Faris/ansible-debian-pods
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
ansible-debian-pods/tasks/podman.yml
admin 6b2804de82 initial commit
2025-02-06 00:55:58 +00:00

922 lines
23 KiB
YAML
Executable File
Raw Permalink Blame History

---
- name: mealie
containers.podman.podman_container:
state: quadlet
name: podman_mealie
image: ghcr.io/mealie-recipes/mealie:latest
network: bridge
volumes:
- /home/admin/podman/mealie:/app/data/
ports:
- 9091:9000
quadlet_options:
- "AutoUpdate=registry"
- "Pull=newer"
- |
[Service]
Restart=always
TimeoutStartSec=900
[Install]
WantedBy=default.target
- name: ollama
containers.podman.podman_container:
state: quadlet
name: podman_ollama
image: docker.io/ollama/ollama:latest
network: bridge
device: "nvidia.com/gpu=all"
volumes:
- "/home/admin/podman/ollama:/root/.ollama"
ports:
- "11434:11434"
env:
OLLAMA_KEEP_ALIVE: "-1"
quadlet_options:
- "AutoUpdate=registry"
- "Pull=newer"
- |
[Service]
Restart=always
TimeoutStartSec=900
[Install]
WantedBy=default.target
- name: open-webui
containers.podman.podman_container:
state: quadlet
name: podman_open-webui
image: ghcr.io/open-webui/open-webui:latest
network: bridge
volumes:
- "/home/admin/podman/open-webui:/app/backend/data"
ports:
- "3000:8080"
env:
ENABLE_RAG_WEB_SEARCH: "True"
RAG_WEB_SEARCH_ENGINE: "searxng"
RAG_WEB_SEARCH_RESULT_COUNT: 3
RAG_WEB_SEARCH_CONCURRENT_REQUESTS: 10
SEARXNG_QUERY_URL: "http://{{ ansible_ssh_host }}:8880/search?q=<query>"
quadlet_options:
- "AutoUpdate=registry"
- "Pull=newer"
- |
[Service]
Restart=always
TimeoutStartSec=900
[Install]
WantedBy=default.target
- name: searxng
containers.podman.podman_container:
state: quadlet
name: podman_searxng
image: docker.io/searxng/searxng:latest
network: bridge
ports:
- "8880:8080"
volumes:
- "/home/admin/podman/searxng:/etc/searxng"
quadlet_options:
- "AutoUpdate=registry"
- "Pull=newer"
- |
[Service]
Restart=always
TimeoutStartSec=900
[Install]
WantedBy=default.target
- name: jellyfin
containers.podman.podman_container:
state: quadlet
name: podman_jellyfin
image: docker.io/jellyfin/jellyfin
network: bridge
device: "nvidia.com/gpu=all"
volumes:
- "/home/admin/podman/jellyfin:/config"
- "/mnt/media/video/movies:/movies:ro"
- "/mnt/media/video/tv:/tv:ro"
- "/mnt/media/audio/music/flac:/music:ro"
- "/mnt/media/video/family:/family:ro"
- "/mnt/media/video/anime/tv:/anime-tv:ro"
- "/mnt/media/video/anime/movies:/anime-movies:ro"
- "/mnt/media/video/livetv:/livetv:ro"
ports:
- "8096:8096"
quadlet_options:
- "AutoUpdate=registry"
- "Pull=newer"
- |
[Service]
Restart=always
TimeoutStartSec=900
[Install]
WantedBy=default.target
- name: freshrss
containers.podman.podman_container:
state: quadlet
name: podman_freshrss
image: lscr.io/linuxserver/freshrss:latest
network: bridge
volumes:
- "/home/admin/podman/freshrss:/config"
ports:
- "8555:80"
env:
TZ: "Europe/London"
quadlet_options:
- "AutoUpdate=registry"
- "Pull=newer"
- |
[Service]
Restart=always
TimeoutStartSec=900
[Install]
WantedBy=default.target
- name: eclipse-mosquitto
containers.podman.podman_container:
state: quadlet
name: podman_eclipse-mosquitto
image: docker.io/eclipse-mosquitto
network: bridge
volumes:
- "/home/admin/podman/eclipse-mosquitto:/mosquitto"
ports:
- "1883:1883"
- "9001:9001"
quadlet_options:
- "AutoUpdate=registry"
- "Pull=newer"
- |
[Service]
Restart=always
TimeoutStartSec=900
[Install]
WantedBy=default.target
- name: frigate
containers.podman.podman_container:
state: quadlet
name: podman_frigate
image: "ghcr.io/blakeblackshear/frigate:{{ frigate_version }}"
network: bridge
device: "nvidia.com/gpu=all"
privileged: true
volumes:
- /etc/localtime:/etc/localtime:ro
- /home/admin/podman/frigate:/config
- /mnt/services/cctv:/media/frigate
- /usr/lib/x86_64-linux-gnu/libcuda.so:/usr/lib/x86_64-linux-gnu/libcuda.so:ro
ports:
- "5005:5000"
- "5001:8971"
- "1935:1935"
- "8554:8554"
env:
FRIGATE_RTSP_PASSWORD: "{{ rtsp_password }}"
YOLO_MODELS: "yolov7-320"
USE_FP16: "false"
quadlet_options:
- "Tmpfs=/tmp/cache"
- "ShmSize=128mb"
- "AutoUpdate=registry"
- "Pull=newer"
- |
[Service]
Restart=always
TimeoutStartSec=900
[Install]
WantedBy=default.target
- name: nginx-proxy-manager
containers.podman.podman_container:
state: quadlet
name: podman_nginx-proxy-manager
image: docker.io/jc21/nginx-proxy-manager:latest
network: bridge
#ip: 192.168.50.10
privileged: true
volumes:
- "/home/admin/podman/nginx-proxy-manager:/data"
- "/home/admin/podman/letsencrypt:/etc/letsencrypt"
ports:
- "80:80"
- "443:443"
- "81:81"
env:
TZ: "Europe/London"
quadlet_options:
- "AutoUpdate=registry"
- "Pull=newer"
- |
[Service]
Restart=always
TimeoutStartSec=900
[Install]
WantedBy=default.target
- name: ddclient
containers.podman.podman_container:
state: quadlet
name: podman_ddclient
image: lscr.io/linuxserver/ddclient:latest
network: bridge
env:
TZ: "Europe/London"
volumes:
- "/home/admin/podman/ddclient:/config"
quadlet_options:
- "AutoUpdate=registry"
- "Pull=newer"
- |
[Service]
Restart=always
TimeoutStartSec=900
[Install]
WantedBy=default.target
- name: gitea
containers.podman.podman_container:
state: quadlet
name: podman_gitea
image: docker.io/gitea/gitea:latest
network: bridge
#ip: 192.168.50.30
env:
TZ: "Europe/London"
DISABLE_REGISTRATION: "true"
volumes:
- "/home/admin/podman/gitea:/data"
- "/etc/timezone:/etc/timezone:ro"
- "/etc/localtime:/etc/localtime:ro"
ports:
- "3001:3000"
- "222:22"
quadlet_options:
- "AutoUpdate=registry"
- "Pull=newer"
- |
[Service]
Restart=always
TimeoutStartSec=900
[Install]
WantedBy=default.target
- name: nginx-personal-site
containers.podman.podman_container:
state: quadlet
name: podman_nginx-personal-site
image: docker.io/nginx:latest
network: bridge
#ip: 192.168.50.20
volumes:
- "/home/admin/podman/nginx/nginx.conf:/etc/nginx/nginx.conf:ro"
- "/home/admin/podman/nginx/html:/usr/share/nginx/html"
ports:
"888:80"
env:
NGINX_HOST: "{{ personal_site_host }}"
NGINX_PORT: "80"
quadlet_options:
- "AutoUpdate=registry"
- "Pull=newer"
- |
[Service]
Restart=always
TimeoutStartSec=900
[Install]
WantedBy=default.target
- name: joplin
containers.podman.podman_container:
state: quadlet
name: podman_joplin
image: docker.io/joplin/server:latest
network: bridge
ports:
"22300:22300"
env:
APP_PORT: "22300"
APP_BASE_URL: "http://{{ ansible_ssh_host }}:22300"
DB_CLIENT: "pg"
POSTGRES_PASSWORD: "{{ joplin_password }}"
POSTGRES_DATABASE: "joplin-db"
POSTGRES_USER: "joplin"
POSTGRES_PORT: "5432"
POSTGRES_HOST: "{{ ansible_ssh_host }}"
quadlet_options:
- "AutoUpdate=registry"
- "Pull=newer"
- |
[Service]
Restart=always
TimeoutStartSec=900
[Install]
WantedBy=default.target
- name: joplin-db
containers.podman.podman_container:
state: quadlet
name: podman_joplin-db
image: docker.io/postgres:15
network: bridge
volumes:
- "/home/admin/podman/joplin-db:/var/lib/postgresql/data"
ports:
"5432:5432"
env:
TZ: "Europe/London"
POSTGRES_PASSWORD: "{{ joplin_password }}"
POSTGRES_USER: "joplin"
POSTGRES_DB: "joplin-db"
quadlet_options:
- "AutoUpdate=registry"
- "Pull=newer"
- |
[Service]
Restart=always
TimeoutStartSec=900
[Install]
WantedBy=default.target
- name: wireguard
containers.podman.podman_container:
state: quadlet
name: podman_wireguard
image: lscr.io/linuxserver/wireguard:latest
network: bridge
privileged: true
sysctl: net.ipv4.ip_forward=1
sysctl: net.ipv4.conf.all.src_valid_mark=1
cap_add:
- NET_RAW
- NET_ADMIN
- SYS_MODULE
volumes:
- "/home/admin/podman/wireguard:/config"
- "/lib/modules:/lib/modules" #optional
ports:
- "51820:51820/udp"
env:
TZ: "Europe/London"
PEERDNS: "1.1.1.1"
SERVERURL: "{{ public_ip }}"
SERVERPORT: "51820"
PEERS: "FarisIOS,FarisMacbook,SafaPhone"
ALLOWEDIPS: "192.168.0.1/24"
LOG_CONFS: "true"
quadlet_options:
- "AutoUpdate=registry"
- "Pull=newer"
- |
[Service]
Restart=always
TimeoutStartSec=900
[Install]
WantedBy=default.target
- name: vaultwarden
containers.podman.podman_container:
state: quadlet
name: podman_vaultwarden
image: docker.io/vaultwarden/server:latest
network: bridge
volumes:
- "/home/admin/podman/vaultwarden/:/data/"
ports:
- "8000:80"
- "3012:3012"
env:
TZ: "Europe/London"
DOMAIN: "https://{{ personal_site_host }}"
SIGNUPS_ALLOWED: "false"
EXPERIMENTAL_CLIENT_FEATURE_FLAGS: "ssh-key-vault-item,ssh-agent"
quadlet_options:
- "AutoUpdate=registry"
- "Pull=newer"
- |
[Service]
Restart=always
TimeoutStartSec=900
[Install]
WantedBy=default.target
- name: homeassistant
containers.podman.podman_container:
state: quadlet
name: podman_homeassistant
image: ghcr.io/home-assistant/home-assistant:stable
network: bridge
volumes:
- "/home/admin/podman/homeassistant:/config"
- "/etc/localtime:/etc/localtime:ro"
ports:
- "8123:8123"
env:
TZ: "Europe/London"
quadlet_options:
- "AutoUpdate=registry"
- "Pull=newer"
- |
[Service]
Restart=always
TimeoutStartSec=900
[Install]
WantedBy=default.target
- name: rutorrent
containers.podman.podman_container:
state: quadlet
name: podman_rutorrent
image: docker.io/crazymax/rtorrent-rutorrent:latest
network: bridge
volumes:
- "/home/admin/podman/rutorrent/passwd:/passwd"
- "/home/admin/podman/rutorrent/data:/data"
- "/mnt/media/torrents:/downloads"
ports:
- "8888:8080"
- "5000:8000"
- "50000:50000"
env:
TZ: "Europe/London"
quadlet_options:
- "AutoUpdate=registry"
- "Pull=newer"
- |
[Service]
Restart=always
TimeoutStartSec=900
[Install]
WantedBy=default.target
- name: prowlarr
containers.podman.podman_container:
state: quadlet
name: podman_prowlarr
image: lscr.io/linuxserver/prowlarr:latest
network: bridge
volumes:
- "/home/admin/podman/prowlarr:/config"
ports:
- "9696:9696"
env:
TZ: "Europe/London"
quadlet_options:
- "AutoUpdate=registry"
- "Pull=newer"
- |
[Service]
Restart=always
TimeoutStartSec=900
[Install]
WantedBy=default.target
- name: sonarr
containers.podman.podman_container:
state: quadlet
name: podman_sonarr
image: lscr.io/linuxserver/sonarr:latest
network: bridge
volumes:
- "/home/admin/podman/sonarr:/config"
- "/mnt/media/video/tv:/tv"
- "/mnt/media/torrents:/downloads"
- "/mnt/media/video/anime/tv:/anime-tv"
ports:
- "8989:8989"
env:
TZ: "Europe/London"
quadlet_options:
- "AutoUpdate=registry"
- "Pull=newer"
- |
[Service]
Restart=always
TimeoutStartSec=900
[Install]
WantedBy=default.target
- name: radarr
containers.podman.podman_container:
state: quadlet
name: podman_radarr
image: lscr.io/linuxserver/radarr:latest
network: bridge
volumes:
- "/home/admin/podman/radarr:/config"
- "/mnt/media/video/movies:/movies"
- "/mnt/media/torrents:/downloads"
- "/mnt/media/video/anime/movies:/anime-movies"
ports:
- "7878:7878"
env:
TZ: "Europe/London"
quadlet_options:
- "AutoUpdate=registry"
- "Pull=newer"
- |
[Service]
Restart=always
TimeoutStartSec=900
[Install]
WantedBy=default.target
- name: readarr
containers.podman.podman_container:
state: quadlet
name: podman_readarr
image: lscr.io/linuxserver/readarr:develop
network: bridge
volumes:
- "/home/admin/podman/readarr:/config"
- "/mnt/media/books:/books"
- "/mnt/media/torrents:/downloads"
ports:
- "8787:8787"
env:
TZ: "Europe/London"
quadlet_options:
- "AutoUpdate=registry"
- "Pull=newer"
- |
[Service]
Restart=always
TimeoutStartSec=900
[Install]
WantedBy=default.target
- name: lidarr
containers.podman.podman_container:
state: quadlet
name: podman_lidarr
image: lscr.io/linuxserver/lidarr:latest
network: bridge
volumes:
- "/home/admin/podman/lidarr:/config"
- "/mnt/media/audio/music/flac:/music"
- "/mnt/media/torrents:/downloads"
ports:
- "8686:8686"
env:
TZ: "Europe/London"
quadlet_options:
- "AutoUpdate=registry"
- "Pull=newer"
- |
[Service]
Restart=always
TimeoutStartSec=900
[Install]
WantedBy=default.target
- name: bazarr
containers.podman.podman_container:
state: quadlet
name: podman_bazarr
image: lscr.io/linuxserver/bazarr:latest
network: bridge
volumes:
- "/home/admin/podman/lidarr:/config"
- "/mnt/media/video/movies:/movies"
- "/mnt/media/video/tv:/tv"
ports:
- "6767:6767"
env:
TZ: "Europe/London"
quadlet_options:
- "AutoUpdate=registry"
- "Pull=newer"
- |
[Service]
Restart=always
TimeoutStartSec=900
[Install]
WantedBy=default.target
- name: kiwix
containers.podman.podman_container:
state: quadlet
name: podman_kiwix
image: ghcr.io/kiwix/kiwix-serve:latest
network: bridge
command: "*.zim"
volumes:
- "/mnt/media/kiwix:/data"
ports:
- "8088:8080"
quadlet_options:
- "AutoUpdate=registry"
- "Pull=newer"
- |
[Service]
Restart=always
TimeoutStartSec=900
[Install]
WantedBy=default.target
- name: immich-server
containers.podman.podman_container:
state: quadlet
name: podman_immich-server
image: "ghcr.io/immich-app/immich-server:{{ immich_version }}"
network: bridge
device: "nvidia.com/gpu=all"
volumes:
- "/mnt/services/immich:/usr/src/app/upload"
- "/etc/localtime:/etc/localtime:ro"
ports:
- "2283:2283"
env_file:
- "/home/admin/podman/.env"
quadlet_options:
- "AutoUpdate=registry"
- "Pull=newer"
- |
[Service]
Restart=always
TimeoutStartSec=900
[Install]
WantedBy=default.target
- name: immich-machine-learning
containers.podman.podman_container:
state: quadlet
name: podman_immich-machine-learning
image: "ghcr.io/immich-app/immich-machine-learning:{{ immich_version }}-cuda"
network: bridge
device: "nvidia.com/gpu=all"
volumes:
- "/home/admin/podman/immich/cache:/cache"
env_file:
- "/home/admin/podman/.env"
ports:
- "3003:3003"
quadlet_options:
- "AutoUpdate=registry"
- "Pull=newer"
- |
[Service]
Restart=always
TimeoutStartSec=900
[Install]
WantedBy=default.target
- name: immich-redis
containers.podman.podman_container:
state: quadlet
name: podman_immich-redis
image: registry.hub.docker.com/library/redis:6.2-alpine
network: bridge
ports:
- "6379:6379"
quadlet_options:
- "AutoUpdate=registry"
- "Pull=newer"
- |
[Service]
Restart=always
TimeoutStartSec=900
[Install]
WantedBy=default.target
- name: immich-db
containers.podman.podman_container:
state: quadlet
name: podman_immich-db
image: registry.hub.docker.com/tensorchord/pgvecto-rs:pg14-v0.2.0
network: bridge
env:
POSTGRES_PASSWORD: "{{ immich_db_password }}"
POSTGRES_USER: postgres
POSTGRES_DB: immich
volumes:
- "/home/admin/podman/immich/db:/var/lib/postgresql/data"
ports:
- "5433:5432"
quadlet_options:
- "AutoUpdate=registry"
- "Pull=newer"
- |
[Service]
Restart=always
TimeoutStartSec=900
[Install]
WantedBy=default.target
- name: metube
containers.podman.podman_container:
state: quadlet
name: podman_metube
image: ghcr.io/alexta69/metube:latest
network: bridge
volumes:
- "/mnt/media/youtube-dl:/downloads"
- "/mnt/media/audio/music/flac:/music"
ports:
- "8081:8081"
env:
AUDIO_DOWNLOAD_DIR: "/music"
quadlet_options:
- "AutoUpdate=registry"
- "Pull=newer"
- |
[Service]
Restart=always
TimeoutStartSec=900
[Install]
WantedBy=default.target
- name: unifi-network-application
containers.podman.podman_container:
state: quadlet
name: podman_unifi-network-application
image: lscr.io/linuxserver/unifi-network-application:latest
network: bridge
volumes:
- "/home/admin/podman/unifi-network-application:/config"
ports:
- "8443:8443"
- "10001:10001/udp"
env:
TZ: "Europe/London"
MONGO_INITDB_ROOT_USERNAME: "root"
MONGO_INITDB_ROOT_PASSWORD: "{{ rtsp_password }}"
MONGO_USER: "unifi"
MONGO_PASS: "{{ rtsp_password }}"
MONGO_HOST: "{{ ansible_ssh_host }}"
MONGO_PORT: "27017"
MONGO_DBNAME: "unifi"
MONGO_AUTHSOURCE: "admin"
quadlet_options:
- "AutoUpdate=registry"
- "Pull=newer"
- |
[Service]
Restart=always
TimeoutStartSec=900
[Install]
WantedBy=default.target
- name: unifi-network-application-db
containers.podman.podman_container:
state: quadlet
name: podman_unifi-network-application-db
image: docker.io/mongo:7.0
network: bridge
volumes:
- "/home/admin/podman/unifi-network-application-db"
- "/home/admin/init-mongo.sh:/docker-entrypoint-initdb.d/init-mongo.sh:ro"
ports:
- "27017:27017"
env:
MONGO_USER: "unifi"
MONGO_PASS: "{{ rtsp_password }}"
MONGO_HOST: "{{ ansible_ssh_host }}"
MONGO_PORT: "27017"
MONGO_DBNAME: "unifi"
MONGO_AUTHSOURCE: "admin"
quadlet_options:
- "AutoUpdate=registry"
- "Pull=newer"
- |
[Service]
Restart=always
TimeoutStartSec=900
[Install]
WantedBy=default.target
- name: tube-archivist
containers.podman.podman_container:
state: quadlet
name: podman_tube-archivist
image: docker.io/bbilly1/tubearchivist:latest
network: bridge
volumes:
- "/mnt/media/video/youtube:/youtube"
- "/home/admin/podman/tube-archivist/cache"
ports:
- "8001:8000"
env:
ES_URL: "http://{{ ansible_ssh_host }}:9200"
REDIS_HOST: "{{ ansible_ssh_host }}"
REDIS_PORT: "6380"
TA_HOST: "{{ ansible_ssh_host }}"
TA_USERNAME: "admin"
TA_PASSWORD: "{{ rtsp_password }}"
ELASTIC_PASSWORD: "{{ rtsp_password }}"
TZ: "Europe/London"
quadlet_options:
- "AutoUpdate=registry"
- "Pull=newer"
- |
[Service]
Restart=always
TimeoutStartSec=900
[Install]
WantedBy=default.target
- name: tube-archivist-es
containers.podman.podman_container:
state: quadlet
name: podman_tube-archivist-es
image: docker.io/bbilly1/tubearchivist-es:latest
network: bridge
volumes:
- "/home/admin/podman/tube-archivist/es:/usr/share/elasticsearch/data"
ports:
- "9200:9200"
env:
ELASTIC_PASSWORD: "{{ rtsp_password }}" # matching Elasticsearch password
ES_JAVA_OPTS: "-Xms1g -Xmx1g"
xpack.security.enabled: "true"
discovery.type: "single-node"
path.repo: "/usr/share/elasticsearch/data/snapshot"
quadlet_options:
- "AutoUpdate=registry"
- "Pull=newer"
- |
[Service]
Restart=always
TimeoutStartSec=900
[Install]
WantedBy=default.target
- name: tube-archivist-redis
containers.podman.podman_container:
state: quadlet
name: podman_tube-archivist-redis
image: docker.io/redis/redis-stack-server
network: bridge
volumes:
- "/home/admin/podman/tube-archivist/redis:/data"
ports:
- "6380:6379"
quadlet_options:
- "AutoUpdate=registry"
- "Pull=newer"
- |
[Service]
Restart=always
TimeoutStartSec=900
[Install]
WantedBy=default.target
- name: archivebox
containers.podman.podman_container:
state: quadlet
name: podman_archivebox
image: docker.io/archivebox/archivebox:latest
network: bridge
volumes:
- "/home/admin/podman/archivebox:/data"
ports:
- "8002:8000"
env:
ADMIN_USERNAME: "admin"
ADMIN_PASSWORD: "{{ rtsp_password }}"
PGID: "1000"
PUID: "1000"
SEARCH_BACKEND_ENGINE: "sonic"
SEARCH_BACKEND_HOST_NAME: "sonic"
SEARCH_BACKEND_PASSWORD: "{{ rtsp_password }}"
quadlet_options:
- "AutoUpdate=registry"
- "Pull=newer"
- |
[Service]
Restart=always
TimeoutStartSec=900
[Install]
WantedBy=default.target
- name: zigbee2mqtt
containers.podman.podman_container:
state: quadlet
name: podman_zigbee2mqtt
image: docker.io/koenkk/zigbee2mqtt
network: bridge
device: "/dev/ttyACM0:/dev/ttyACM0"
group_add: "keep-groups"
volumes:
- "/home/admin/podman/zigbee2mqtt:/app/data"
ports:
- "8808:8080"
quadlet_options:
- "AutoUpdate=registry"
- "Pull=newer"
- |
[Service]
Restart=always
TimeoutStartSec=900
[Install]
WantedBy=default.target
Reference in New Issue View Git Blame Copy Permalink