playbook.yml

---

- name: Prepare local
  hosts: localhost
  roles:
    - role: ansible-modules-bitwarden
    - role: setup-cloudflared-credentials
      tags:
        - config

- name: Set up homelab
  hosts: homelab
  vars_files:
          - config.yml
  roles:
    - role: ansible-modules-bitwarden

    - role: launch-orchestrators
      tags:
        - config
        - orchestration

    - role: launch-nomad-jobs
      tags:
        - config
        - service

    - role: caddy_ansible.caddy_ansible
      caddy_config: "{{ lookup('template', 'templates/Caddyfile.j2') }}"
      vars:
        HostIp: "{{ HOST_EXTERNAL_IPV4 }}"
      tags:
        - service
        - gateway

    - role: setup-binaries
      tags:
        - config

    - role: papanito.cloudflared
      caddy_config: "{{ lookup('template', 'templates/Caddyfile.j2') }}"
      vars:
        cf_systemd_user: root
        cf_systemd_group: root
        cf_cert_location: ~/.secrets/cert.pem
      cf_tunnels:
        dietpigw:
          tunnel_id: "{{ lookup('bitwarden', 'homelab/secrets/cloudflare/tunnels/1/tunnel_id') }}"
          credentials-file: /etc/cloudflared/{{ lookup('bitwarden', 'homelab/secrets/cloudflare/tunnels/1/tunnel_id') }}.json
          account_tag: "{{ lookup('bitwarden', 'homelab/secrets/cloudflare/tunnels/1/account_tag') }}"
          tunnel_secret: "{{ lookup('bitwarden', 'homelab/secrets/cloudflare/tunnels/1/tunnel_secret') }}"
          loglevel: debug
          routes:
            dns:
            - "firefly"
            - "bookstack"
            - "vikunja"
            - "nextcloud"
            - "webtrees"
            - "audiobookshelf"
            - "duplicati"
            - "ntfy"
            - "cronicle"
            - "miniflux"
            - "souptik"
            - "monica"
            - "jellyfin"
            - "immich"
            - "snibox"
            - "ys-api"
            - "yspotify"
            - "memoet"
            - "smepl"
            - "chatgpt"
            - "xcuzme"
            - "linkding"
          ingress:
          - hostname: "firefly.{{ lookup('bitwarden', 'homelab/secrets/domain/public/base') }}"
            service: http://localhost:8081
          - hostname: "bookstack.{{ lookup('bitwarden', 'homelab/secrets/domain/public/base') }}"
            service: http://localhost:8082
          - hostname: "vikunja.{{ lookup('bitwarden', 'homelab/secrets/domain/public/base') }}"
            service: http://localhost:8083
          - hostname: "nextcloud.{{ lookup('bitwarden', 'homelab/secrets/domain/public/base') }}"
            service: http://localhost:8084
          - hostname: "webtrees.{{ lookup('bitwarden', 'homelab/secrets/domain/public/base') }}"
            service: http://localhost:8085
          - hostname: "audiobookshelf.{{ lookup('bitwarden', 'homelab/secrets/domain/public/base') }}"
            service: http://localhost:8079
          - hostname: "duplicati.{{ lookup('bitwarden', 'homelab/secrets/domain/public/base') }}"
            service: http://localhost:8091
          - hostname: "ntfy.{{ lookup('bitwarden', 'homelab/secrets/domain/public/base') }}"
            service: http://localhost:8092
          - hostname: "cronicle.{{ lookup('bitwarden', 'homelab/secrets/domain/public/base') }}"
            service: http://localhost:8093
          - hostname: "miniflux.{{ lookup('bitwarden', 'homelab/secrets/domain/public/base') }}"
            service: http://localhost:8098
          - hostname: "souptik.{{ lookup('bitwarden', 'homelab/secrets/domain/public/base') }}"
            service: http://localhost:8099
          - hostname: "monica.{{ lookup('bitwarden', 'homelab/secrets/domain/public/base') }}"
            service: http://localhost:8100
          - hostname: "jellyfin.{{ lookup('bitwarden', 'homelab/secrets/domain/public/base') }}"
            service: http://localhost:8101
          - hostname: "immich.{{ lookup('bitwarden', 'homelab/secrets/domain/public/base') }}"
            service: http://localhost:8103
          - hostname: "snibox.{{ lookup('bitwarden', 'homelab/secrets/domain/public/base') }}"
            service: http://localhost:8104
          - hostname: "ys-api.{{ lookup('bitwarden', 'homelab/secrets/domain/public/base') }}"
            service: http://localhost:8105
          - hostname: "yspotify.{{ lookup('bitwarden', 'homelab/secrets/domain/public/base') }}"
            service: http://localhost:8106
          - hostname: "memoet.{{ lookup('bitwarden', 'homelab/secrets/domain/public/base') }}"
            service: http://localhost:8107
          - hostname: "smepl.{{ lookup('bitwarden', 'homelab/secrets/domain/public/base') }}"
            service: http://localhost:8108
          - hostname: "chatgpt.{{ lookup('bitwarden', 'homelab/secrets/domain/public/base') }}"
            service: http://localhost:8110
          - hostname: "xcuzme.{{ lookup('bitwarden', 'homelab/secrets/domain/public/base') }}"
            service: http://localhost:8111
          - hostname: "linkding.{{ lookup('bitwarden', 'homelab/secrets/domain/public/base') }}"
            service: http://localhost:8112
          - service: http_status:404
      tags:
        - networking