- Quote file modes. Unquoted 644/755 were read as decimal, so files landed as 1204. Templates holding secrets are now 0640 root:docker. - Stop publishing Authentik 9000/9443 and Karakeep 3000 (Caddy reaches them over the docker network), bind dir2opds to the Tailscale IP, and drop Caddy's unused 8448. - Atuin login uses no_log and only runs once; the installer only runs when Atuin is missing. - Make chsh, ufw-docker install, the bat symlink and Atuin dotfiles idempotent. - Back up the Paperless data volume (SQLite DB), stopping Paperless during the backup. - Close public sign-up on kosync and ByteStash. - Replace hardcoded IPs and domains with variables. - Remove teardown tasks and templates for 9 retired services. - Fix the dockcheck comment: it auto-updates labelled containers. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
21 lines
590 B
YAML
21 lines
590 B
YAML
---
|
|
- name: make obsidian-livesync directories
|
|
ansible.builtin.file:
|
|
path: "{{ paths.stacks }}/obsidian-livesync"
|
|
state: directory
|
|
mode: '0755'
|
|
|
|
- name: Template out the compose file
|
|
ansible.builtin.template:
|
|
src: obsidian-livesync-compose.yml.j2
|
|
dest: "{{ paths.stacks }}/obsidian-livesync/docker-compose.yml"
|
|
mode: '0640'
|
|
group: docker
|
|
notify: restart obsidian-livesync
|
|
|
|
- name: deploy obsidian-livesync stack
|
|
community.docker.docker_compose_v2:
|
|
project_src: "{{ paths.stacks }}/obsidian-livesync"
|
|
state: present
|
|
tags:
|
|
- obsidian-livesync |