add syncthing to stack

roles/docker/tasks/main.yml

@@ -133,3 +133,7 @@
 - name: Install baikal
   import_tasks: baikal.yml
   tags: baikal
+
+- name: Install syncthing
+  import_tasks: syncthing.yml
+  tags: syncthing

roles/docker/tasks/syncthing.yml

@@ -0,0 +1,19 @@
+- name: make syncthing directories
+  ansible.builtin.file:
+    path: "{{ item}}"
+    state: directory
+  loop:
+    - /opt/stacks/syncthing
+
+- name: Template out the compose file
+  ansible.builtin.template:
+    src: syncthing-compose.yml.j2
+    dest: /opt/stacks/syncthing/compose.yml
+    owner: root
+    mode: 644
+
+- name: deploy syncthing stack
+  community.docker.docker_compose_v2:
+    project_src: /opt/stacks/syncthing
+    files:
+    - compose.yml

roles/docker/templates/syncthing-compose.yml.j2

@@ -0,0 +1,25 @@
+services:
+  syncthing:
+    image: syncthing/syncthing
+    container_name: syncthing
+    hostname: my-syncthing
+    environment:
+      - PUID=1000
+      - PGID=1000
+    volumes:
+      - home:/var/syncthing
+    ports:
+      - 100.70.169.99:8384:8384 # Web UI
+      - 100.70.169.99:22000:22000/tcp # TCP file transfers
+      - 100.70.169.99:22000:22000/udp # QUIC file transfers
+      - 100.70.169.99:21027:21027/udp # Receive local discovery broadcasts
+    restart: unless-stopped
+    healthcheck:
+      test: curl -fkLsS -m 2 127.0.0.1:8384/rest/noauth/health | grep -o --color=never OK || exit 1
+      interval: 1m
+      timeout: 10s
+      retries: 3
+
+volumes:
+  home:
+