add manyfold to stack

roles/docker/templates/glance-compose.yml.j2

@@ -9,6 +9,7 @@ services:
     restart: unless-stopped
     extra_hosts:
       - 'thesatelliteoflove.com:172.20.0.5'
+      - 'watcher.thesatelliteoflove.com:172.20.0.5'
 
 networks:
   default:

roles/docker/templates/glance.yml.j2

@@ -30,11 +30,9 @@ pages:
               feeds:
               - url: https://9to5toys.com/steals/feed
               - url: https://hiro.report/rss/
-          - type: videos
-            channels:
-              - UCR-DXc1voovS8nhAvccRZhg # Jeff Geerling
-              - UCv6J_jJa8GJqFwQNgNrMuww # ServeTheHome
-              - UCOk-gHyjcWZNj3Br4oxwh0A
+          - type: change-detection
+            instance-url: https://watcher.thesatelliteoflove.com
+            token: ac69ae11570548549d6706eac6dbb6a9
           - type: docker-containers
             hide-by-default: false
 
@@ -110,6 +108,7 @@ pages:
         - coder/code-server
         - dgtlmoon/changedetection.io
         - Freika/dawarich
+        - manyfold3d/manyfold
     - size: full
       widgets:
       - type: rss

roles/docker/templates/manyfold-compose.yml.j2

@@ -0,0 +1,46 @@
+services:
+  app:
+    image: ghcr.io/manyfold3d/manyfold-solo:latest
+    volumes:
+      # Uncomment to add a volume where a database file should be created.
+      # Don't change the part after the colon, it needs to be at /config
+      - ./config:/config
+      # Uncomment to add a filesystem volume for your model library (or multiple if
+      # you want multiple libraries), in the form <local_path>:<container_path>.
+      # The local path could be a folder that already contains models, in which case Manyfold
+      # will scan and import them, or it could be empty.
+      # The container path can be anything; you will need to enter it in the "new library" form.
+      - ./models:/models
+    environment:
+      SECRET_KEY_BASE: {{manyfold_key}}
+      MULTIUSER: enabled 
+      OIDC_CLIENT_ID: {{ manyfold_oidc_client_id }}
+      OIDC_CLIENT_SECRET: {{ manyfold_oidc_client_secret }}
+      OIDC_ISSUER: https://auth.thesatelliteoflove.com/application/o/manyfold/
+      OIDC_NAME: Authentik
+      PUBLIC_HOSTNAME: models.thesatelliteoflove.com
+      PUID: 1000
+      PGID: 1000
+    extra_hosts:
+      - 'auth.thesatelliteoflove.com:172.20.0.5'
+    labels:
+      glance.name: Manyfold
+      glance.icon: si:open3d
+      glance.url: https://models.thesatelliteoflove.com/
+      glance.description: STL Storage
+    restart: unless-stopped
+    # Optional, but recommended for better security
+    security_opt:
+      - no-new-privileges:true
+    cap_drop:
+      - ALL
+    cap_add:
+      - CHOWN
+      - DAC_OVERRIDE
+      - SETUID
+      - SETGID
+
+networks:
+  default:
+    external: true
+    name: lava