866383466343936373137306331666261303636316136346264303563653966356136383065
+61636337353336326662643634323732646233613136643034336232333064306162346333666166
+36633766313733653435386432353937393137306665633766306236633162326534303061323963
+64386566626136336261363864663662373635346239366230616437633031633830633336313634
+61613636663738623338656165646561353638626265623739373630393336616366613636396330
+30643666326135343037303830613732643561313237393766353863666164656432666261626466
+36663934653432386662383134636631643466323132356266383065316265303164353330623633
+66623536383563323431613038613037306130343738393965616635613930636638306138393839
+65653030656264323837383238303231346434646363363134633730663562313366623038393133
+31303736376263656462643961666537303163666637613465626534623730323764353536306339
+63316132613634316133386636373836636237383830616236326663323365323834376365383066
+39356661366334393233303164666666656463373166393739636332616137393439656432663433
+36356136653231363763336364303339613038653438386233383364623630656236333661643362
+66333464306462353262373636323935653931663334643662303066383737323464376332326566
+37336336623765356536326239316561343666316562376635623734633832626632323563346235
+61393961343766663964326436663037613134643130666239303832313161326136326265643434
+38326631623836663464663734656538653636333061383633386261386236633832303830663233
+33623862663230666265316339633464626534363465643336646462326431393863656536613234
+39626135623637343865303965303035356635336439353463323937623465303934393631363238
+39333534306539303831393039623433336331636135356537353233333062666664623238326233
+64386534666562306561376432343032313966343532646533386137623664333336346131626361
+37363834643635343831646630346263653438623262333666316131636666366261303665636634
+30343634346137323830333637613434343639623338383432303063316639636462626366643535
+61643739386663643132313137633139373536313132356465373738613462363264663739356632
+34663131353034626361633863613933336465633131386530336663666361393335633437666333
+30303130623961376637326664393561363462303564633463333734336635653335336538303431
+37373331353039613436616130316633393261346331396337343565323565356238303431653237
+64366165383831376632366364616536326236626166633465616534613036633463663439303039
+66313138346338353765633964346137333639613862613638626136306233343536643737343662
+64323165333262623434643261646531396436333965383064313131303136663865316631316565
+66626466616661383564653435356261646337366435353335383234623034653633623364373062
+64313966323339663563373566363132656334636631623630623437326265393365656639386136
+35383539623565346263393966323232633030366439646639613763313932313038616362643562
+33663331336637383238313766336562613330363264666633376263383337333865363665326331
+35363866636431313235373535396230393831383738353232346265316432653666383236303161
+30643038616538343534323061353736653537346534643963313630636365333835356430643434
+33633031623137326530663835356462316161656364326633383761323337353934306536643333
+66346361363962366336613138633561636665653337373230613032383264306532373937383637
+66306331306639613065353332336234616136616461663631346532363835353065666463333864
+63366231323165623863633361386162373432303338366162356338306361326361393530646465
+34356364323365376462346661313530306434343837373064323431663130343838396363333538
+62373462396264363565616466633663373465626635613464626265386464396530303262306236
+64373736656361376266383432376432333632663736376134393466636539383264373462643961
+34343433633865656164636434363139316466376361306433663838613036653366613730396537
+30323631366664623834633761643662626438303132633063646536666162383162643737323538
+38623432366264626439383830646438336133656432613733656466333065616338303466386538
+37333135346633383736373932383263356638393966356537326632323631393462356366653938
+65363666353032626336666137653963653137643230313838653037393739356363326535373762
+35316461633763663263626133383162396164393436363665313633663531393164663061313236
+32306535383731326139343566356665376238356532313063303962393639366164373530396535
+33316336363562316266353534393466653739373266313533323133313464626236336137636264
+34393730373662316137633564663864626137303438333262366466396539356137383835346361
+30616533626338333532383434633463653062326437353831376166383365393330646432636266
+62656238663761316532313366346661376237666436346335656439396564363464323063353664
+39303261346631356536643961666638353334303932303938383830616263633738653837643861
+65336437326638353365323232666332333162663935306665636463623538346166653764626139
+63653736363736623139366164623437623734343766666239316338663136623232383832623632
+66306536363836663939386261383266303664616363346662643835356239666338386665613066
+323839643933313039656433313432396532
--- a/tasks/base.yml
+++ b/tasks/base.yml
@ -0,0 +1,119 @@
+---
+- name: Update cache
+  apt:
+    force_apt_get: yes
+    update_cache: yes
+  when: ansible_distribution == 'Debian' or ansible_distribution == 'Ubuntu'
+
+- name: Update all packages to their latest version
+  apt:
+    name: "*"
+    force_apt_get: yes
+    state: latest
+  when: ansible_distribution == 'Debian' or ansible_distribution == 'Ubuntu'
+
+- name: Upgrade all packages on servers
+  apt: 
+    upgrade: dist
+    force_apt_get: yes
+  when: ansible_distribution == 'Debian' or ansible_distribution == 'Ubuntu'
+
+- name: Install required packages
+  package:
+    name: "{{ install_packages }}"
+    state: present
+  become: yes
+  tags:
+    - install_packages
+  when: ansible_distribution == 'Debian' or ansible_distribution == 'Ubuntu'
+
+- name: Remove /usr/lib/python3.11/EXTERNALLY-MANAGED
+  file:
+    path: /usr/lib/python3.11/EXTERNALLY-MANAGED
+    state: absent
+  when: ansible_distribution == 'Debian' or ansible_distribution == 'Ubuntu'
+
+# - name: Download Oh My Zsh installation script
+#   get_url:
+#     url: https://raw.githubusercontent.com/ohmyzsh/ohmyzsh/master/tools/install.sh
+#     dest: /tmp/install_ohmyzsh.sh
+
+# - name: Run Oh My Zsh installation script
+#   become: no
+#   command: sh /tmp/install_ohmyzsh.sh --unattended
+#   register: ohmyzsh_result
+#   failed_when: "'FAILED' in ohmyzsh_result.stderr"
+
+# - name: Download zsh Dracula Theme
+#   become: no
+#   unarchive:
+#     src: https://github.com/dracula/zsh/archive/refs/heads/master.zip
+#     dest: "/tmp"
+#     remote_src: yes
+
+# - name: Download moe theme for zsh
+#   become: no
+#   get_url:
+#     url: https://git.comprofix.com/mmckinnon/dotfiles/raw/branch/master/oh-my-zsh/moe.zsh-theme
+#     dest: "/home/{{ ansible_user }}/.oh-my-zsh/themes"
+#     force: true
+
+# - name: Move zsh theme to correct folder
+#   become: no
+#   copy: 
+#     src: /tmp/zsh-master/
+#     dest: /home/{{ ansible_user }}/.oh-my-zsh/themes
+#     remote_src: yes
+
+# - name: Create vim config paths
+#   become: no
+#   file:
+#     path: "/home/{{ ansible_user }}/.vim/pack/themes/start/dracula"
+#     state: directory
+
+# - name: Download vim Dracula Theme
+#   become: no
+#   unarchive:
+#     src: https://github.com/dracula/vim/archive/refs/heads/master.zip
+#     dest: "/tmp"
+#     remote_src: yes
+
+# - name: Move vim theme to correct folder
+#   become: no
+#   copy: 
+#     src: /tmp/vim-master/ 
+#     dest: /home/{{ ansible_user }}/.vim/pack/themes/start/dracula
+#     remote_src: yes
+
+# - name: Get zsh config
+#   become: no
+#   get_url:
+#     url: https://git.comprofix.com/mmckinnon/dotfiles/raw/branch/master/zsh/zshrc
+#     dest: "/home/{{ ansible_user }}/.zshrc"
+#     force: true
+
+# - name: Get vim config
+#   become: no
+#   get_url:
+#     url: https://git.comprofix.com/mmckinnon/dotfiles/raw/branch/master/vim/vimrc
+#     dest: "/home/{{ ansible_user }}/.vimrc"
+#     force: true
+
+# - name: Set shell zsh
+#   user: 
+#     name: "{{ ansible_user }}"
+#     shell: /bin/zsh
+
+# - name: Set moe theme for zsh
+#   become: no
+#   ansible.builtin.lineinfile:
+#     path: "/home/{{ansible_user}}/.zshrc"
+#     regexp: '^ZSH_THEME="dracula"'
+#     line: 'ZSH_THEME="moe"'
+
+
+
+
+
+
+
--- a/tasks/dozzle.yml
+++ b/tasks/dozzle.yml
@ -0,0 +1,29 @@
+---
+- name: Create directories
+  file:
+    path: "{{ item }}"
+    state: directory
+  with_items:
+    - "/mnt/nfs/docker/dozzle"
+    - "/mnt/nfs/docker/dozzle/config"
+
+- name: Create the dozzle container
+  docker_container:
+    name: dozzle
+    image: amir20/dozzle:v8.4.1
+    restart_policy: unless-stopped
+    recreate: true
+    networks:
+      - name: proxy
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock
+    env:
+      DOZZLE_LEVEL: "trace"
+      DOZZLE_REMOTE_HOST: "tcp://omada.comprofix.xyz:2375,tcp://vps02.comprofix.com:2375"
+    labels:
+      traefik.enable: "true"
+      traefik.http.routers.dozzle.rule: "Host(`dozzle.comprofix.xyz`)"
+      traefik.http.routers.dozzle.entrypoints: "https"
+      traefik.http.routers.dozzle.tls: "true"
+      traefik.http.services.dozzle.loadbalancer.server.port: "8080"
+      traefik.http.services.dozzle.loadbalancer.server.scheme: "http"
--- a/tasks/homepage.yml
+++ b/tasks/homepage.yml
@ -0,0 +1,40 @@
+---
+- name: Create directories
+  file:
+    path: "{{ item }}"
+    state: directory
+  with_items:
+    - "{{ data_folder }}/homepage"
+    - "{{ data_folder }}/homepage/config"
+
+- name: Get dashboard-icons
+  git:
+    repo: https://github.com/walkxcode/dashboard-icons.git
+    dest: /data/dashboard-icons
+    update: yes
+
+- name: Create the homepage container
+  docker_container:
+    name: homepage
+    image: ghcr.io/gethomepage/homepage:v0.9.6
+    restart_policy: unless-stopped
+    recreate: true
+    networks:
+      - name: proxy
+    dns_servers:
+      - 10.10.10.1
+    env:
+      LOG_LEVEL: debug
+    volumes:
+      - "{{ data_folder }}/homepage/config:/app/config"
+      - "{{ data_folder }}/dashboard-icons:/app/public/icons"
+      - /var/run/docker.sock:/var/run/docker.sock 
+    labels:
+      traefik.enable: "true"
+      traefik.http.routers.homepage.rule: "Host(`homepage.comprofix.xyz`)"
+      traefik.http.routers.homepage.entrypoints: "https"
+      traefik.http.routers.homepage.tls: "true"
+      traefik.http.routers.homepage.service: "homepage"
+      traefik.http.services.homepage.loadbalancer.server.port: "3000"
+  register: container_homepage
+
--- a/tasks/idrac.yml
+++ b/tasks/idrac.yml
@ -0,0 +1,15 @@
+---
+- name: Create the Dell_R730xd Fan Contoller container
+  docker_container:
+    name: Dell_R730xd
+    image: tigerblue77/dell_idrac_fan_controller:latest@sha256:5184af88c6c03204611d40d4b1c6bc36202762592d16a97236bb4254951d23b0
+    restart_policy: unless-stopped
+    recreate: true
+    env:
+      IDRAC_HOST: "10.10.10.138"
+      IDRAC_USERNAME: "root"
+      IDRAC_PASSWORD: "calvin"
+      FAN_SPEED: "35"
+      CPU_TEMPERATURE_THRESHOLD: "80"
+      CHECK_INTERVAL: "60"
+      DISABLE_THIRD_PARTY_PCIE_CARD_DELL_DEFAULT_COOLING_RESPONSE: "true"
--- a/tasks/invoiceninja.yml
+++ b/tasks/invoiceninja.yml
@ -0,0 +1,95 @@
+---
+- name: Create directories
+  file:
+    path: "{{ item }}"
+    state: directory
+  with_items:
+    - "/mnt/nfs/docker/invoiceninja/"
+    - "/mnt/nfs/docker/invoiceninja/config"
+    - "/mnt/nfs/docker/invoiceninja/db"
+
+- name: "create stack.env"
+  copy:
+    dest: "/mnt/nfs/docker/invoiceninja/stack.env"
+    content: |
+      APP_NAME="Invoice Ninja"
+      APP_ENV=production
+      APP_KEY="{{ IN_APP_KEY }}"
+      APP_DEBUG=false
+      APP_URL="{{ IN_APP_URL }}"
+      REQUIRE_HTTPS=true
+      TRUSTED_PROXIES='*'
+      SESSION_ENCRYPT=false
+      SESSION_SECURE=false
+      DB_CONNECTION="mysql"
+      MULTI_DB_ENABLED=false
+      DB_HOST="{{MYSQL_HOST}}"
+      DB_DATABASE="{{IN_DB_DATABASE}}"
+      DB_USERNAME="{{IN_DB_USERNAME}}"
+      DB_PASSWORD="{{IN_DB_PASSWORD}}"
+      DB_PORT="3306"
+      DEMO_MODE=false
+      BROADCAST_DRIVER=log
+      LOG_CHANNEL=stack
+      CACHE_DRIVER=file
+      #QUEUE_CONNECTION=sync
+      QUEUE_CONNECTION=database
+      SESSION_DRIVER=file
+      SESSION_LIFETIME=120
+      REDIS_HOST=127.0.0.1
+      REDIS_PASSWORD=null
+      REDIS_PORT=6379
+      MAIL_MAILER="smtp"
+      MAIL_HOST="{{MAIL_HOST}}"
+      MAIL_PORT="{{MAIL_PORT}}"
+      MAIL_ENCRYPTION="tls"
+      MAIL_FROM_ADDRESS="{{MAIL_FROM}}"
+      MAIL_FROM_NAME="{{MAIL_FROM_NAME}}"
+      POSTMARK_API_TOKEN=
+      GOOGLE_MAPS_API_KEY=
+      ERROR_EMAIL=
+      NINJA_ENVIRONMENT="selfhost"
+      #options - snappdf / phantom / hosted_ninja
+      PDF_GENERATOR=hosted_ninja
+      PHANTOMJS_KEY='a-demo-key-with-low-quota-per-ip-address'
+      PHANTOMJS_SECRET=secret
+      UPDATE_SECRET=secret
+      SENTRY_LARAVEL_DSN=https://32f01ea994744fa08a0f688769cef78a@sentry.invoicing.co/ 
+
+- name: Create the invoiceninja-app container
+  docker_container:
+    name: invoiceninja-app
+    image: invoiceninja/invoiceninja:5
+    env_file: /mnt/nfs/docker/invoiceninja/stack.env
+    restart_policy: unless-stopped
+    recreate: true
+    networks:
+      - name: proxy
+    volumes:
+      - /mnt/nfs/docker/invoiceninja/config/hosts:/etc/hosts
+      - /mnt/nfs/docker/invoiceninja/docker/app/public:/var/www/app/public
+      - /mnt/nfs/docker/invoiceninja/docker/app/storage:/var/www/app/storage
+
+- name: Create the invoiceninja-nginx container
+  docker_container:
+    name: invoiceninja-nginx
+    image: nginx:1.27.1
+    env_file: /mnt/nfs/docker/invoiceninja/stack.env
+    restart_policy: unless-stopped
+    recreate: true
+    networks:
+      - name: proxy
+    volumes:
+      - /mnt/nfs/docker/invoiceninja/config/nginx/in-vhost.conf:/etc/nginx/conf.d/in-vhost.conf
+      - /mnt/nfs/docker/invoiceninja/docker/app/public:/var/www/app/public
+      - /mnt/nfs/docker/invoiceninja/docker/app/storage:/var/www/app/storage
+    labels:
+      traefik.enable: "true"
+      traefik.http.routers.invoiceninja.rule: "Host(`invoice.comprofix.com`)"
+      traefik.http.routers.invoiceninja.entrypoints: "https"
+      traefik.http.routers.invoiceninja.tls: "true"
+      traefik.http.services.invoiceninja.loadbalancer.server.port: "80"
+      traefik.http.services.invoiceninja.loadbalancer.server.scheme: "http"
+
+      
+    
--- a/tasks/jellyseerr.yml
+++ b/tasks/jellyseerr.yml
@ -0,0 +1,29 @@
+---    
+- name: Create directories
+  file:
+    path: "{{ item }}"
+    state: directory
+  with_items:
+    - "/mnt/nfs/docker/jellyseerr"
+    - "/mnt/nfs/docker/jellyseerr/config"
+  
+- name: Create the jellyseerr container
+  docker_container:
+    name: jellyseerr
+    image: fallenbagel/jellyseerr:1.9.2 
+    restart_policy: unless-stopped
+    recreate: true
+    networks:
+      - name: proxy
+    env:
+      PUID: "1000"
+      PGID: "1000"
+      TZ: "Australia/Brisbane"
+    volumes:
+      - /mnt/nfs/docker/jellyseerr/config:/app/config 
+    labels:
+      traefik.enable: "true"
+      traefik.http.routers.jellyseerr.rule: "Host(`jellyseerr.comprofix.xyz`)"
+      traefik.http.routers.jellyseerr.entrypoints: "https"
+      traefik.http.routers.jellyseerr.tls: "true"
+      traefik.http.services.jellyseerr.loadbalancer.server.port: "5055"
--- a/tasks/lidarr.yml
+++ b/tasks/lidarr.yml
@ -0,0 +1,36 @@
+---
+- name: Set Facts
+  set_fact:
+    container_name: 'lidarr'
+
+- name: Create directories
+  file:
+    path: "{{ item }}"
+    state: directory
+  with_items:
+    - "/mnt/nfs/docker/lidarr"
+    - "/mnt/nfs/docker/lidarr/config"
+  
+- name: Create the lidarr container
+  docker_container:
+    name: lidarr
+    image: ghcr.io/linuxserver/lidarr:latest@sha256:a77af413426b8509fad2d02f5b89104a5766ee6ebb13497d73993e74f6cfa0a8
+    restart_policy: unless-stopped
+    recreate: true
+    networks:
+      - name: proxy
+    env:
+      PUID: "1000"
+      PGID: "1000"
+      TZ: "Australia/Brisbane"
+      AUTO_UPDATE: "true" #optional
+      DOCKER_MODS: "ghcr.io/themepark-dev/theme.park:lidarr"
+    volumes:
+      - /mnt/nfs/docker/lidarr/config:/config
+      - /mnt/nfs/data:/data
+    labels:
+      traefik.enable: "true"
+      traefik.http.routers.lidarr.rule: "Host(`lidarr.comprofix.xyz`)"
+      traefik.http.routers.lidarr.entrypoints: "https"
+      traefik.http.routers.lidarr.tls: "true"
+      traefik.http.services.lidarr.loadbalancer.server.port: "8686"
--- a/tasks/mariadb.yml
+++ b/tasks/mariadb.yml
@ -0,0 +1,29 @@
+---
+- name: Set Facts
+  set_fact:
+    container_name: 'mariadb'
+
+- name: Create directories
+  file:
+    path: "{{ item }}"
+    state: directory
+  with_items:
+    - "/mnt/nfs/docker/mariadb"
+    - "/mnt/nfs/docker/mariadb/config"
+  
+- name: Create the mariadb container
+  docker_container:
+    name: "mariadb"
+    image: ghcr.io/linuxserver/mariadb:10.11.8
+    restart_policy: unless-stopped
+    recreate: true
+    ports:
+      - 3306:3306
+    env:
+      PUID: "0"
+      PGID: "0"
+      MYSQL_ROOT_PASSWORD: "{{MYSQL_ROOT_PASSWORD}}"
+      TZ: "Australia/Brisbane"
+    volumes:
+      - "/mnt/nfs/docker/mariadb/config:/config"
+    
--- a/tasks/mealie.yml
+++ b/tasks/mealie.yml
@ -0,0 +1,36 @@
+---
+- name: Create directories
+  file:
+    path: "{{ item }}"
+    state: directory
+  with_items:
+    - "/mnt/nfs/docker/mealie"
+    - "/mnt/nfs/docker/mealie/config"
+
+- name: Create the mealie container
+  docker_container:
+    name: mealie
+    image: ghcr.io/mealie-recipes/mealie:v1.12.0
+    restart_policy: unless-stopped
+    networks:
+      - name: proxy
+    env:
+      PUID: "1000"
+      PGID: "1000"
+      TZ: "Australia/Brisbane"
+      RECIPE_PUBLIC: "true"
+      RECIPE_SHOW_NUTRITION: "false"
+      RECIPE_SHOW_ASSETS: "true"
+      RECIPE_LANDSCAPE_VIEW: "true"
+      RECIPE_DISABLE_COMMENTS: "true"
+      RECIPE_DISABLE_AMOUNT: "true"
+      BASE_URL: "mealie.comprofix.xyz"
+      SMTP_HOST: "{{MAIL_HOST}}"
+    volumes:
+      - /mnt/nfs/docker/mealie/data/:/app/data
+    labels:
+      traefik.enable: "true"
+      traefik.http.routers.mealie.rule: "Host(`mealie.comprofix.xyz`)"
+      traefik.http.routers.mealie.entrypoints: "https"
+      traefik.http.routers.mealie.tls: "true"
+      traefik.http.services.mealie.loadbalancer.server.port: "9000"
--- a/tasks/osticket.yml
+++ b/tasks/osticket.yml
@ -0,0 +1,61 @@
+---
+- name: Create directories
+  file:
+    path: "{{ item }}"
+    state: directory
+  with_items:
+    - "/mnt/nfs/docker/osticket"
+    - "/mnt/nfs/docker/osticket/config"
+
+- name: Create the osticket container
+  docker_container:
+    name: osticket
+    image: devinsolutions/osticket:1.17.5
+    restart_policy: unless-stopped
+    recreate: true
+    networks:
+      - name: proxy
+    env:
+      SMTP_HOST: "{{MAIL_HOST}}"
+      MYSQL_HOST: "{{MYSQL_HOST}}"
+      MYSQL_DATABASE: "{{OST_DATABASE}}"
+      MYSQL_USER: "{{OST_DB_USER}}"
+      MYSQL_PASSWORD: "{{OST_DB_PASSWORD}}"
+      INSTALL_SECRET: "{{OST_SIRI}}"
+    labels:
+      traefik.enable: "true"
+      traefik.http.routers.osticket.rule: "Host(`helpdesk.comprofix.com`)"
+      traefik.http.routers.osticket.entrypoints: "https"
+      traefik.http.routers.osticket.tls: "true"
+      traefik.http.services.osticket.loadbalancer.server.port: "80"
+      traefik.http.services.osticket.loadbalancer.server.scheme: "http"
+
+- name: Add tzdata to osTicket container
+  community.docker.docker_container_exec:
+    container: osticket
+    command: apk add tzdata
+  
+- name: Set container Timezone
+  community.docker.docker_container_exec:
+    container: osticket
+    command: "ln -s /usr/share/zoneinfo/Australia/Brisbane /etc/localtime"
+
+- name: Set PHP Timezone
+  community.docker.docker_container_exec:
+    container: osticket
+    command: "sed -i 's|UTC|Australia/Brisbane|g' /usr/local/etc/php/conf.d/php-osticket.ini"
+
+- name: Patch mysqli.php for timezone
+  community.docker.docker_container_exec:
+    container: osticket
+    command: "sed -i 's|system_time_zone|time_zone|g' /var/www/html/include/mysqli.php"
+
+- name: Clear ost_sessions table
+  mysql_query:
+    login_host: "{{MYSQL_HOST}}"
+    login_user: "{{OST_DB_USER}}"
+    login_password: "{{OST_DB_PASSWORD}}"
+    login_db: "{{OST_DATABASE}}"
+    query: 
+      - USE comprofix_ost; 
+      - TRUNCATE TABLE ost_session;
--- a/tasks/postgres.yml
+++ b/tasks/postgres.yml
@ -0,0 +1,22 @@
+---
+- name: Create directories
+  file:
+    path: "{{ item }}"
+    state: directory
+  with_items:
+    - "/mnt/nfs/docker/postgres"
+    - "/mnt/nfs/docker/postgres/config"
+
+- name: Create the postgres container
+  docker_container:
+    name: postgres
+    image: postgres:16-alpine
+    restart_policy: unless-stopped
+    recreate: true
+    ports:
+      - 5432:5432
+    env:
+      POSTGRES_PASSWORD: "{{POSTGRES_PASSWORD}}"
+    volumes:
+      - /mnt/nfs/docker/postgres/db-data:/var/lib/postgresql/data
+
--- a/tasks/prowlarr.yml
+++ b/tasks/prowlarr.yml
@ -0,0 +1,31 @@
+---
+- name: Create directories
+  file:
+    path: "{{ item }}"
+    state: directory
+  with_items:
+    - "/mnt/nfs/docker/prowlarr"
+    - "/mnt/nfs/docker/prowlarr/config"
+  
+- name: Create the prowlarr container
+  docker_container:
+    name: prowlarr
+    image: linuxserver/prowlarr:1.23.1
+    restart_policy: unless-stopped
+    recreate: true
+    networks:
+      - name: proxy
+    env:
+      PUID: "1000"
+      PGID: "1000"
+      TZ: "Australia/Brisbane"
+      AUTO_UPDATE: "true" #optional
+      DOCKER_MODS: "ghcr.io/themepark-dev/theme.park:prowlarr"
+    volumes:
+      - /mnt/nfs/docker/prowlarr/config:/config
+    labels:
+      traefik.enable: "true"
+      traefik.http.routers.prowlarr.rule: "Host(`prowlarr.comprofix.xyz`)"
+      traefik.http.routers.prowlarr.entrypoints: "https"
+      traefik.http.routers.prowlarr.tls: "true"
+      traefik.http.services.prowlarr.loadbalancer.server.port: "9696"
--- a/tasks/pykms.yml
+++ b/tasks/pykms.yml
@ -0,0 +1,28 @@
+---
+- name: Create directories
+  file:
+    path: "{{ item }}"
+    state: directory
+  with_items:
+    - "/mnt/nfs/docker/pykms"
+    - "/mnt/nfs/docker/pykms/config"
+  
+- name: Create the pykms container
+  docker_container:
+    name: pykms
+    image: ghcr.io/py-kms-organization/py-kms:latest
+    restart_policy: unless-stopped
+    recreate: true
+    networks:
+      - name: proxy_network
+    ports:
+      - "1688:1688"
+    env:
+      IP: "0.0.0.0"
+      SQLITE: "true"
+      HWID: "RANDOM"
+      LOGLEVEL: "INFO"
+    volumes:
+      - /mnt/nfs/docker/pykms/db:/home/py-kms/db
+      - /etc/localtime:/etc/localtime:ro
+
--- a/tasks/radarr.yml
+++ b/tasks/radarr.yml
@ -0,0 +1,31 @@
+---
+- name: Create directories
+  file:
+    path: "{{ item }}"
+    state: directory
+  with_items:
+    - "/mnt/nfs/docker/radarr"
+    - "/mnt/nfs/docker/radarr/config"
+  
+- name: Create the radarr container
+  docker_container:
+    name: radarr
+    image: linuxserver/radarr:5.9.1
+    restart_policy: unless-stopped
+    recreate: true
+    networks:
+      - name: proxy
+    env:
+      PUID: "1000"
+      PGID: "1000"
+      TZ: "Australia/Brisbane"
+      DOCKER_MODS: "ghcr.io/themepark-dev/theme.park:radarr"
+    volumes:
+      - /mnt/nfs/docker/radarr/config:/config
+      - /mnt/nfs/data:/data
+    labels:
+      traefik.enable: "true"
+      traefik.http.routers.radarr.rule: "Host(`radarr.comprofix.xyz`)"
+      traefik.http.routers.radarr.entrypoints: "https"
+      traefik.http.routers.radarr.tls: "true"
+      traefik.http.services.radarr.loadbalancer.server.port: "7878"
--- a/tasks/readarr.yml
+++ b/tasks/readarr.yml
@ -0,0 +1,31 @@
+---
+- name: Create directories
+  file:
+    path: "{{ item }}"
+    state: directory
+  with_items:
+    - "/mnt/nfs/docker/readarr"
+    - "/mnt/nfs/docker/readarr/config"
+  
+- name: Create the readarr container
+  docker_container:
+    name: readarr
+    image: ghcr.io/linuxserver/readarr:develop@sha256:dbca70a2dedff17b12698f55c02a49e3ec37e8ce884c5352b54264f9a3979aae
+    restart_policy: unless-stopped
+    recreate: true
+    networks:
+      - name: proxy
+    env:
+      PUID: "1000"
+      PGID: "1000"
+      TZ: "Australia/Brisbane"
+      DOCKER_MODS: "ghcr.io/themepark-dev/theme.park:readarr"
+    volumes:
+      - /mnt/nfs/docker/readarr/config/:/config
+      - /mnt/nfs/data/:/data
+    labels:
+      traefik.enable: "true"
+      traefik.http.routers.readarr.rule: "Host(`readarr.comprofix.xyz`)"
+      traefik.http.routers.readarr.entrypoints: "https"
+      traefik.http.routers.readarr.tls: "true"
+      traefik.http.services.readarr.loadbalancer.server.port: "8787"
--- a/tasks/sabnzbd.yml
+++ b/tasks/sabnzbd.yml
@ -0,0 +1,32 @@
+---
+- name: Create directories
+  file:
+    path: "{{ item }}"
+    state: directory
+  with_items:
+    - "/mnt/nfs/docker/sabnzbd"
+    - "/mnt/nfs/docker/sabnzbd/config"
+  
+- name: Create the sabnzbd container
+  docker_container:
+    name: sabnzbd
+    image: linuxserver/sabnzbd:4.3.3
+    restart_policy: unless-stopped
+    recreate: true
+    networks:
+      - name: proxy
+    env:
+      PUID: "1000"
+      PGID: "1000"
+      TZ: "Australia/Brisbane"
+      HOSTNAME: "sabnzbd.comprofix.xyz"
+      DOCKER_MODS: "ghcr.io/themepark-dev/theme.park:sabnzbd"
+    volumes:
+      - /mnt/nfs/docker/sabnzbd/config:/config
+      - /mnt/nfs/data:/data
+    labels:
+      traefik.enable: "true"
+      traefik.http.routers.sabnzbd.rule: "Host(`sabnzbd.comprofix.xyz`)"
+      traefik.http.routers.sabnzbd.entrypoints: "https"
+      traefik.http.routers.sabnzbd.tls: "true"
+      traefik.http.services.sabnzbd.loadbalancer.server.port: "8080"
--- a/tasks/sonarr.yml
+++ b/tasks/sonarr.yml
@ -0,0 +1,31 @@
+---
+- name: Create directories
+  file:
+    path: "{{ item }}"
+    state: directory
+  with_items:
+    - "/mnt/nfs/docker/sonarr"
+    - "/mnt/nfs/docker/sonarr/config"
+  
+- name: Create the sonarr container
+  docker_container:
+    name: sonarr
+    image: linuxserver/sonarr:4.0.9
+    restart_policy: unless-stopped
+    recreate: true
+    networks:
+      - name: proxy
+    env:
+      PUID: "1000"
+      PGID: "1000"
+      TZ: "Australia/Brisbane"
+      DOCKER_MODS: "ghcr.io/themepark-dev/theme.park:sonarr"
+    volumes:
+      - /mnt/nfs/docker/sonarr/config/:/config
+      - /mnt/nfs/data:/data
+    labels:
+      traefik.enable: "true"
+      traefik.http.routers.sonarr.rule: "Host(`sonarr.comprofix.xyz`)"
+      traefik.http.routers.sonarr.entrypoints: "https"
+      traefik.http.routers.sonarr.tls: "true"
+      traefik.http.services.sonarr.loadbalancer.server.port: "8989"
--- a/tasks/speedtest.yml
+++ b/tasks/speedtest.yml
@ -0,0 +1,41 @@
+---
+- name: Create directories
+  file:
+    path: "{{ item }}"
+    state: directory
+  with_items:
+    - "/mnt/nfs/docker/speedtest"
+    - "/mnt/nfs/docker/speedtest/config"
+
+- name: Create the speedtest container
+  docker_container:
+    name: speedtest
+    image: lscr.io/linuxserver/speedtest-tracker:0.21.2
+    restart_policy: unless-stopped
+    recreate: true
+    networks:
+      - name: proxy
+    env:
+      APP_KEY: "base64:ViJcK7rSIwGC+TAW7pRWnczB43zPPVHH2Hx80t7eVm0="
+      PUID: "1000"
+      PGID: "1000"
+      DB_CONNECTION: "mysql"
+      DB_HOST: "{{ MYSQL_HOST }}"
+      DB_PORT: "3306"
+      DB_DATABASE: "{{ST_DATABASE}}"
+      DB_USERNAME: "{{ST_DB_USERNAME}}"
+      DB_PASSWORD: "{{ST_DB_PASSWORD}}"
+      TZ: "Australia/Brisbane"
+      SPEEDTEST_SCHEDULE: "0 * * * *"
+      DISPLAY_TIMEZONE: "Australia/Brisbane"
+
+    volumes:
+      - /mnt/nfs/docker/speedtest/config:/config
+      - /mnt/nfs/docker/speedtest/web:/etc/ssl/web
+    labels:
+      traefik.enable: "true"
+      traefik.http.routers.speedtest.rule: "Host(`speedtest.comprofix.xyz`)"
+      traefik.http.routers.speedtest.entrypoints: "https"
+      traefik.http.routers.speedtest.tls: "true"
+      traefik.http.services.speedtest.loadbalancer.server.port: "80"
+      traefik.http.services.speedtest.loadbalancer.server.scheme: "http"
--- a/tasks/vaultwarden.yml
+++ b/tasks/vaultwarden.yml
@ -0,0 +1,64 @@
+---
+- name: Create directories
+  file:
+    path: "{{ item }}"
+    state: directory
+  with_items:
+    - "{{ data_folder }}/vaultwarden"
+    - "{{ data_folder }}/vaultwarden/config"
+  
+- name: Create the vaultwarden container
+  docker_container:
+    name: vaultwarden
+    image: vaultwarden/server:1.32.0
+    restart_policy: unless-stopped
+    recreate: true
+    networks:
+      - name: proxy
+    env:
+      PUID: "1000"
+      PGID: "1000"
+      TZ: "Australia/Brisbane"
+    volumes:
+      - "{{ data_folder }}/vaultwarden/data:/data"
+    labels:
+      traefik.enable: "true"
+      traefik.http.routers.vaultwarden.rule: "Host(`vault.comprofix.com`)"
+      traefik.http.routers.vaultwarden.entrypoints: "https"
+      traefik.http.routers.vaultwarden.tls: "true"
+      traefik.http.routers.vaultwarden.service: "vaultwarden"
+      traefik.http.services.vaultwarden.loadbalancer.server.port: "80"
+  register: container
+
+- name: Create rclone config folder
+  file:
+    path: "/root/.config/rclone"
+    state: directory
+
+- name: Copy rclone config
+  copy:
+    src: scripts/rclone.conf
+    dest: /root/.config/rclone/rclone.conf
+    decrypt: yes
+    mode: "0600"
+
+- name: copy backup script
+  copy:
+    src: scripts/backupvpsdocker
+    dest: /usr/local/sbin/backupvpsdocker
+    mode: 0755
+
+- name: Setup cron job for backup
+  cron:
+    name: backup backupvpsdocker
+    minute: 0
+    hour: 4
+    job: "/usr/local/sbin/backupvpsdocker >/dev/null 2>&1"
+    
+
+
+
+
+
+
+
--- a/vault.sh
+++ b/vault.sh
@ -0,0 +1,41 @@
+#!/bin/bash
+
+# If number of arguments is 0
+if [ $# -eq 0 ]
+  then
+    echo "This script will encrypt of decrypt all files containing secrets."
+    echo "There are all files in vars as well as all secrets.yaml files under each service."
+    echo "Specify 'decrypt' or 'encrypt' as argument"
+    echo "If you put the vault password in a password file named .vault_password, the script will not ask for a password."
+    exit 1
+fi
+
+files=`find . \( -type d -name 'group_vars' -o -name 'vars' \) -exec find {} -type f \;`
+
+# password_type=--ask-vault-password
+# if [ -f "~/.vault_password.txt" ]
+#   then
+#     if [ `stat -c %a ~/.vault_password.txt` != "600" ]
+#       then
+#         echo "~/.vault_password.txt file has bad permissions; fixing this to 600"
+#         chmod 600 ~/.vault_password.txt
+#     fi
+#     password_type="--vault-password-file=~/.vault_password.txt"
+# fi
+
+if [ $1 == "encrypt" ]
+  then
+    ansible-vault encrypt --vault-password-file=~/.vault_password.txt $files
+    for value in $files; do
+        echo $value;
+    done
+
+elif [ $1 == "decrypt" ]
+  then
+    ansible-vault decrypt --vault-password-file=~/.vault_password.txt $files
+    for value in $files; do
+        echo $value;
+    done
+else
+    echo "Wrong argument supplied.  Run without arguments to see allowed ones."
+fi