add syncthing to stack

roles/docker/tasks/main.yml

@@ -132,4 +132,8 @@
 
 - name: Install baikal
   import_tasks: baikal.yml
-  tags: baikal
+  tags: baikal
+
+- name: Install syncthing
+  import_tasks: syncthing.yml
+  tags: syncthing

roles/docker/tasks/syncthing.yml

@@ -0,0 +1,19 @@
+- name: make syncthing directories
+  ansible.builtin.file:
+    path: "{{ item}}"
+    state: directory
+  loop:
+    - /opt/stacks/syncthing
+
+- name: Template out the compose file
+  ansible.builtin.template:
+    src: syncthing-compose.yml.j2
+    dest: /opt/stacks/syncthing/compose.yml
+    owner: root
+    mode: 644
+
+- name: deploy syncthing stack
+  community.docker.docker_compose_v2:
+    project_src: /opt/stacks/syncthing
+    files:
+    - compose.yml

roles/docker/templates/authentik-compose.yml.j2

@@ -31,7 +31,7 @@ services:
     volumes:
       - trout:/data
   server:
-    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2024.10.4}
+    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2024.12.0}
     restart: unless-stopped
     command: server
     environment:
@@ -52,7 +52,7 @@ services:
       - postgresql
       - trout
   worker:
-    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2024.10.4}
+    image: ${AUTHENTIK_IMAGE:-ghcr.io/goauthentik/server}:${AUTHENTIK_TAG:-2024.12.0}
     restart: unless-stopped
     command: worker
     environment:

roles/docker/templates/paperlessngx-compose.yml.j2

@@ -25,6 +25,7 @@ services:
       PAPERLESS_TIKA_ENABLED: 1
       PAPERLESS_TIKA_GOTENBERG_ENDPOINT: http://gotenberg:3000
       PAPERLESS_TIKA_ENDPOINT: http://tika:9998
+      PAPERLESS_OCR_USER_ARGS: '{"invalidate_digital_signatures": true}'
 
   gotenberg:
     image: docker.io/gotenberg/gotenberg:8.7

roles/docker/templates/pingvin-compose.yml.j2

@@ -1,6 +1,6 @@
 services:
   pingvin-share:
-    image: stonith404/pingvin-share:v1.6.1
+    image: stonith404/pingvin-share:v1.7.0
     restart: unless-stopped
     environment:
       - TRUST_PROXY=true

roles/docker/templates/syncthing-compose.yml.j2

@@ -0,0 +1,25 @@
+services:
+  syncthing:
+    image: syncthing/syncthing
+    container_name: syncthing
+    hostname: my-syncthing
+    environment:
+      - PUID=1000
+      - PGID=1000
+    volumes:
+      - home:/var/syncthing
+    ports:
+      - 100.70.169.99:8384:8384 # Web UI
+      - 100.70.169.99:22000:22000/tcp # TCP file transfers
+      - 100.70.169.99:22000:22000/udp # QUIC file transfers
+      - 100.70.169.99:21027:21027/udp # Receive local discovery broadcasts
+    restart: unless-stopped
+    healthcheck:
+      test: curl -fkLsS -m 2 127.0.0.1:8384/rest/noauth/health | grep -o --color=never OK || exit 1
+      interval: 1m
+      timeout: 10s
+      retries: 3
+
+volumes:
+  home:
+