add basic minio stack

.idea/jsonSchemas.xml

@@ -50,6 +50,9 @@
                   <Item>
                     <option name="path" value="file://$APPLICATION_CONFIG_DIR$/scratches/scratch.yml" />
                   </Item>
+                  <Item>
+                    <option name="path" value="file://$APPLICATION_CONFIG_DIR$/scratches/scratch_1.yml" />
+                  </Item>
                 </list>
               </option>
             </SchemaInfo>

roles/alpina/collections/apps/gitea/templates/docker-compose.yml.j2

@@ -3,7 +3,7 @@
 version: "3.9"
 
 networks:
-  {{ helpers.default_network(252) | indent(2) }}
+  {{ helpers.default_network(199) | indent(2) }}
   traefik_traefik:
     external: true
 

roles/alpina/collections/apps/jellyfin/templates/docker-compose.yml.j2

@@ -3,7 +3,7 @@
 version: "3.9"
 
 networks:
-  {{ helpers.default_network(250) | indent(2) }}
+  {{ helpers.default_network(197) | indent(2) }}
   traefik_traefik:
     external: true
 

roles/alpina/collections/apps/nextcloud/templates/docker-compose.yml.j2

@@ -3,7 +3,7 @@
 version: "3.9"
 
 networks:
-  {{ helpers.default_network(251) | indent(2) }}
+  {{ helpers.default_network(198) | indent(2) }}
   traefik_traefik:
     external: true
 

roles/alpina/collections/services/minio/app_config.yml

@@ -0,0 +1,9 @@
+$ANSIBLE_VAULT;1.2;AES256;alpina
+34333936316336663466376163333433336136386632356366363139343239393333623138623265
+3234373031623162623161383832613737393938653533630a353937373463626532306562316461
+62646637353039396536623735613931373230643135373964313232376561303530386566343266
+3261366363393335620a373162303030626461666164313432383263616237383230313937653435
+65346564653230643837613436633565363865616636303031636530623063646630623730383163
+66333864393362326462356531343039613061613466356237336365633339356464626162646538
+66633235613638653036326439333833306237626539653564653536376434666238383638376333
+32383637333766636337

roles/alpina/collections/services/minio/templates/.env.minio.j2

@@ -0,0 +1,15 @@
+MINIO_ROOT_USER=minio
+MINIO_ROOT_PASSWORD={{ minio_password }}
+
+MINIO_DOMAIN=s3.{{ domain }}
+MINIO_SERVER_URL=https://s3.{{ domain }}
+MINIO_BROWSER_REDIRECT_URL=https://minio.{{ domain }}
+
+#MINIO_IDENTITY_OPENID_CONFIG_URL=https://auth.{{ domain }}/application/o/minio/.well-known/openid-configuration
+#MINIO_IDENTITY_OPENID_CLIENT_ID=
+#MINIO_IDENTITY_OPENID_CLIENT_SECRET=
+#MINIO_IDENTITY_OPENID_CLAIM_NAME=
+#MINIO_IDENTITY_OPENID_CLAIM_PREFIX=
+#MINIO_IDENTITY_OPENID_SCOPES=
+#MINIO_IDENTITY_OPENID_REDIRECT_URI=
+#MINIO_IDENTITY_OPENID_COMMENT=

roles/alpina/collections/services/minio/templates/docker-compose.yml.j2

@@ -0,0 +1,39 @@
+{% import 'contrib/compose_helpers.j2' as helpers with context %}
+{##}
+version: "3.9"
+
+networks:
+  {{ helpers.default_network(252) | indent(2) }}
+  traefik_traefik:
+    external: true
+
+services:
+  minio:
+    image: minio/minio:latest
+    container_name: minio
+    labels:
+      - {{ helpers.traefik_labels('minio', port='9090') | indent(6) }}
+      - traefik.http.routers.minio.service=minio
+      - traefik.http.routers.minio-tls.service=minio
+      - traefik.http.routers.minio-s3.rule=HostRegexp(`s3.{{ domain }}`, `{subdomain:.+}.s3.{{ domain }}`)
+      - traefik.http.routers.minio-s3.entrypoints=websecure
+      - traefik.http.routers.minio-s3.tls=true
+      - traefik.http.routers.minio-s3.tls.certresolver=letsencrypt
+      - traefik.http.routers.minio-s3.tls.domains.0.main=s3.{{ domain }}
+      - traefik.http.routers.minio-s3.tls.domains.0.sans=*.s3.{{ domain }}
+      - traefik.http.routers.minio-s3.service=minio-s3
+      - traefik.http.services.minio-s3.loadbalancer.server.port=9000
+    restart: unless-stopped
+    command: server --console-address ":9090" /data
+    env_file:
+      - .env.minio
+    networks:
+      - default
+      - traefik_traefik
+    healthcheck:
+      test: [ "CMD", "curl", "-f", "http://localhost:9000/minio/health/live" ]
+      interval: 30s
+      timeout: 20s
+      retries: 3
+    volumes:
+      - {{ base_volume_path }}/minio/data:/data

roles/alpina/tasks/deploy_compose_stack.yml

@@ -1,6 +1,6 @@
 # https://stackoverflow.com/questions/41667864/can-the-templates-module-handle-multiple-templates-directories
 
-- name: Ensure stack directory exists
+- name: Ensure {{ stack }} stack directory exists
   file:
     path: "{{ current_stack_dest }}"
     state: directory

roles/alpina/tasks/main.yml

@@ -10,6 +10,7 @@
     stacks:
       - traefik
       - authentik
+      - minio
   import_tasks: deploy_collection.yml
 
 - name: Deploy collection apps