boxswapper
170146efb1
Refactored the single ansible-playbook.yml into granular roles under roles/: - packages: dnf update + package installs - directories: /opt/apps/* directory creation - sysctl: ip_forward, src_valid_mark, vm.max_map_count tuning - network: npm_internal podman network - wireguard: kernel module, wg-easy container, nftables hook patching - npm: Nginx Proxy Manager container - gitea: Gitea container - jellyfin: Jellyfin container - wazuh: cert generation + indexer/manager/dashboard containers Top-level playbook is now a role dispatcher with image pre-pull kept upfront. n8n deployment kept as commented-out guidance with an enable checklist. All variables remain in top-level vars.yml. Done by Sisyphus.
19 lines
423 B
YAML
19 lines
423 B
YAML
---
|
|
- name: Deploy Nginx Proxy Manager
|
|
containers.podman.podman_container:
|
|
image: "docker.io/jc21/nginx-proxy-manager:latest"
|
|
name: npm
|
|
restart_policy: always
|
|
recreate: true
|
|
state: started
|
|
ports:
|
|
- "80:80"
|
|
- "81:81"
|
|
- "443:443"
|
|
volumes:
|
|
- "/opt/apps/npm:/data:z"
|
|
- "/opt/apps/letsencrypt:/etc/letsencrypt:z"
|
|
network:
|
|
- npm_internal
|
|
ip: '10.10.0.19'
|