Update .gitea/workflows/deploy-k8s.yml

.gitea/workflows/deploy-k8s.yml

@@ -2,7 +2,7 @@ name: IACAnsible
 
 on: 
   push:
-    branches: [ main ]
+    branches: [ kubernetes-vazio ]
   workflow_dispatch:
 
 jobs:
@@ -35,7 +35,7 @@ jobs:
           bw login --apikey
           echo "session"
           BW_SESSION=$(bw unlock "$BW_PASSWORD" --raw)
-          echo "BW_SESSION=$BW_SESSION" >> $GITEA_ENV
+          
 
       - name: Cloning ansible repository
         uses: actions/checkout@v4
@@ -55,6 +55,4 @@ jobs:
       - name: Run Ansible Playbook
         working-directory: ansible/iac
         run: |
-          ansible-playbook -i inventory.ini playbook.yml -e "BW_CLIENTID=$BW_CLIENTID BW_CLIENTSECRET=$BW_CLIENTSECRET BW_PASSWORD=$BW_PASSWORD BW_EMAIL=$BW_EMAIL"
+          ansible-playbook -i inventory.ini playbook.yml
-        env:
-          BW_SESSION: ${{ env.BW_SESSION }}

README.md

@@ -1,18 +1,3 @@
 # iac-ansible-private
 
-iac-ansible-private
+iac-ansible-private
-
-stolon comes from https://github.com/sorintlab/stolon/blob/master/examples/kubernetes/README.md
-qbittorrent comes from https://github.com/j4ym0/pia-qbittorrent-docker?tab=readme-ov-file
-prowlarr comes from https://docs.linuxserver.io/images/docker-prowlarr/#docker-mods 
-                and https://wiki.servarr.com/prowlarr/environment-variables
-sonarr comes from https://wiki.servarr.com/sonarr/environment-variables
-                and https://docs.linuxserver.io/images/docker-sonarr/#supported-architectures
-jellyfin comes from https://docs.linuxserver.io/images/docker-jellyfin/
-flaresolverr comes from https://github.com/FlareSolverr/FlareSolverr
-jellyseer comes from https://hub.docker.com/r/fallenbagel/jellyseerr
-                and https://docs.seerr.dev/extending-jellyseerr/database-config
-decluttarr comes from https://github.com/ManiMatter/decluttarr
-minecraft comes from https://www.civo.com/learn/deploying-minecraft-server-kubernetes
-
-![logo](fenix-iac.png)

playbook.yml

@@ -3,43 +3,13 @@
   become: yes
   roles:
     - common
-    - vaultwarden
     - kubernetes
     - kube-master
-    - nvidia-base
 
 - name: Configure Kubernetes Nodes
   hosts: workers
   become: yes
   roles:
     - common
-    - vaultwarden
     - kubernetes
     - kube-node
-    - nvidia-base
-    
-- name: Configure Kubernetes Data
-  hosts: master
-  become: yes
-  roles:
-    - nvidia
-    - stolon
-    - cloudflared
-    - qbittorrent
-    - prowlarr
-    - sonarr
-    - radarr
-    - jellyfin
-    - flaresolverr
-    - jellyseerr
-    - decluttarr
-    - bazarr
-    - libreTranslate
-    - lingarr
-    - cripto
-    - anchorr
-    - lazylibrarian
-    - mangareader
-    - bookshelf
-    - shelfarr
-    - minecraft

roles/anchorr/files/anchorr-deployment.yaml

@@ -1,46 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: anchorr
-  namespace: stack-arr
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: anchorr
-  template:
-    metadata:
-      labels:
-        app: anchorr
-    spec:
-      imagePullSecrets:
-      - name: regcred
-      containers:
-      - name: anchorr
-        image: nairdah/anchorr:latest
-        securityContext:
-          capabilities:
-            add:
-              - NET_ADMIN
-        ports:
-          - containerPort: 8282 
-            name: webhook
-        env:
-        - name: PUID
-          value: "1013"
-        - name: PGID
-          value: "1013"
-        - name: TZ
-          value: 'Etc/UTC'
-        - name: NODE_ENV
-          value: 'production'
-        - name: WEBHOOK_PORT
-          value: '8282'
-        volumeMounts:
-        - name: config
-          mountPath: /usr/src/app/config
-      volumes:
-      - name: config
-        persistentVolumeClaim:
-          claimName: anchorr-config-pvc
-

roles/anchorr/files/anchorr-nfs-csi.yaml

@@ -1,11 +0,0 @@
-apiVersion: storage.k8s.io/v1
-kind: StorageClass
-metadata:
-  name: anchorr-nfs-csi
-  namespace: stack-arr
-provisioner: nfs.csi.k8s.io
-parameters:
-  server: 192.168.1.22
-  share: /mnt/fenix-main-nas-pool-0/data/k8s-Volumes/k8s-cluster-iac-deployed/stack-arr/anchorr
-allowVolumeExpansion: true
-reclaimPolicy: Retain

roles/anchorr/files/anchorr-pvcs.yaml

@@ -1,29 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: anchorr-config-pv
-  namespace: stack-arr
-spec:
-  capacity:
-    storage: 2Gi
-  storageClassName: anchorr-nfs-csi
-  accessModes:
-    - ReadWriteOnce
-  persistentVolumeReclaimPolicy: Retain
-  nfs:
-    server: 192.168.1.22
-    path: /mnt/fenix-main-nas-pool-0/data/k8s-Volumes/k8s-cluster-iac-deployed/stack-arr/anchorr/config
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: anchorr-config-pvc
-  namespace: stack-arr
-spec:
-  storageClassName: anchorr-nfs-csi
-  accessModes:
-    - ReadWriteOnce
-  volumeName: anchorr-config-pv
-  resources:
-    requests:
-      storage: 2Gi

roles/anchorr/files/anchorr-service.yaml

@@ -1,12 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: anchorr-service
-  namespace: stack-arr
-spec:
-  ports:
-    - port: 8282
-      targetPort: 8282
-  selector:
-    app: anchorr
-  type: ClusterIP

roles/anchorr/tasks/main.yml

@@ -1,51 +0,0 @@
-- name: Remover o diretório /tmp/stack-arr/anchorr/kubernetes-files
-  ansible.builtin.file:
-    path: /tmp/stack-arr/anchorr/kubernetes-files
-    state: absent
-
-- name: Criar diretório temporário no remoto
-  file:
-    path: /tmp/stack-arr/anchorr/kubernetes-files
-    state: directory
-    mode: '0755'
-
-- name: Copy file with owner and permissions
-  ansible.builtin.copy:
-    src: ../files
-    dest: /tmp/stack-arr/anchorr/kubernetes-files
-    owner: fenix
-    group: root
-    mode: '0644'
-
-
-#- name: Obter várias notas do Bitwarden
-#  shell: |
-#    echo "unlock"
-#    BW_SESSION=$(bw unlock {{ bw_password }} --raw)
-#    echo "get item"
-#    bw get item "{{ item.id }}" --session $BW_SESSION | jq -r '.notes' > {{ item.dest }}
-#  loop:
-#    - { id: "iac.ansible.stackarr.anchorr.secret", dest: "/tmp/stack-arr/anchorr/kubernetes-files/files/anchorr-secret.yaml" }
-#  args:
-#    executable: /bin/bash
-#  environment:
-#    BW_PASSWORD: "{{ BW_PASSWORD }}"
-
-
-- name: Listar conteúdo do diretório remoto
-  shell: ls -l /tmp/stack-arr/anchorr/kubernetes-files/files
-  register: resultado_ls
-
-
-- name: Mostrar resultado do ls
-  debug:
-    var: resultado_ls.stdout_lines
-
-
-- name: Aplicar o stolon
-  become: yes
-  become_user: fenix 
-  shell: |
-    kubectl apply -f /tmp/stack-arr/anchorr/kubernetes-files/files/
-  environment:
-    KUBECONFIG:  /home/fenix/.kube/config

roles/anchorr/vars/main.yml

@@ -1,4 +0,0 @@
-bw_password: "{{ lookup('env', 'BW_PASSWORD') }}"
-VAULTWARDEN_LINK: "{{ lookup('env', 'VAULTWARDEN_LINK') }}"
-BW_CLIENTID: "{{ lookup('env', 'BW_CLIENTID') }}"
-BW_CLIENTSECRET : "{{ lookup('env', 'BW_CLIENTSECRET') }}"

roles/bazarr/files/bazarr-deployment.yaml

@@ -1,70 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: bazarr
-  namespace: stack-arr
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: bazarr
-  template:
-    metadata:
-      labels:
-        app: bazarr
-    spec:
-      imagePullSecrets:
-      - name: regcred
-      containers:
-      - name: bazarr
-        image: lscr.io/linuxserver/bazarr:1.5.3
-        securityContext:
-          capabilities:
-            add:
-              - NET_ADMIN
-        ports:
-          - containerPort: 6767
-            name: webui
-        env:
-        - name: PUID
-          value: "1013"
-        - name: PGID
-          value: "1013"
-        - name: TZ
-          value: 'Etc/UTC'
-        - name: POSTGRES_ENABLED
-          value: 'true'
-        - name: POSTGRES_HOST
-          value: 'stolon-proxy-service.postgresql.svc.cluster.local'
-        - name: POSTGRES_PORT
-          value: '5432'
-        - name: POSTGRES_USERNAME
-          valueFrom:
-            secretKeyRef:
-              name: bazarr-secret
-              key: username
-        - name: POSTGRES_PASSWORD
-          valueFrom:
-            secretKeyRef:
-              name: bazarr-secret
-              key: password
-        - name: POSTGRES_DATABASE
-          valueFrom:
-            secretKeyRef:
-              name: bazarr-secret
-              key: maindb
-        volumeMounts:
-        - name: config
-          mountPath: /config
-        - name: media
-          mountPath: /media
-      volumes:
-      - name: config
-        persistentVolumeClaim:
-          claimName: bazarr-config-pvc
-      - name: media
-        persistentVolumeClaim:
-          claimName: bazarr-media-pvc
-
-
-

roles/bazarr/files/bazarr-nfs-csi.yaml

@@ -1,11 +0,0 @@
-apiVersion: storage.k8s.io/v1
-kind: StorageClass
-metadata:
-  name: bazarr-nfs-csi
-  namespace: stack-arr
-provisioner: nfs.csi.k8s.io
-parameters:
-  server: 192.168.1.22
-  share: /mnt/fenix-main-nas-pool-0/data/k8s-Volumes/k8s-cluster-iac-deployed/stack-arr/bazarr
-allowVolumeExpansion: true
-reclaimPolicy: Retain

roles/bazarr/files/bazarr-pvcs.yaml

@@ -1,60 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: bazarr-config-pv
-  namespace: stack-arr
-spec:
-  capacity:
-    storage: 2Gi
-  storageClassName: bazarr-nfs-csi
-  accessModes:
-    - ReadWriteOnce
-  persistentVolumeReclaimPolicy: Retain
-  nfs:
-    server: 192.168.1.22
-    path: /mnt/fenix-main-nas-pool-0/data/k8s-Volumes/k8s-cluster-iac-deployed/stack-arr/bazarr/config
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: bazarr-config-pvc
-  namespace: stack-arr
-spec:
-  storageClassName: bazarr-nfs-csi
-  accessModes:
-    - ReadWriteOnce
-  volumeName: bazarr-config-pv
-  resources:
-    requests:
-      storage: 2Gi
----
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: bazarr-media-pv
-  namespace: stack-arr
-spec:
-  capacity:
-    storage: 150Gi
-  storageClassName: jellyfin-videos-nfs-csi
-  accessModes:
-    - ReadWriteOnce
-  persistentVolumeReclaimPolicy: Retain
-  nfs:
-    server: 192.168.1.22
-    path: /mnt/fenix-main-nas-pool-0/data/Filmes_e_Series
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: bazarr-media-pvc
-  namespace: stack-arr
-spec:
-  storageClassName: jellyfin-videos-nfs-csi
-  accessModes:
-    - ReadWriteOnce
-  volumeName: bazarr-media-pv
-  resources:
-    requests:
-      storage: 150Gi
----

roles/bazarr/files/bazarr-secret.yaml

@@ -1,11 +0,0 @@
-apiVersion: v1
-kind: Secret
-metadata:
-    name:  bazarr-secret
-    namespace: stack-arr
-type: Opaque
-data:
-    username: dXNlcm5hbWU=
-    password: cGFzc3dvcmQ=
-    maindb: bWFpbmRiLXByb3dsYXJy
-    logsdb: bG9nZGItcHJvd2xhcnI=

roles/bazarr/files/bazarr-service.yaml

@@ -1,12 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: bazarr-service
-  namespace: stack-arr
-spec:
-  ports:
-    - port: 6767
-      targetPort: 6767
-  selector:
-    app: bazarr
-  type: ClusterIP

roles/bazarr/tasks/main.yml

@@ -1,51 +0,0 @@
-- name: Remover o diretório /tmp/stack-arr/bazarr/kubernetes-files
-  ansible.builtin.file:
-    path: /tmp/stack-arr/bazarr/kubernetes-files
-    state: absent
-
-- name: Criar diretório temporário no remoto
-  file:
-    path: /tmp/stack-arr/bazarr/kubernetes-files
-    state: directory
-    mode: '0755'
-
-- name: Copy file with owner and permissions
-  ansible.builtin.copy:
-    src: ../files
-    dest: /tmp/stack-arr/bazarr/kubernetes-files
-    owner: fenix
-    group: root
-    mode: '0644'
-
-
-- name: Obter várias notas do Bitwarden
-  shell: |
-    echo "unlock"
-    BW_SESSION=$(bw unlock {{ bw_password }} --raw)
-    echo "get item"
-    bw get item "{{ item.id }}" --session $BW_SESSION | jq -r '.notes' > {{ item.dest }}
-  loop:
-    - { id: "iac.ansible.stackarr.bazarr.secret", dest: "/tmp/stack-arr/bazarr/kubernetes-files/files/bazarr-secret.yaml" }
-  args:
-    executable: /bin/bash
-  environment:
-    BW_PASSWORD: "{{ BW_PASSWORD }}"
-
-
-- name: Listar conteúdo do diretório remoto
-  shell: ls -l /tmp/stack-arr/bazarr/kubernetes-files/files
-  register: resultado_ls
-
-
-- name: Mostrar resultado do ls
-  debug:
-    var: resultado_ls.stdout_lines
-
-
-- name: Aplicar o stolon
-  become: yes
-  become_user: fenix 
-  shell: |
-    kubectl apply -f /tmp/stack-arr/bazarr/kubernetes-files/files/
-  environment:
-    KUBECONFIG:  /home/fenix/.kube/config

roles/bazarr/vars/main.yml

@@ -1,4 +0,0 @@
-bw_password: "{{ lookup('env', 'BW_PASSWORD') }}"
-VAULTWARDEN_LINK: "{{ lookup('env', 'VAULTWARDEN_LINK') }}"
-BW_CLIENTID: "{{ lookup('env', 'BW_CLIENTID') }}"
-BW_CLIENTSECRET : "{{ lookup('env', 'BW_CLIENTSECRET') }}"

roles/bookshelf/files/bookshelf-deployment.yaml

@@ -1,54 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: bookshelf
-  namespace: stack-arr
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: bookshelf
-  template:
-    metadata:
-      labels:
-        app: bookshelf
-    spec:
-      imagePullSecrets:
-      - name: regcred
-      containers:
-      - name: bookshelf
-        image: ghcr.io/pennydreadful/bookshelf:softcover-v0.4.20.91
-        securityContext:
-          capabilities:
-            add:
-              - NET_ADMIN
-        ports:
-          - containerPort: 8787 
-            name: webui
-        env:
-        - name: PUID
-          value: "1013"
-        - name: PGID
-          value: "1013"
-        - name: TZ
-          value: 'Etc/UTC'
-        volumeMounts:
-        - name: config
-          mountPath: /config
-        - name: books
-          mountPath: /books
-        - name: downloads
-          mountPath: /downloads
-      volumes:
-      - name: config
-        persistentVolumeClaim:
-          claimName: bookshelf-config-pvc
-      - name: books
-        persistentVolumeClaim:
-          claimName: bookshelf-books-pvc
-      - name: downloads
-        persistentVolumeClaim:
-          claimName: qbittorrent-downloads-pvc
-
-
-

roles/bookshelf/files/bookshelf-nfs-csi.yaml

@@ -1,11 +0,0 @@
-apiVersion: storage.k8s.io/v1
-kind: StorageClass
-metadata:
-  name: bookshelf-nfs-csi
-  namespace: stack-arr
-provisioner: nfs.csi.k8s.io
-parameters:
-  server: 192.168.1.22
-  share: /mnt/fenix-main-nas-pool-0/data/k8s-Volumes/k8s-cluster-iac-deployed/stack-arr/bookshelf
-allowVolumeExpansion: true
-reclaimPolicy: Retain

roles/bookshelf/files/bookshelf-pvcs.yaml

@@ -1,60 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: bookshelf-config-pv
-  namespace: stack-arr
-spec:
-  capacity:
-    storage: 20Gi
-  storageClassName: bookshelf-nfs-csi
-  accessModes:
-    - ReadWriteOnce
-  persistentVolumeReclaimPolicy: Retain
-  nfs:
-    server: 192.168.1.22
-    path: /mnt/fenix-main-nas-pool-0/data/k8s-Volumes/k8s-cluster-iac-deployed/stack-arr/bookshelf/config
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: bookshelf-config-pvc
-  namespace: stack-arr
-spec:
-  storageClassName: bookshelf-nfs-csi
-  accessModes:
-    - ReadWriteOnce
-  volumeName: bookshelf-config-pv
-  resources:
-    requests:
-      storage: 20Gi
----
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: bookshelf-media-pv
-  namespace: stack-arr
-spec:
-  capacity:
-    storage: 150Gi
-  storageClassName: jellyfin-videos-nfs-csi
-  accessModes:
-    - ReadWriteOnce
-  persistentVolumeReclaimPolicy: Retain
-  nfs:
-    server: 192.168.1.22
-    path: /mnt/fenix-main-nas-pool-0/data/Filmes_e_Series/Livros
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: bookshelf-books-pvc
-  namespace: stack-arr
-spec:
-  storageClassName: jellyfin-videos-nfs-csi
-  accessModes:
-    - ReadWriteOnce
-  volumeName: bookshelf-media-pv
-  resources:
-    requests:
-      storage: 150Gi
----

roles/bookshelf/files/bookshelf-service.yaml

@@ -1,12 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: bookshelf-service
-  namespace: stack-arr
-spec:
-  ports:
-    - port: 8787  
-      targetPort: 8787  
-  selector:
-    app: bookshelf
-  type: ClusterIP

roles/bookshelf/tasks/main.yml

@@ -1,51 +0,0 @@
-- name: Remover o diretório /tmp/stack-arr/bookshelf/kubernetes-files
-  ansible.builtin.file:
-    path: /tmp/stack-arr/bookshelf/kubernetes-files
-    state: absent
-
-- name: Criar diretório temporário no remoto
-  file:
-    path: /tmp/stack-arr/bookshelf/kubernetes-files
-    state: directory
-    mode: '0755'
-
-- name: Copy file with owner and permissions
-  ansible.builtin.copy:
-    src: ../files
-    dest: /tmp/stack-arr/bookshelf/kubernetes-files
-    owner: fenix
-    group: root
-    mode: '0644'
-
-
-#- name: Obter várias notas do Bitwarden
-#  shell: |
-#    echo "unlock"
-#    BW_SESSION=$(bw unlock {{ bw_password }} --raw)
-#    echo "get item"
-#    bw get item "{{ item.id }}" --session $BW_SESSION | jq -r '.notes' > {{ item.dest }}
-#  loop:
-#    - { id: "iac.ansible.stackarr.bookshelf.secret", dest: "/tmp/stack-arr/bookshelf/kubernetes-files/files/bookshelf-secret.yaml" }
-#  args:
-#    executable: /bin/bash
-#  environment:
-#    BW_PASSWORD: "{{ BW_PASSWORD }}"
-
-
-- name: Listar conteúdo do diretório remoto
-  shell: ls -l /tmp/stack-arr/bookshelf/kubernetes-files/files
-  register: resultado_ls
-
-
-- name: Mostrar resultado do ls
-  debug:
-    var: resultado_ls.stdout_lines
-
-
-- name: Aplicar o stolon
-  become: yes
-  become_user: fenix 
-  shell: |
-    kubectl apply -f /tmp/stack-arr/bookshelf/kubernetes-files/files/
-  environment:
-    KUBECONFIG:  /home/fenix/.kube/config

roles/bookshelf/vars/main.yml

@@ -1,4 +0,0 @@
-bw_password: "{{ lookup('env', 'BW_PASSWORD') }}"
-VAULTWARDEN_LINK: "{{ lookup('env', 'VAULTWARDEN_LINK') }}"
-BW_CLIENTID: "{{ lookup('env', 'BW_CLIENTID') }}"
-BW_CLIENTSECRET : "{{ lookup('env', 'BW_CLIENTSECRET') }}"

roles/cloudflared/files/cloudflare-namespace.yaml

@@ -1,4 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: cloudflare

roles/cloudflared/files/cloudflared-tunnel-deployment.yaml

@@ -1,49 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: cloudflared-tunnel
-  namespace: cloudflare
-spec:
-  replicas: 3
-  selector:
-    matchLabels:
-      app: cloudflared
-  template:
-    metadata:
-      labels:
-        app: cloudflared
-    spec:
-      securityContext:
-        sysctls:
-        # Allows ICMP traffic (ping, traceroute) to resources behind cloudflared.
-          - name: net.ipv4.ping_group_range
-            value: "65532 65532"
-      containers:
-        - image: cloudflare/cloudflared:latest
-          name: cloudflared
-          env:
-            # Defines an environment variable for the tunnel token.
-            - name: TUNNEL_TOKEN
-              valueFrom:
-                secretKeyRef:
-                  name: tunnel-token-secret
-                  key: token
-          command:
-            # Configures tunnel run parameters
-            - cloudflared
-            - tunnel
-            - --no-autoupdate
-            - --loglevel
-            - debug
-            - --metrics
-            - 0.0.0.0:2000
-            - run
-          livenessProbe:
-            httpGet:
-              # Cloudflared has a /ready endpoint which returns 200 if and only if
-              # it has an active connection to Cloudflare's network.
-              path: /ready
-              port: 2000
-            failureThreshold: 1
-            initialDelaySeconds: 10
-            periodSeconds: 10

roles/cloudflared/files/tunnel-token-secret.yaml

@@ -1,8 +0,0 @@
-apiVersion: v1
-kind: Secret
-metadata:
-    name: tunnel-token-secret
-    namespace: cloudflare
-type: Opaque
-data:
-    token: <CLOUDFLARE_TUNNEL_TOKEN>

roles/cloudflared/tasks/main.yml

@@ -1,51 +0,0 @@
-- name: Remover o diretório /tmp/cloudflare/kubernetes-files
-  ansible.builtin.file:
-    path: /tmp/cloudflare/kubernetes-files
-    state: absent
-
-- name: Criar diretório temporário no remoto
-  file:
-    path: /tmp/cloudflare/kubernetes-files
-    state: directory
-    mode: '0755'
-
-- name: Copy file with owner and permissions
-  ansible.builtin.copy:
-    src: ../files
-    dest: /tmp/cloudflare/kubernetes-files
-    owner: fenix
-    group: root
-    mode: '0644'
-
-
-- name: Obter várias notas do Bitwarden
-  shell: |
-    echo "unlock"
-    BW_SESSION=$(bw unlock {{ bw_password }} --raw)
-    echo "get item"
-    bw get item "{{ item.id }}" --session $BW_SESSION | jq -r '.notes' > {{ item.dest }}
-  loop:
-    - { id: "iac.ansible.cloudflare.tunnel.secret", dest: "/tmp/cloudflare/kubernetes-files/files/tunnel-token-secret.yaml" }
-  args:
-    executable: /bin/bash
-  environment:
-    BW_PASSWORD: "{{ BW_PASSWORD }}"
-
-
-- name: Listar conteúdo do diretório remoto
-  shell: ls -l /tmp/cloudflare/kubernetes-files/files
-  register: resultado_ls
-
-
-- name: Mostrar resultado do ls
-  debug:
-    var: resultado_ls.stdout_lines
-
-
-- name: Aplicar o stolon
-  become: yes
-  become_user: fenix 
-  shell: |
-    kubectl apply -f /tmp/cloudflare/kubernetes-files/files/
-  environment:
-    KUBECONFIG:  /home/fenix/.kube/config

roles/cloudflared/vars/main.yml

@@ -1,4 +0,0 @@
-bw_password: "{{ lookup('env', 'BW_PASSWORD') }}"
-VAULTWARDEN_LINK: "{{ lookup('env', 'VAULTWARDEN_LINK') }}"
-BW_CLIENTID: "{{ lookup('env', 'BW_CLIENTID') }}"
-BW_CLIENTSECRET : "{{ lookup('env', 'BW_CLIENTSECRET') }}"

roles/cripto/files/ai-deployment.yaml

@@ -1,94 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: fenix-ai
----
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: crypto-forecast-api-deployment
-  namespace: fenix-ai
-spec:
-  replicas: 0
-  selector:
-    matchLabels:
-      app: crypto-forecast-api
-  template:
-    metadata:
-      labels:
-        app: crypto-forecast-api
-    spec:
-      containers:
-      - name: crypto-forecast-api
-        image: gitea.fenix-dev.com/fenix-gitea-admin/fenix-cripto-api:0.0.19
-        ports:
-        - containerPort: 8080
-        resources:
-          limits:
-            nvidia.com/gpu: 1   # garante uso da tua RTX 4060 Ti
-        env:
-        - name: ASPNETCORE_ENVIRONMENT
-          value: Development
-        volumeMounts:
-        - name: model
-          mountPath: /models
-      volumes:
-      - name: model
-        persistentVolumeClaim:
-          claimName: crypto-forecast-api-model-pvc
----
-apiVersion: v1
-kind: Service
-metadata:
-  name: crypto-forecast-api-svc
-  namespace: fenix-ai
-spec:
-  selector:
-    app: crypto-forecast-api
-  ports:
-  - protocol: TCP
-    port: 8080
-    targetPort: 8080
-  type: NodePort   # ou LoadBalancer se tiveres suporte
----
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: crypto-forecast-api-model-pv
-  namespace: fenix-ai
-spec:
-  capacity:
-    storage: 20Gi
-  storageClassName: fenix-ai-nfs-csi
-  accessModes:
-    - ReadWriteOnce
-  persistentVolumeReclaimPolicy: Retain
-  nfs:
-    server: 192.168.1.22
-    path: /mnt/fenix-main-nas-pool-0/data/k8s-Volumes/k8s-cluster-iac-deployed/fenix/ai/api/model
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: crypto-forecast-api-model-pvc
-  namespace: fenix-ai
-spec:
-  storageClassName: fenix-ai-nfs-csi
-  accessModes:
-    - ReadWriteOnce
-  volumeName: crypto-forecast-api-model-pv
-  resources:
-    requests:
-      storage: 20Gi
----
-apiVersion: storage.k8s.io/v1
-kind: StorageClass
-metadata:
-  name: fenix-ai-nfs-csi
-  namespace: fenix-ai
-provisioner: nfs.csi.k8s.io
-parameters:
-  server: 192.168.1.22
-  share: /mnt/fenix-main-nas-pool-0/data/k8s-Volumes/k8s-cluster-iac-deployed/
-allowVolumeExpansion: true
-reclaimPolicy: Retain

roles/cripto/files/ai-namespace.yaml

@@ -1,4 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: fenix-ai

roles/cripto/files/ai-ollama-deployment.yaml

@@ -1,97 +0,0 @@
-apiVersion: metallb.io/v1beta1
-kind: IPAddressPool
-metadata:
-  name: local-pool-2
-  namespace: metallb-system
-spec:
-  addresses:
-    - 192.168.1.100-192.168.1.200
----
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: ollama-deployment
-  namespace: fenix-ai
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: ollama
-  template:
-    metadata:
-      labels:
-        app: ollama
-    spec:
-      containers:
-      - name: ollama
-        image: ollama/ollama:latest
-        ports:
-        - containerPort: 11434
-        resources:
-          limits:
-            nvidia.com/gpu: 1   # garante uso da tua RTX 4060 Ti
-        env:
-          - name: OLLAMA_HOST
-            value: "0.0.0.0"
-        volumeMounts:
-          - name: ollama-data
-            mountPath: /root/.ollama
-      volumes:
-      - name: ollama-data
-        persistentVolumeClaim:
-          claimName: ollama-data-pvc
----
-apiVersion: v1
-kind: Service
-metadata:
-  name: ollama-api-svc
-  namespace: fenix-ai
-spec:
-  selector:
-    app: ollama
-  ports:
-  - protocol: TCP
-    port: 11434
-    targetPort: 11434
-  type: NodePort   # ou LoadBalancer se tiveres suporte
----
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: ollama-data-pv
-  namespace: fenix-ai
-spec:
-  capacity:
-    storage: 20Gi
-  storageClassName: ollama-ai-nfs-csi
-  accessModes:
-    - ReadWriteOnce
-  persistentVolumeReclaimPolicy: Retain
-  nfs:
-    server: 192.168.1.22
-    path: /mnt/fenix-main-nas-pool-0/data/k8s-Volumes/k8s-cluster-iac-deployed/ollama
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: ollama-data-pvc
-  namespace: fenix-ai
-spec:
-  storageClassName: ollama-ai-nfs-csi
-  accessModes:
-    - ReadWriteOnce
-  resources:
-    requests:
-      storage: 20Gi
----
-apiVersion: storage.k8s.io/v1
-kind: StorageClass
-metadata:
-  name: ollama-ai-nfs-csi
-  namespace: fenix-ai
-provisioner: nfs.csi.k8s.io
-parameters:
-  server: 192.168.1.22
-  share: /mnt/fenix-main-nas-pool-0/data/k8s-Volumes/k8s-cluster-iac-deployed/ollama
-allowVolumeExpansion: true
-reclaimPolicy: Retain

roles/cripto/tasks/main.yml

@@ -1,51 +0,0 @@
-- name: Remover o diretório /tmp/fenix-ai/kubernetes-files
-  ansible.builtin.file:
-    path: /tmp/fenix-ai/kubernetes-files
-    state: absent
-
-- name: Criar diretório temporário no remoto
-  file:
-    path: /tmp/fenix-ai/kubernetes-files
-    state: directory
-    mode: '0755'
-
-- name: Copy file with owner and permissions
-  ansible.builtin.copy:
-    src: ../files
-    dest: /tmp/fenix-ai/kubernetes-files
-    owner: fenix
-    group: root
-    mode: '0644'
-
-
-#- name: Obter várias notas do Bitwarden
-#  shell: |
-#    echo "unlock"
-#    BW_SESSION=$(bw unlock {{ bw_password }} --raw)
-#    echo "get item"
-#    bw get item "{{ item.id }}" --session $BW_SESSION | jq -r '.notes' > {{ item.dest }}
-#  loop:
-#    - { id: "iac.ansible.stackarr.decluttarr.secret", dest: "/tmp/stack-arr/decluttarr/kubernetes-files/files/decluttarr-secret.yaml" }
-#  args:
-#    executable: /bin/bash
-#  environment:
-#    BW_PASSWORD: "{{ BW_PASSWORD }}"
-
-
-- name: Listar conteúdo do diretório remoto
-  shell: ls -l /tmp/fenix-ai/kubernetes-files/files
-  register: resultado_ls
-
-
-- name: Mostrar resultado do ls
-  debug:
-    var: resultado_ls.stdout_lines
-
-
-- name: Aplicar o stolon
-  become: yes
-  become_user: fenix 
-  shell: |
-    kubectl apply -f /tmp/fenix-ai/kubernetes-files/files/
-  environment:
-    KUBECONFIG:  /home/fenix/.kube/config

roles/cripto/vars/main.yml

@@ -1,4 +0,0 @@
-bw_password: "{{ lookup('env', 'BW_PASSWORD') }}"
-VAULTWARDEN_LINK: "{{ lookup('env', 'VAULTWARDEN_LINK') }}"
-BW_CLIENTID: "{{ lookup('env', 'BW_CLIENTID') }}"
-BW_CLIENTSECRET : "{{ lookup('env', 'BW_CLIENTSECRET') }}"

roles/decluttarr/files/decluttarr-deployment.yaml

@@ -1,79 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: decluttarr
-  namespace: stack-arr
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: decluttarr
-  template:
-    metadata:
-      labels:
-        app: decluttarr
-    spec:
-      imagePullSecrets:
-      - name: regcred
-      containers:
-      - name: decluttarr
-        image: ghcr.io/manimatter/decluttarr:v1.50.2
-        env:
-            - name: LOG_LEVEL
-              value: VERBOSE
-            - name: REMOVE_TIMER
-              value: '3'
-            - name: REMOVE_FAILED
-              value: 'True'
-            - name: REMOVE_FAILED_IMPORTS
-              value: 'False'
-            - name: REMOVE_METADATA_MISSING
-              value: 'True'
-            - name: REMOVE_MISSING_FILES
-              value: 'True'
-            - name: REMOVE_ORPHANS
-              value: 'True'
-            - name: REMOVE_SLOW
-              value: 'False'
-            - name: REMOVE_STALLED
-              value: 'True'
-            - name: REMOVE_UNMONITORED
-              value: 'False'
-            - name: MIN_DOWNLOAD_SPEED
-              value: '100'
-            - name: PERMITTED_ATTEMPTS
-              value: '3'
-            - name: SONARR_URL
-              value: http://sonarr-service.stack-arr.svc.cluster.local:8989
-            - name: SONARR_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: decluttarr-secret
-                  key: sonarrkey
-            - name: QBITTORRENT_URL
-              value: http://qbittorrent-service.stack-arr.svc.cluster.local:8080
-            - name: QBITTORRENT_USERNAME
-              valueFrom:
-                secretKeyRef:
-                  name: decluttarr-secret
-                  key: qbittorrentuser
-            - name: QBITTORRENT_PASSWORD
-              valueFrom:
-                secretKeyRef:
-                  name: decluttarr-secret
-                  key: qbittorrentpass
-        volumeMounts:
-        - name: config
-          mountPath: /config
-        - name: downloads
-          mountPath: /data/downloads
-      volumes:
-      - name: config
-        persistentVolumeClaim:
-          claimName: decluttarr-config-pvc
-      - name: downloads
-        persistentVolumeClaim:
-          claimName: qbittorrent-downloads-pvc
-
-
-

roles/decluttarr/files/decluttarr-nfs-csi.yaml

@@ -1,12 +0,0 @@
-apiVersion: storage.k8s.io/v1
-kind: StorageClass
-metadata:
-  name: decluttarr-nfs-csi
-  namespace: stack-arr
-provisioner: nfs.csi.k8s.io
-parameters:
-  server: 192.168.1.22
-  share: /mnt/fenix-main-nas-pool-0/data/k8s-Volumes/k8s-cluster-iac-deployed/stack-arr/decluttarr
-allowVolumeExpansion: true
-reclaimPolicy: Retain
----

roles/decluttarr/files/decluttarr-pvcs.yaml

@@ -1,30 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: decluttarr-config-pv
-  namespace: stack-arr
-spec:
-  capacity:
-    storage: 2Gi
-  storageClassName: decluttarr-nfs-csi
-  accessModes:
-    - ReadWriteOnce
-  persistentVolumeReclaimPolicy: Retain
-  nfs:
-    server: 192.168.1.22
-    path: /mnt/fenix-main-nas-pool-0/data/k8s-Volumes/k8s-cluster-iac-deployed/stack-arr/decluttarr/config
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: decluttarr-config-pvc
-  namespace: stack-arr
-spec:
-  storageClassName: decluttarr-nfs-csi
-  accessModes:
-    - ReadWriteOnce
-  volumeName: decluttarr-config-pv
-  resources:
-    requests:
-      storage: 2Gi
----

roles/decluttarr/files/decluttarr-secret.yaml

@@ -1,10 +0,0 @@
-apiVersion: v1
-kind: Secret
-metadata:
-    name:  decluttarr-secret
-    namespace: stack-arr
-type: Opaque
-data:
-    sonarrkey: M2tkMDRscjk1bGY5M29lMDNsZTAzbGU=
-    qbittorrentuser: dXNlcg==
-    qbittorrentpass: cGFzcw==

roles/decluttarr/tasks/main.yml

@@ -1,51 +0,0 @@
-- name: Remover o diretório /tmp/stack-arr/decluttarr/kubernetes-files
-  ansible.builtin.file:
-    path: /tmp/stack-arr/decluttarr/kubernetes-files
-    state: absent
-
-- name: Criar diretório temporário no remoto
-  file:
-    path: /tmp/stack-arr/decluttarr/kubernetes-files
-    state: directory
-    mode: '0755'
-
-- name: Copy file with owner and permissions
-  ansible.builtin.copy:
-    src: ../files
-    dest: /tmp/stack-arr/decluttarr/kubernetes-files
-    owner: fenix
-    group: root
-    mode: '0644'
-
-
-- name: Obter várias notas do Bitwarden
-  shell: |
-    echo "unlock"
-    BW_SESSION=$(bw unlock {{ bw_password }} --raw)
-    echo "get item"
-    bw get item "{{ item.id }}" --session $BW_SESSION | jq -r '.notes' > {{ item.dest }}
-  loop:
-    - { id: "iac.ansible.stackarr.decluttarr.secret", dest: "/tmp/stack-arr/decluttarr/kubernetes-files/files/decluttarr-secret.yaml" }
-  args:
-    executable: /bin/bash
-  environment:
-    BW_PASSWORD: "{{ BW_PASSWORD }}"
-
-
-- name: Listar conteúdo do diretório remoto
-  shell: ls -l /tmp/stack-arr/decluttarr/kubernetes-files/files
-  register: resultado_ls
-
-
-- name: Mostrar resultado do ls
-  debug:
-    var: resultado_ls.stdout_lines
-
-
-- name: Aplicar o stolon
-  become: yes
-  become_user: fenix 
-  shell: |
-    kubectl apply -f /tmp/stack-arr/decluttarr/kubernetes-files/files/
-  environment:
-    KUBECONFIG:  /home/fenix/.kube/config

roles/decluttarr/vars/main.yml

@@ -1,4 +0,0 @@
-bw_password: "{{ lookup('env', 'BW_PASSWORD') }}"
-VAULTWARDEN_LINK: "{{ lookup('env', 'VAULTWARDEN_LINK') }}"
-BW_CLIENTID: "{{ lookup('env', 'BW_CLIENTID') }}"
-BW_CLIENTSECRET : "{{ lookup('env', 'BW_CLIENTSECRET') }}"

roles/flaresolverr/files/flaresolverr-deployment.yaml

@@ -1,32 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: flaresolverr
-  namespace: stack-arr
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: flaresolverr
-  template:
-    metadata:
-      labels:
-        app: flaresolverr
-    spec:
-      imagePullSecrets:
-      - name: regcred
-      containers:
-      - name: flaresolverr
-        image: ghcr.io/flaresolverr/flaresolverr:latest
-        securityContext:
-          capabilities:
-            add:
-              - NET_ADMIN
-        ports:
-          - containerPort: 8191
-            name: porta
-        env:
-        - name: LOG_LEVEL
-          value: "info"
-
-

roles/flaresolverr/files/flaresolverr-service.yaml

@@ -1,12 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: flaresolverr-service
-  namespace: stack-arr
-spec:
-  ports:
-    - port: 8191
-      targetPort: 8191
-  selector:
-    app: flaresolverr
-  type: ClusterIP

roles/flaresolverr/tasks/main.yml

@@ -1,51 +0,0 @@
-- name: Remover o diretório /tmp/stack-arr/sonarr/kubernetes-files
-  ansible.builtin.file:
-    path: /tmp/stack-arr/sonarr/kubernetes-files
-    state: absent
-
-- name: Criar diretório temporário no remoto
-  file:
-    path: /tmp/stack-arr/sonarr/kubernetes-files
-    state: directory
-    mode: '0755'
-
-- name: Copy file with owner and permissions
-  ansible.builtin.copy:
-    src: ../files
-    dest: /tmp/stack-arr/sonarr/kubernetes-files
-    owner: fenix
-    group: root
-    mode: '0644'
-
-
-#- name: Obter várias notas do Bitwarden
-#  shell: |
-#    echo "unlock"
-#    BW_SESSION=$(bw unlock {{ bw_password }} --raw)
-#    echo "get item"
-#    bw get item "{{ item.id }}" --session $BW_SESSION | jq -r '.notes' > {{ item.dest }}
-#  loop:
-#    - { id: "iac.ansible.stackarr.sonarr.secret", dest: "/tmp/stack-arr/sonarr/kubernetes-files/files/sonarr-secret.yaml" }
-#  args:
-#    executable: /bin/bash
-#  environment:
-#    BW_PASSWORD: "{{ BW_PASSWORD }}"
-
-
-- name: Listar conteúdo do diretório remoto
-  shell: ls -l /tmp/stack-arr/sonarr/kubernetes-files/files
-  register: resultado_ls
-
-
-- name: Mostrar resultado do ls
-  debug:
-    var: resultado_ls.stdout_lines
-
-
-- name: Aplicar o stolon
-  become: yes
-  become_user: fenix 
-  shell: |
-    kubectl apply -f /tmp/stack-arr/sonarr/kubernetes-files/files/
-  environment:
-    KUBECONFIG:  /home/fenix/.kube/config

roles/flaresolverr/vars/main.yml

@@ -1,4 +0,0 @@
-bw_password: "{{ lookup('env', 'BW_PASSWORD') }}"
-VAULTWARDEN_LINK: "{{ lookup('env', 'VAULTWARDEN_LINK') }}"
-BW_CLIENTID: "{{ lookup('env', 'BW_CLIENTID') }}"
-BW_CLIENTSECRET : "{{ lookup('env', 'BW_CLIENTSECRET') }}"

roles/jellyfin/files/jellyfin-deployment.yaml

@@ -1,65 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: jellyfin
-  namespace: stack-arr
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: jellyfin
-  template:
-    metadata:
-      labels:
-        app: jellyfin
-    spec:
-      imagePullSecrets:
-      - name: regcred
-      containers:
-      - name: jellyfin
-        image: lscr.io/linuxserver/jellyfin:10.11.5
-        resources:
-          limits:
-            memory: "9G" # Maximum memory allowed
-            cpu: "4" # Maximum CPU allowed
-        securityContext:
-          capabilities:
-            add:
-              - NET_ADMIN
-        ports:
-          - containerPort: 8096
-            name: webui
-          - containerPort: 8920
-            name: webuihttps
-          - containerPort: 1900
-            name: dlnaudp
-          - containerPort: 7359
-            name: discoveryudp
-        env:
-        - name: PUID
-          value: "1013"
-        - name: PGID
-          value: "1013"
-        - name: TZ
-          value: 'Etc/UTC'
-        volumeMounts:
-        - name: config
-          mountPath: /config
-        - name: videos
-          mountPath: /videos
-        - name: books
-          mountPath: /books
-      volumes:
-      - name: config
-        persistentVolumeClaim:
-          claimName: jellyfin-config-pvc
-      - name: videos
-        persistentVolumeClaim:
-          claimName: jellyfin-videos-pvc
-      - name: books
-        persistentVolumeClaim:
-          claimName: jellyfin-books-pvc
-
-
-
-

roles/jellyfin/files/jellyfin-nfs-csi.yaml

@@ -1,23 +0,0 @@
-apiVersion: storage.k8s.io/v1
-kind: StorageClass
-metadata:
-  name: jellyfin-nfs-csi
-  namespace: stack-arr
-provisioner: nfs.csi.k8s.io
-parameters:
-  server: 192.168.1.22
-  share: /mnt/fenix-main-nas-pool-0/data/k8s-Volumes/k8s-cluster-iac-deployed/stack-arr/jellyfin
-allowVolumeExpansion: true
-reclaimPolicy: Retain
----
-apiVersion: storage.k8s.io/v1
-kind: StorageClass
-metadata:
-  name: jellyfin-videos-nfs-csi
-  namespace: stack-arr
-provisioner: nfs.csi.k8s.io
-parameters:
-  server: 192.168.1.22
-  share: /mnt/fenix-main-nas-pool-0/data/Filmes_e_Series
-allowVolumeExpansion: true
-reclaimPolicy: Retain

roles/jellyfin/files/jellyfin-pvcs.yaml

@@ -1,93 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: jellyfin-config-pv
-  namespace: stack-arr
-spec:
-  capacity:
-    storage: 2Gi
-  storageClassName: jellyfin-nfs-csi
-  accessModes:
-    - ReadWriteOnce
-  persistentVolumeReclaimPolicy: Retain
-  nfs:
-    server: 192.168.1.22
-    path: /mnt/fenix-main-nas-pool-0/data/k8s-Volumes/k8s-cluster-iac-deployed/stack-arr/jellyfin/config
-  mountOptions:
-    - nolock
-    - nfsvers=3
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: jellyfin-config-pvc
-  namespace: stack-arr
-spec:
-  storageClassName: jellyfin-nfs-csi
-  accessModes:
-    - ReadWriteOnce
-  volumeName: jellyfin-config-pv
-  resources:
-    requests:
-      storage: 2Gi
----
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: jellyfin-videos-pv
-  namespace: stack-arr
-spec:
-  capacity:
-    storage: 150Gi
-  storageClassName: jellyfin-videos-nfs-csi
-  accessModes:
-    - ReadWriteOnce
-  persistentVolumeReclaimPolicy: Retain
-  nfs:
-    server: 192.168.1.22
-    path: /mnt/fenix-main-nas-pool-0/data/Filmes_e_Series
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: jellyfin-videos-pvc
-  namespace: stack-arr
-spec:
-  storageClassName: jellyfin-videos-nfs-csi
-  accessModes:
-    - ReadWriteOnce
-  volumeName: jellyfin-videos-pv
-  resources:
-    requests:
-      storage: 150Gi
----
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: jellyfin-books-pv
-  namespace: stack-arr
-spec:
-  capacity:
-    storage: 150Gi
-  storageClassName: jellyfin-videos-nfs-csi
-  accessModes:
-    - ReadWriteOnce
-  persistentVolumeReclaimPolicy: Retain
-  nfs:
-    server: 192.168.1.22
-    path: /mnt/fenix-main-nas-pool-0/data/Filmes_e_Series/Livros
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: jellyfin-books-pvc
-  namespace: stack-arr
-spec:
-  storageClassName: jellyfin-videos-nfs-csi
-  accessModes:
-    - ReadWriteOnce
-  volumeName: jellyfin-books-pv
-  resources:
-    requests:
-      storage: 150Gi
----

roles/jellyfin/files/jellyfin-service.yaml

@@ -1,22 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: jellyfin-service
-  namespace: stack-arr
-spec:
-  ports:
-    - port: 8096
-      targetPort: 8096
-      name: webui
-    - port: 8920
-      targetPort: 8920
-      name: webuihttps
-    - port: 1900
-      targetPort: 1900
-      name: dlnaudp
-    - port: 7359
-      targetPort: 7359
-      name: discoveryudp
-  selector:
-    app: jellyfin
-  type: ClusterIP

roles/jellyfin/tasks/main.yml

@@ -1,51 +0,0 @@
-- name: Remover o diretório /tmp/stack-arr/jellyfin/kubernetes-files
-  ansible.builtin.file:
-    path: /tmp/stack-arr/jellyfin/kubernetes-files
-    state: absent
-
-- name: Criar diretório temporário no remoto
-  file:
-    path: /tmp/stack-arr/jellyfin/kubernetes-files
-    state: directory
-    mode: '0755'
-
-- name: Copy file with owner and permissions
-  ansible.builtin.copy:
-    src: ../files
-    dest: /tmp/stack-arr/jellyfin/kubernetes-files
-    owner: fenix
-    group: root
-    mode: '0644'
-
-
-#- name: Obter várias notas do Bitwarden
-#  shell: |
-#    echo "unlock"
-#    BW_SESSION=$(bw unlock {{ bw_password }} --raw)
-#    echo "get item"
-#    bw get item "{{ item.id }}" --session $BW_SESSION | jq -r '.notes' > {{ item.dest }}
-#  loop:
-#    - { id: "iac.ansible.stackarr.jellyfin.secret", dest: "/tmp/stack-arr/jellyfin/kubernetes-files/files/jelly-secret.yaml" }
-#  args:
-#    executable: /bin/bash
-#  environment:
-#    BW_PASSWORD: "{{ BW_PASSWORD }}"
-
-
-- name: Listar conteúdo do diretório remoto
-  shell: ls -l /tmp/stack-arr/jellyfin/kubernetes-files/files
-  register: resultado_ls
-
-
-- name: Mostrar resultado do ls
-  debug:
-    var: resultado_ls.stdout_lines
-
-
-- name: Aplicar o stolon
-  become: yes
-  become_user: fenix 
-  shell: |
-    kubectl apply -f /tmp/stack-arr/jellyfin/kubernetes-files/files/
-  environment:
-    KUBECONFIG:  /home/fenix/.kube/config

roles/jellyfin/vars/main.yml

@@ -1,4 +0,0 @@
-bw_password: "{{ lookup('env', 'BW_PASSWORD') }}"
-VAULTWARDEN_LINK: "{{ lookup('env', 'VAULTWARDEN_LINK') }}"
-BW_CLIENTID: "{{ lookup('env', 'BW_CLIENTID') }}"
-BW_CLIENTSECRET : "{{ lookup('env', 'BW_CLIENTSECRET') }}"

roles/jellyseerr/files/jellyseerr-deployment.yaml

@@ -1,62 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: jellyseerr
-  namespace: stack-arr
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: jellyseerr
-  template:
-    metadata:
-      labels:
-        app: jellyseerr
-    spec:
-      imagePullSecrets:
-      - name: regcred
-      containers:
-      - name: jellyseerr
-        image: fallenbagel/jellyseerr:2.7.3
-        ports:
-          - containerPort: 5055
-            name: webui
-        env:
-        - name: TZ
-          value: 'Etc/UTC'
-        - name: LOG_LEVEL
-          value: 'debug'
-        - name: DB_TYPE
-          value: 'postgres'
-        - name: DB_HOST
-          value: 'stolon-proxy-service.postgresql.svc.cluster.local'
-        - name: DB_PORT
-          value: '5432'
-        - name: DB_USER
-          valueFrom:
-            secretKeyRef:
-              name: jellyseerr-secret
-              key: username
-        - name: DB_PASS
-          valueFrom:
-            secretKeyRef:
-              name: jellyseerr-secret
-              key: password
-        - name: DB_NAME
-          valueFrom:
-            secretKeyRef:
-              name: jellyseerr-secret
-              key: maindb
-        - name: DB_LOG_QUERIES
-          value: 'false'
-        volumeMounts:
-        - name: config
-          mountPath: /app/config
-      volumes:
-      - name: config
-        persistentVolumeClaim:
-          claimName: jellyseerr-config-pvc
-
-
-
-

roles/jellyseerr/files/jellyseerr-nfs-csi.yaml

@@ -1,11 +0,0 @@
-apiVersion: storage.k8s.io/v1
-kind: StorageClass
-metadata:
-  name: jellyseerr-nfs-csi
-  namespace: stack-arr
-provisioner: nfs.csi.k8s.io
-parameters:
-  server: 192.168.1.22
-  share: /mnt/fenix-main-nas-pool-0/data/k8s-Volumes/k8s-cluster-iac-deployed/stack-arr/jellyseerr
-allowVolumeExpansion: true
-reclaimPolicy: Retain

roles/jellyseerr/files/jellyseerr-pvcs.yaml

@@ -1,30 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: jellyseerr-config-pv
-  namespace: stack-arr
-spec:
-  capacity:
-    storage: 2Gi
-  storageClassName: jellyseerr-nfs-csi
-  accessModes:
-    - ReadWriteOnce
-  persistentVolumeReclaimPolicy: Retain
-  nfs:
-    server: 192.168.1.22
-    path: /mnt/fenix-main-nas-pool-0/data/k8s-Volumes/k8s-cluster-iac-deployed/stack-arr/jellyseerr/config
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: jellyseerr-config-pvc
-  namespace: stack-arr
-spec:
-  storageClassName: jellyseerr-nfs-csi
-  accessModes:
-    - ReadWriteOnce
-  volumeName: jellyseerr-config-pv
-  resources:
-    requests:
-      storage: 2Gi
----

roles/jellyseerr/files/jellyseerr-secret.yaml

@@ -1,10 +0,0 @@
-apiVersion: v1
-kind: Secret
-metadata:
-    name:  jellyseerr-secret
-    namespace: stack-arr
-type: Opaque
-data:
-    username: dXNlcm5hbWU=
-    password: cGFzc3dvcmQ=
-    maindb: bWFpbmRiLXByb3dsYXJy

roles/jellyseerr/files/jellyseerr-service.yaml

@@ -1,12 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: jellyseerr-service
-  namespace: stack-arr
-spec:
-  ports:
-    - port: 5055
-      targetPort: 5055
-  selector:
-    app: jellyseerr
-  type: ClusterIP

roles/jellyseerr/tasks/main.yml

@@ -1,51 +0,0 @@
-- name: Remover o diretório /tmp/stack-arr/jellyseerr/kubernetes-files
-  ansible.builtin.file:
-    path: /tmp/stack-arr/jellyseerr/kubernetes-files
-    state: absent
-
-- name: Criar diretório temporário no remoto
-  file:
-    path: /tmp/stack-arr/jellyseerr/kubernetes-files
-    state: directory
-    mode: '0755'
-
-- name: Copy file with owner and permissions
-  ansible.builtin.copy:
-    src: ../files
-    dest: /tmp/stack-arr/jellyseerr/kubernetes-files
-    owner: fenix
-    group: root
-    mode: '0644'
-
-
-- name: Obter várias notas do Bitwarden
-  shell: |
-    echo "unlock"
-    BW_SESSION=$(bw unlock {{ bw_password }} --raw)
-    echo "get item"
-    bw get item "{{ item.id }}" --session $BW_SESSION | jq -r '.notes' > {{ item.dest }}
-  loop:
-    - { id: "iac.ansible.stackarr.jellyseerr.secret", dest: "/tmp/stack-arr/jellyseerr/kubernetes-files/files/jellyseerr-secret.yaml" }
-  args:
-    executable: /bin/bash
-  environment:
-    BW_PASSWORD: "{{ BW_PASSWORD }}"
-
-
-- name: Listar conteúdo do diretório remoto
-  shell: ls -l /tmp/stack-arr/jellyseerr/kubernetes-files/files
-  register: resultado_ls
-
-
-- name: Mostrar resultado do ls
-  debug:
-    var: resultado_ls.stdout_lines
-
-
-- name: Aplicar o stolon
-  become: yes
-  become_user: fenix 
-  shell: |
-    kubectl apply -f /tmp/stack-arr/jellyseerr/kubernetes-files/files/
-  environment:
-    KUBECONFIG:  /home/fenix/.kube/config

roles/jellyseerr/vars/main.yml

@@ -1,4 +0,0 @@
-bw_password: "{{ lookup('env', 'BW_PASSWORD') }}"
-VAULTWARDEN_LINK: "{{ lookup('env', 'VAULTWARDEN_LINK') }}"
-BW_CLIENTID: "{{ lookup('env', 'BW_CLIENTID') }}"
-BW_CLIENTSECRET : "{{ lookup('env', 'BW_CLIENTSECRET') }}"

roles/kube-master/tasks/main.yml

@@ -22,7 +22,7 @@
   replace:
     path: /tmp/kube-flannel.yml
     regexp: '10\.244\.0\.0/16'
-    replace: '10.240.0.0/16' # .3.
+    replace: '10.244.0.0/16' # .3.
 
 - name: Corrigir net-conf.json no manifest do Flannel
   become: true
@@ -55,9 +55,8 @@
     argv:
       - kubeadm
       - init
-      - --pod-network-cidr=10.240.0.0/16 # .3. 
+      - --pod-network-cidr=10.244.0.0/16 # .3. 
-      - --apiserver-advertise-address=192.168.1.50
+      - --apiserver-advertise-address=192.168.1.150
-      - --service-cidr=10.95.0.0/16
     creates: /etc/kubernetes/admin.conf 
 
 
@@ -103,37 +102,6 @@
   delay: 6
   become: yes
 
-
-- name: kubernetes untaint node-role.kubernetes.io/control-plane:NoSchedule
-  become: true
-  shell: |
-      kubectl taint nodes --all node-role.kubernetes.io/control-plane:NoSchedule-
-  become_user: fenix 
-  environment:
-    KUBECONFIG:  /home/fenix/.kube/config
-  ignore_errors: yes
-
-
-- name: kubernetes unlabel node-role.kubernetes.io/control-plane
-  become: true
-  shell: |
-      kubectl label nodes --all node-role.kubernetes.io/control-plane-
-  become_user: fenix 
-  environment:
-    KUBECONFIG:  /home/fenix/.kube/config
-  ignore_errors: yes
-
-- name: kubernetes unlabel node.kubernetes.io/exclude-from-external-load-balancers
-  become: true
-  shell: |
-      kubectl label nodes --all node.kubernetes.io/exclude-from-external-load-balancers-
-  become_user: fenix 
-  environment:
-    KUBECONFIG:  /home/fenix/.kube/config
-  ignore_errors: yes
-
-
-
 - name: cat flannel
   become: true
   shell: |
@@ -165,81 +133,6 @@
   delay: 6
   become: yes
 
-- name: Instalar Helm no nó master
-  become: true
-  shell: |
-    curl -fsSL https://raw.githubusercontent.com/helm/helm/master/scripts/get-helm-3 | bash
-  args:
-    creates: /usr/local/bin/helm
-    
-- name: Adicionar repositório Helm do CSI NFS
-  command: >
-    helm repo add csi-driver-nfs https://raw.githubusercontent.com/kubernetes-csi/csi-driver-nfs/master/charts
-  args:
-    creates: /root/.cache/helm/repository/csi-driver-nfs-index.yaml
-
-- name: Atualizar repositórios Helm
-  command: helm repo update
-  
-- name: Instalar CSI NFS Driver via Helm
-  command: helm upgrade --install csi-driver-nfs csi-driver-nfs/csi-driver-nfs --namespace kube-system --version 4.12.0
-  register: resultado_nfs
-  environment:
-    KUBECONFIG:  /home/fenix/.kube/config
-
- 
-- name: Mostrar resultado do nfs csi driver
-  debug:
-    var: resultado_nfs.stdout_lines
-
-
-- name: Instalar MetalLB (manifest oficial)
-  shell: kubectl apply -f https://raw.githubusercontent.com/metallb/metallb/v0.13.9/config/manifests/metallb-native.yaml
-  become_user: fenix 
-  environment:
-    KUBECONFIG:  /home/fenix/.kube/config
-
-- name: Esperar pelo webhook do MetalLB
-  shell: kubectl get endpoints webhook-service -n metallb-system -o jsonpath='{.subsets[*].addresses[*].ip}'
-  register: webhook_ready
-  until: webhook_ready.stdout != ""
-  retries: 10
-  delay: 10
-  become_user: fenix 
-  environment:
-    KUBECONFIG:  /home/fenix/.kube/config
-
-- name: Criar IP pool
-  shell: |
-    cat <<EOF | kubectl apply -f -
-    apiVersion: metallb.io/v1beta1
-    kind: IPAddressPool
-    metadata:
-      name: local-pool
-      namespace: metallb-system
-    spec:
-      addresses:
-        - 10.240.0.100-10.240.0.250
-    EOF
-  become_user: fenix 
-  environment:
-    KUBECONFIG:  /home/fenix/.kube/config
-
-- name: Criar anúncio L2
-  shell: |
-    cat <<EOF | kubectl apply -f -
-    apiVersion: metallb.io/v1beta1
-    kind: L2Advertisement
-    metadata:
-      name: advert
-      namespace: metallb-system
-    EOF
-  become_user: fenix 
-  environment:
-    KUBECONFIG:  /home/fenix/.kube/config
-
-
-
 - name: Get kubeadm join command
   become: true
   shell: kubeadm token create --print-join-command

roles/kube-master/tasks/patch_netconf.py

@@ -10,7 +10,7 @@ with open("/tmp/kube-flannel.yml", "r") as f:
 for doc in docs:
     if doc.get("kind") == "ConfigMap" and doc.get("metadata", {}).get("name") == "kube-flannel-cfg":
         doc["data"]["net-conf.json"] = '''{
-  "Network": "10.240.0.0/16",
+  "Network": "10.244.0.0/16",
   "Backend": {
     "Type": "vxlan"
   },

roles/kubernetes/tasks/main.yml

@@ -88,7 +88,6 @@
       - kubelet
       - kubeadm
       - kubectl
-      - nfs-common
     state: present
     update_cache: yes
 
@@ -162,5 +161,3 @@
     owner: root
     group: root
     mode: '0644'
-
-

roles/lazylibrarian/files/lazylibrarian-deployment.yaml

@@ -1,54 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: lazylibrarian
-  namespace: stack-arr
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: lazylibrarian
-  template:
-    metadata:
-      labels:
-        app: lazylibrarian
-    spec:
-      imagePullSecrets:
-      - name: regcred
-      containers:
-      - name: lazylibrarian
-        image: lscr.io/linuxserver/lazylibrarian:latest
-        securityContext:
-          capabilities:
-            add:
-              - NET_ADMIN
-        ports:
-          - containerPort: 5299
-            name: webui
-        env:
-        - name: PUID
-          value: "1013"
-        - name: PGID
-          value: "1013"
-        - name: TZ
-          value: 'Etc/UTC'
-        volumeMounts:
-        - name: config
-          mountPath: /config
-        - name: books
-          mountPath: /books
-        - name: downloads
-          mountPath: /downloads
-      volumes:
-      - name: config
-        persistentVolumeClaim:
-          claimName: lazylibrarian-config-pvc
-      - name: books
-        persistentVolumeClaim:
-          claimName: lazylibrarian-books-pvc
-      - name: downloads
-        persistentVolumeClaim:
-          claimName: qbittorrent-downloads-pvc
-
-
-

roles/lazylibrarian/files/lazylibrarian-nfs-csi.yaml

@@ -1,11 +0,0 @@
-apiVersion: storage.k8s.io/v1
-kind: StorageClass
-metadata:
-  name: lazylibrarian-nfs-csi
-  namespace: stack-arr
-provisioner: nfs.csi.k8s.io
-parameters:
-  server: 192.168.1.22
-  share: /mnt/fenix-main-nas-pool-0/data/k8s-Volumes/k8s-cluster-iac-deployed/stack-arr/lazylibrarian
-allowVolumeExpansion: true
-reclaimPolicy: Retain

roles/lazylibrarian/files/lazylibrarian-pvcs.yaml

@@ -1,60 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: lazylibrarian-config-pv
-  namespace: stack-arr
-spec:
-  capacity:
-    storage: 20Gi
-  storageClassName: lazylibrarian-nfs-csi
-  accessModes:
-    - ReadWriteOnce
-  persistentVolumeReclaimPolicy: Retain
-  nfs:
-    server: 192.168.1.22
-    path: /mnt/fenix-main-nas-pool-0/data/k8s-Volumes/k8s-cluster-iac-deployed/stack-arr/lazylibrarian/config
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: lazylibrarian-config-pvc
-  namespace: stack-arr
-spec:
-  storageClassName: lazylibrarian-nfs-csi
-  accessModes:
-    - ReadWriteOnce
-  volumeName: lazylibrarian-config-pv
-  resources:
-    requests:
-      storage: 20Gi
----
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: lazylibrarian-media-pv
-  namespace: stack-arr
-spec:
-  capacity:
-    storage: 150Gi
-  storageClassName: jellyfin-videos-nfs-csi
-  accessModes:
-    - ReadWriteOnce
-  persistentVolumeReclaimPolicy: Retain
-  nfs:
-    server: 192.168.1.22
-    path: /mnt/fenix-main-nas-pool-0/data/Filmes_e_Series/Livros
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: lazylibrarian-books-pvc
-  namespace: stack-arr
-spec:
-  storageClassName: jellyfin-videos-nfs-csi
-  accessModes:
-    - ReadWriteOnce
-  volumeName: lazylibrarian-media-pv
-  resources:
-    requests:
-      storage: 150Gi
----

roles/lazylibrarian/files/lazylibrarian-service.yaml

@@ -1,12 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: lazylibrarian-service
-  namespace: stack-arr
-spec:
-  ports:
-    - port: 5299 
-      targetPort: 5299 
-  selector:
-    app: lazylibrarian
-  type: ClusterIP

roles/lazylibrarian/tasks/main.yml

@@ -1,51 +0,0 @@
-- name: Remover o diretório /tmp/stack-arr/lazylibrarian/kubernetes-files
-  ansible.builtin.file:
-    path: /tmp/stack-arr/lazylibrarian/kubernetes-files
-    state: absent
-
-- name: Criar diretório temporário no remoto
-  file:
-    path: /tmp/stack-arr/lazylibrarian/kubernetes-files
-    state: directory
-    mode: '0755'
-
-- name: Copy file with owner and permissions
-  ansible.builtin.copy:
-    src: ../files
-    dest: /tmp/stack-arr/lazylibrarian/kubernetes-files
-    owner: fenix
-    group: root
-    mode: '0644'
-
-
-#- name: Obter várias notas do Bitwarden
-#  shell: |
-#    echo "unlock"
-#    BW_SESSION=$(bw unlock {{ bw_password }} --raw)
-#    echo "get item"
-#    bw get item "{{ item.id }}" --session $BW_SESSION | jq -r '.notes' > {{ item.dest }}
-#  loop:
-#    - { id: "iac.ansible.stackarr.lazylibrarian.secret", dest: "/tmp/stack-arr/lazylibrarian/kubernetes-files/files/lazylibrarian-secret.yaml" }
-#  args:
-#    executable: /bin/bash
-#  environment:
-#    BW_PASSWORD: "{{ BW_PASSWORD }}"
-
-
-- name: Listar conteúdo do diretório remoto
-  shell: ls -l /tmp/stack-arr/lazylibrarian/kubernetes-files/files
-  register: resultado_ls
-
-
-- name: Mostrar resultado do ls
-  debug:
-    var: resultado_ls.stdout_lines
-
-
-- name: Aplicar o stolon
-  become: yes
-  become_user: fenix 
-  shell: |
-    kubectl apply -f /tmp/stack-arr/lazylibrarian/kubernetes-files/files/
-  environment:
-    KUBECONFIG:  /home/fenix/.kube/config

roles/lazylibrarian/vars/main.yml

@@ -1,4 +0,0 @@
-bw_password: "{{ lookup('env', 'BW_PASSWORD') }}"
-VAULTWARDEN_LINK: "{{ lookup('env', 'VAULTWARDEN_LINK') }}"
-BW_CLIENTID: "{{ lookup('env', 'BW_CLIENTID') }}"
-BW_CLIENTSECRET : "{{ lookup('env', 'BW_CLIENTSECRET') }}"

roles/libreTranslate/files/libretranslate-deployment.yaml

@@ -1,26 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: libretranslate
-  namespace: stack-arr
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: libretranslate
-  template:
-    metadata:
-      labels:
-        app: libretranslate
-    spec:
-      containers:
-        - name: libretranslate
-          image: libretranslate/libretranslate:latest
-          ports:
-            - containerPort: 5000
-          env:
-            - name: LT_HTTP_HOST
-              value: "0.0.0.0"
-            - name: LT_HTTP_PORT
-              value: "5000"
-

roles/libreTranslate/files/libretranslate-service.yaml

@@ -1,12 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: libretranslate-service
-  namespace: stack-arr
-spec:
-  ports:
-    - port: 5000
-      targetPort: 5000
-  selector:
-    app: libretranslate
-  type: ClusterIP

roles/libreTranslate/tasks/main.yml

@@ -1,51 +0,0 @@
-- name: Remover o diretório /tmp/stack-arr/libreTranslate/kubernetes-files
-  ansible.builtin.file:
-    path: /tmp/stack-arr/libreTranslate/kubernetes-files
-    state: absent
-
-- name: Criar diretório temporário no remoto
-  file:
-    path: /tmp/stack-arr/libreTranslate/kubernetes-files
-    state: directory
-    mode: '0755'
-
-- name: Copy file with owner and permissions
-  ansible.builtin.copy:
-    src: ../files
-    dest: /tmp/stack-arr/libreTranslate/kubernetes-files
-    owner: fenix
-    group: root
-    mode: '0644'
-
-
-#- name: Obter várias notas do Bitwarden
-#  shell: |
-#    echo "unlock"
-#    BW_SESSION=$(bw unlock {{ bw_password }} --raw)
-#    echo "get item"
-#    bw get item "{{ item.id }}" --session $BW_SESSION | jq -r '.notes' > {{ item.dest }}
-#  loop:
-#    - { id: "iac.ansible.stackarr.radarr.secret", dest: "/tmp/stack-arr/radarr/kubernetes-files/files/radarr-secret.yaml" }
-#  args:
-#    executable: /bin/bash
-#  environment:
-#    BW_PASSWORD: "{{ BW_PASSWORD }}"
-
-
-- name: Listar conteúdo do diretório remoto
-  shell: ls -l /tmp/stack-arr/libreTranslate/kubernetes-files/files
-  register: resultado_ls
-
-
-- name: Mostrar resultado do ls
-  debug:
-    var: resultado_ls.stdout_lines
-
-
-- name: Aplicar o stolon
-  become: yes
-  become_user: fenix 
-  shell: |
-    kubectl apply -f /tmp/stack-arr/libreTranslate/kubernetes-files/files/
-  environment:
-    KUBECONFIG:  /home/fenix/.kube/config

roles/libreTranslate/vars/main.yml

@@ -1,4 +0,0 @@
-bw_password: "{{ lookup('env', 'BW_PASSWORD') }}"
-VAULTWARDEN_LINK: "{{ lookup('env', 'VAULTWARDEN_LINK') }}"
-BW_CLIENTID: "{{ lookup('env', 'BW_CLIENTID') }}"
-BW_CLIENTSECRET : "{{ lookup('env', 'BW_CLIENTSECRET') }}"

roles/lingarr/files/lingarr-deployment.yaml

@@ -1,36 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: lingarr
-  namespace: stack-arr
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: lingarr
-  template:
-    metadata:
-      labels:
-        app: lingarr
-    spec:
-      containers:
-        - name: lingarr
-          image: lingarr/lingarr:latest
-          ports:
-            - containerPort: 9876
-          env:
-            - name: ASPNETCORE_URLS
-              value: "http://+:9876"
-            - name: WHISPER_BASE_URL
-              value: "http://whisperasr-service.stack-arr.svc.cluster.local:9000"
-            - name: SOURCE_LANGUAGE
-              value: "auto"
-            - name: TARGET_LANGUAGE
-              value: "pt"
-          volumeMounts:
-            - name: config
-              mountPath: /app/config
-      volumes:
-      - name: config
-        persistentVolumeClaim:
-          claimName: lingarr-config-pvc

roles/lingarr/files/lingarr-nfs-csi.yaml

@@ -1,11 +0,0 @@
-apiVersion: storage.k8s.io/v1
-kind: StorageClass
-metadata:
-  name: lingarr-nfs-csi
-  namespace: stack-arr
-provisioner: nfs.csi.k8s.io
-parameters:
-  server: 192.168.1.22
-  share: /mnt/fenix-main-nas-pool-0/data/k8s-Volumes/k8s-cluster-iac-deployed/stack-arr/lingarr
-allowVolumeExpansion: true
-reclaimPolicy: Retain

roles/lingarr/files/lingarr-pvcs.yaml

@@ -1,29 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: lingarr-config-pv
-  namespace: stack-arr
-spec:
-  capacity:
-    storage: 10Gi
-  storageClassName: lingarr-nfs-csi
-  accessModes:
-    - ReadWriteOnce
-  persistentVolumeReclaimPolicy: Retain
-  nfs:
-    server: 192.168.1.22
-    path: /mnt/fenix-main-nas-pool-0/data/k8s-Volumes/k8s-cluster-iac-deployed/stack-arr/lingarr/config
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: lingarr-config-pvc
-  namespace: stack-arr
-spec:
-  storageClassName: lingarr-nfs-csi
-  accessModes:
-    - ReadWriteOnce
-  volumeName: lingarr-config-pv
-  resources:
-    requests:
-      storage: 10Gi

roles/lingarr/files/lingarr-service.yaml

@@ -1,12 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: lingarr-service
-  namespace: stack-arr
-spec:
-  ports:
-    - port: 9876
-      targetPort: 9876
-  selector:
-    app: lingarr
-  type: ClusterIP

roles/lingarr/tasks/main.yml

@@ -1,51 +0,0 @@
-- name: Remover o diretório /tmp/stack-arr/lingarr/kubernetes-files
-  ansible.builtin.file:
-    path: /tmp/stack-arr/lingarr/kubernetes-files
-    state: absent
-
-- name: Criar diretório temporário no remoto
-  file:
-    path: /tmp/stack-arr/lingarr/kubernetes-files
-    state: directory
-    mode: '0755'
-
-- name: Copy file with owner and permissions
-  ansible.builtin.copy:
-    src: ../files
-    dest: /tmp/stack-arr/lingarr/kubernetes-files
-    owner: fenix
-    group: root
-    mode: '0644'
-
-
-#- name: Obter várias notas do Bitwarden
-#  shell: |
-#    echo "unlock"
-#    BW_SESSION=$(bw unlock {{ bw_password }} --raw)
-#    echo "get item"
-#    bw get item "{{ item.id }}" --session $BW_SESSION | jq -r '.notes' > {{ item.dest }}
-#  loop:
-#    - { id: "iac.ansible.stackarr.radarr.secret", dest: "/tmp/stack-arr/radarr/kubernetes-files/files/radarr-secret.yaml" }
-#  args:
-#    executable: /bin/bash
-#  environment:
-#    BW_PASSWORD: "{{ BW_PASSWORD }}"
-
-
-- name: Listar conteúdo do diretório remoto
-  shell: ls -l /tmp/stack-arr/lingarr/kubernetes-files/files
-  register: resultado_ls
-
-
-- name: Mostrar resultado do ls
-  debug:
-    var: resultado_ls.stdout_lines
-
-
-- name: Aplicar o stolon
-  become: yes
-  become_user: fenix 
-  shell: |
-    kubectl apply -f /tmp/stack-arr/lingarr/kubernetes-files/files/
-  environment:
-    KUBECONFIG:  /home/fenix/.kube/config

roles/lingarr/vars/main.yml

@@ -1,4 +0,0 @@
-bw_password: "{{ lookup('env', 'BW_PASSWORD') }}"
-VAULTWARDEN_LINK: "{{ lookup('env', 'VAULTWARDEN_LINK') }}"
-BW_CLIENTID: "{{ lookup('env', 'BW_CLIENTID') }}"
-BW_CLIENTSECRET : "{{ lookup('env', 'BW_CLIENTSECRET') }}"

roles/mangareader/files/mangareader-deployment.yaml

@@ -1,90 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: mangareader
-  namespace: stack-arr
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: mangareader
-  template:
-    metadata:
-      labels:
-        app: mangareader
-    spec:
-      securityContext:
-        fsGroup: 1013
-      imagePullSecrets:
-      - name: regcred
-      containers:
-      - name: mangareader
-        image: ghcr.io/suwayomi/tachidesk:v2.1.2061
-        securityContext:
-          capabilities:
-            add:
-              - NET_ADMIN
-        ports:
-          - containerPort: 4567
-            name: webui
-        env:
-        - name: PUID
-          value: "1013"
-        - name: PGID
-          value: "1013"
-        - name: TZ
-          value: 'Etc/UTC'
-        - name: AUTO_DOWNLOAD_CHAPTERS
-          value: 'true'
-        - name: AUTO_BACKUP_INCLUDE_MANGA
-          value: 'false'
-        - name: AUTO_BACKUP_INCLUDE_CATEGORIES
-          value: 'false'
-        - name: AUTO_BACKUP_INCLUDE_CHAPTERS
-          value: 'false'
-        - name: AUTO_BACKUP_INCLUDE_TRACKING
-          value: 'false'
-        - name: AUTO_BACKUP_INCLUDE_HISTORY
-          value: 'false'
-        - name: AUTO_BACKUP_INCLUDE_CLIENT_DATA
-          value: 'false'
-        - name: AUTO_BACKUP_INCLUDE_SERVER_SETTINGS
-          value: 'false'
-        - name: FLARESOLVERR_ENABLED
-          value: 'true'
-        - name: FLARESOLVERR_URL
-          value: 'http://flaresolverr-service.stack-arr.svc.cluster.local:8191'
-        - name: DATABASE_TYPE
-          value: 'POSTGRESQL'
-        - name: DATABASE_URL
-          value: 'postgresql://stolon-proxy-service.postgresql.svc.cluster.local:5432/mangareader'
-        - name: DATABASE_USERNAME
-          valueFrom:
-            secretKeyRef:
-              name: mangareader-secret
-              key: username
-        - name: DATABASE_PASSWORD
-          valueFrom:
-            secretKeyRef:
-              name: mangareader-secret
-              key: password
-        volumeMounts:
-        - name: config
-          mountPath: /home/suwayomi/.local/share/Tachidesk
-        - name: books
-          mountPath: /books
-        - name: downloads
-          mountPath: /downloads
-      volumes:
-      - name: config
-        persistentVolumeClaim:
-          claimName: mangareader-config-pvc
-      - name: books
-        persistentVolumeClaim:
-          claimName: mangareader-books-pvc
-      - name: downloads
-        persistentVolumeClaim:
-          claimName: qbittorrent-downloads-pvc
-
-
-

roles/mangareader/files/mangareader-nfs-csi.yaml

@@ -1,11 +0,0 @@
-apiVersion: storage.k8s.io/v1
-kind: StorageClass
-metadata:
-  name: mangareader-nfs-csi
-  namespace: stack-arr
-provisioner: nfs.csi.k8s.io
-parameters:
-  server: 192.168.1.22
-  share: /mnt/fenix-main-nas-pool-0/data/k8s-Volumes/k8s-cluster-iac-deployed/stack-arr/mangareader
-allowVolumeExpansion: true
-reclaimPolicy: Retain

roles/mangareader/files/mangareader-pvcs.yaml

@@ -1,60 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: mangareader-config-pv
-  namespace: stack-arr
-spec:
-  capacity:
-    storage: 20Gi
-  storageClassName: mangareader-nfs-csi
-  accessModes:
-    - ReadWriteOnce
-  persistentVolumeReclaimPolicy: Retain
-  nfs:
-    server: 192.168.1.22
-    path: /mnt/fenix-main-nas-pool-0/data/k8s-Volumes/k8s-cluster-iac-deployed/stack-arr/mangareader/config
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: mangareader-config-pvc
-  namespace: stack-arr
-spec:
-  storageClassName: mangareader-nfs-csi
-  accessModes:
-    - ReadWriteOnce
-  volumeName: mangareader-config-pv
-  resources:
-    requests:
-      storage: 20Gi
----
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: mangareader-media-pv
-  namespace: stack-arr
-spec:
-  capacity:
-    storage: 150Gi
-  storageClassName: jellyfin-videos-nfs-csi
-  accessModes:
-    - ReadWriteOnce
-  persistentVolumeReclaimPolicy: Retain
-  nfs:
-    server: 192.168.1.22
-    path: /mnt/fenix-main-nas-pool-0/data/Filmes_e_Series/Livros
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: mangareader-books-pvc
-  namespace: stack-arr
-spec:
-  storageClassName: jellyfin-videos-nfs-csi
-  accessModes:
-    - ReadWriteOnce
-  volumeName: mangareader-media-pv
-  resources:
-    requests:
-      storage: 150Gi
----

roles/mangareader/files/mangareader-secret.yaml

@@ -1,9 +0,0 @@
-apiVersion: v1
-kind: Secret
-metadata:
-    name:  mangareader-secret
-    namespace: stack-arr
-type: Opaque
-data:
-    username: dXNlcm5hbWU=
-    password: cGFzc3dvcmQ=

roles/mangareader/files/mangareader-service.yaml

@@ -1,12 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: mangareader-service
-  namespace: stack-arr
-spec:
-  ports:
-    - port: 4567 
-      targetPort: 4567 
-  selector:
-    app: mangareader
-  type: ClusterIP

roles/mangareader/tasks/main.yml

@@ -1,51 +0,0 @@
-- name: Remover o diretório /tmp/stack-arr/mangareader/kubernetes-files
-  ansible.builtin.file:
-    path: /tmp/stack-arr/mangareader/kubernetes-files
-    state: absent
-
-- name: Criar diretório temporário no remoto
-  file:
-    path: /tmp/stack-arr/mangareader/kubernetes-files
-    state: directory
-    mode: '0755'
-
-- name: Copy file with owner and permissions
-  ansible.builtin.copy:
-    src: ../files
-    dest: /tmp/stack-arr/mangareader/kubernetes-files
-    owner: fenix
-    group: root
-    mode: '0644'
-
-
-- name: Obter várias notas do Bitwarden
-  shell: |
-    echo "unlock"
-    BW_SESSION=$(bw unlock {{ bw_password }} --raw)
-    echo "get item"
-    bw get item "{{ item.id }}" --session $BW_SESSION | jq -r '.notes' > {{ item.dest }}
-  loop:
-    - { id: "iac.ansible.stackarr.mangareader.secret", dest: "/tmp/stack-arr/mangareader/kubernetes-files/files/mangareader-secret.yaml" }
-  args:
-    executable: /bin/bash
-  environment:
-    BW_PASSWORD: "{{ BW_PASSWORD }}"
-
-
-- name: Listar conteúdo do diretório remoto
-  shell: ls -l /tmp/stack-arr/mangareader/kubernetes-files/files
-  register: resultado_ls
-
-
-- name: Mostrar resultado do ls
-  debug:
-    var: resultado_ls.stdout_lines
-
-
-- name: Aplicar o stolon
-  become: yes
-  become_user: fenix 
-  shell: |
-    kubectl apply -f /tmp/stack-arr/mangareader/kubernetes-files/files/
-  environment:
-    KUBECONFIG:  /home/fenix/.kube/config

roles/mangareader/vars/main.yml

@@ -1,4 +0,0 @@
-bw_password: "{{ lookup('env', 'BW_PASSWORD') }}"
-VAULTWARDEN_LINK: "{{ lookup('env', 'VAULTWARDEN_LINK') }}"
-BW_CLIENTID: "{{ lookup('env', 'BW_CLIENTID') }}"
-BW_CLIENTSECRET : "{{ lookup('env', 'BW_CLIENTSECRET') }}"

roles/minecraft/files/minecraft-deployment.yaml

@@ -1,42 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: minecraft
-  namespace: minecraft
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: minecraft
-  template:
-    metadata:
-      labels:
-        app: minecraft
-    spec:
-      securityContext:
-        fsGroup: 1013
-      imagePullSecrets:
-      - name: regcred
-      containers:
-      - name: minecraft
-        image: itzg/minecraft-bedrock-server
-        resources:
-          requests:
-            cpu: 500m
-            memory: 5Gi
-        ports:
-          - containerPort: 19132 
-            name: serverport
-        env:
-        - name: EULA
-          value: "TRUE"
-        volumeMounts:
-        - name: data
-          mountPath: /data
-      volumes:
-      - name: data
-        persistentVolumeClaim:
-          claimName: minecraft-data-pvc
-
-
-

roles/minecraft/files/minecraft-namespace.yaml

@@ -1,4 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: minecraft

roles/minecraft/files/minecraft-nfs-csi.yaml

@@ -1,11 +0,0 @@
-apiVersion: storage.k8s.io/v1
-kind: StorageClass
-metadata:
-  name: minecraft-nfs-csi
-  namespace: minecraft
-provisioner: nfs.csi.k8s.io
-parameters:
-  server: 192.168.1.22
-  share: /mnt/fenix-main-nas-pool-0/data/Minecraft/TI0
-allowVolumeExpansion: true
-reclaimPolicy: Retain

roles/minecraft/files/minecraft-pvcs.yaml

@@ -1,29 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: minecraft-config-pv
-  namespace: minecraft
-spec:
-  capacity:
-    storage: 30Gi
-  storageClassName: minecraft-nfs-csi
-  accessModes:
-    - ReadWriteOnce
-  persistentVolumeReclaimPolicy: Retain
-  nfs:
-    server: 192.168.1.22
-    path: /mnt/fenix-main-nas-pool-0/data/Minecraft/TI0
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: minecraft-config-pvc
-  namespace: minecraft
-spec:
-  storageClassName: minecraft-nfs-csi
-  accessModes:
-    - ReadWriteOnce
-  volumeName: minecraft-config-pv
-  resources:
-    requests:
-      storage: 30Gi

roles/minecraft/files/minecraft-service.yaml

@@ -1,12 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: minecraft-service
-  namespace: stack-arr
-spec:
-  ports:
-    - port: 19132
-      protocol: UDP
-  selector:
-    app: minecraft
-  type: ClusterIP

roles/minecraft/tasks/main.yml

@@ -1,52 +0,0 @@
-- name: Remover o diretório /tmp/stack-arr/minecraft/kubernetes-files
-  ansible.builtin.file:
-    path: /tmp/stack-arr/minecraft/kubernetes-files
-    state: absent
-
-- name: Criar diretório temporário no remoto
-  file:
-    path: /tmp/stack-arr/minecraft/kubernetes-files
-    state: directory
-    mode: '0755'
-
-- name: Copy file with owner and permissions
-  ansible.builtin.copy:
-    src: ../files
-    dest: /tmp/stack-arr/minecraft/kubernetes-files
-    owner: fenix
-    group: root
-    mode: '0644'
-
-
-#- name: Obter várias notas do Bitwarden
-#  shell: |
-#    echo "unlock"
-#    BW_SESSION=$(bw unlock {{ bw_password }} --raw)
-#    echo "get item"
-#    bw get item "{{ item.id }}" --session $BW_SESSION | jq -r '.notes' > {{ item.dest }}
-#  loop:
-#    - { id: "iac.ansible.stackarr.minecraft.secret", dest: "/tmp/stack-arr/minecraft/kubernetes-files/files/minecraft-secret.yaml" }
-#  args:
-#    executable: /bin/bash
-#  environment:
-#    BW_PASSWORD: "{{ BW_PASSWORD }}"
-
-
-- name: Listar conteúdo do diretório remoto
-  shell: ls -l /tmp/stack-arr/minecraft/kubernetes-files/files
-  register: resultado_ls
-
-
-- name: Mostrar resultado do ls
-  debug:
-    var: resultado_ls.stdout_lines
-
-
-- name: Aplicar o stolon
-  become: yes
-  become_user: fenix 
-  shell: |
-    kubectl apply -f /tmp/stack-arr/minecraft/kubernetes-files/files/minecraft-namespace.yaml
-    kubectl apply -f /tmp/stack-arr/minecraft/kubernetes-files/files/
-  environment:
-    KUBECONFIG:  /home/fenix/.kube/config

roles/minecraft/vars/main.yml

@@ -1,4 +0,0 @@
-bw_password: "{{ lookup('env', 'BW_PASSWORD') }}"
-VAULTWARDEN_LINK: "{{ lookup('env', 'VAULTWARDEN_LINK') }}"
-BW_CLIENTID: "{{ lookup('env', 'BW_CLIENTID') }}"
-BW_CLIENTSECRET : "{{ lookup('env', 'BW_CLIENTSECRET') }}"

roles/nvidia-base/tasks/main.yml

@@ -1,66 +0,0 @@
-- name: Instalar driver NVIDIA
-  become: yes
-  ansible.builtin.apt:
-    name: nvidia-driver-550
-    state: present
-
-- name: Instalar utilitários NVIDIA
-  become: yes
-  ansible.builtin.apt:
-    name: nvidia-utils-550
-    state: present
-
-
-- name: Reboot host e esperar voltar
-  become: yes
-  ansible.builtin.reboot:
-    reboot_timeout: 600   # tempo máximo para o host voltar (segundos)
-    test_command: whoami  # comando usado para validar que o host voltou
-
-- name: Adicionar chave GPG da NVIDIA
-  become: yes
-  become_user: fenix 
-  ansible.builtin.shell: |
-    curl -fsSL https://nvidia.github.io/libnvidia-container/gpgkey | sudo gpg --dearmor -o /usr/share/keyrings/nvidia-container-toolkit.gpg
-  args:
-    creates: /usr/share/keyrings/nvidia-container-toolkit.gpg
-
-- name: Adicionar repositório NVIDIA
-  become: yes
-  ansible.builtin.shell: |
-    curl -fsSL https://nvidia.github.io/libnvidia-container/gpgkey | sudo gpg --dearmor -o /usr/share/keyrings/nvidia-container-toolkit-keyring.gpg \
-      && curl -s -L https://nvidia.github.io/libnvidia-container/stable/deb/nvidia-container-toolkit.list | \
-        sed 's#deb https://#deb [signed-by=/usr/share/keyrings/nvidia-container-toolkit-keyring.gpg] https://#g' | \
-        sudo tee /etc/apt/sources.list.d/nvidia-container-toolkit.list
-  args:
-    creates: /etc/apt/sources.list.d/nvidia-container-toolkit.list
-
-- name: Atualizar cache de pacotes
-  become: yes
-  ansible.builtin.apt:
-    update_cache: yes
-
-- name: Instalar NVIDIA Container Toolkit
-  become: yes
-  ansible.builtin.apt:
-    name: nvidia-container-toolkit
-    state: present
-
-
-- name: Configurar runtime containerd
-  become: yes
-  ansible.builtin.shell: |
-    nvidia-ctk runtime configure --runtime=containerd
-
-- name: Reiniciar containerd
-  become: yes
-  ansible.builtin.systemd:
-    name: containerd
-    state: restarted
-
-
-- name: Mostrar resultado nvidia-smi
-  become: yes
-  ansible.builtin.debug:
-    var: nvidia_smi_output.stdout
-

roles/nvidia/files/time-slicing-config.yaml

@@ -1,17 +0,0 @@
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: time-slicing-config-all
-  namespace: gpu-operator 
-data:
-  any: |-
-    version: v1
-    flags:
-      migStrategy: none
-    sharing:
-      timeSlicing:
-        renameByDefault: false
-        failRequestsGreaterThanOne: false
-        resources:
-          - name: nvidia.com/gpu
-            replicas: 4

roles/nvidia/tasks/main.yml

@@ -1,67 +0,0 @@
-- name: Adicionar repositório Helm do nvida gpu
-  command: >
-    helm repo add nvidia https://nvidia.github.io/gpu-operator
-  ignore_errors: yes
-  
-- name: Atualizar repositórios Helm
-  command: helm repo update
-  
-- name: Instalar nvida gpu Driver via Helm
-  command:  helm upgrade --install nvidia-operator nvidia/gpu-operator --namespace gpu-operator --create-namespace
-  register: resultado_nvidia
-  environment:
-    KUBECONFIG:  /home/fenix/.kube/config
-
-- name: Mostrar resultado do nvida gpu Driver
-  debug:
-    var: resultado_nvidia.stdout_lines
-
-
-- name: Remover o diretório /tmp/nvidia/kubernetes-files
-  ansible.builtin.file:
-    path: /tmp/nvidia/kubernetes-files
-    state: absent
-
-- name: Criar diretório temporário no remoto
-  file:
-    path: /tmp/nvidia/kubernetes-files
-    state: directory
-    mode: '0755'
-
-- name: Copy file with owner and permissions
-  ansible.builtin.copy:
-    src: ../files
-    dest: /tmp/nvidia/kubernetes-files
-    owner: fenix
-    group: root
-    mode: '0644'
-
-
-- name: Listar conteúdo do diretório remoto
-  shell: ls -l /tmp/nvidia/kubernetes-files/files
-  register: resultado_ls
-
-
-- name: Mostrar resultado do ls
-  debug:
-    var: resultado_ls.stdout_lines
-
-
-- name: Aplicar o files
-  become: yes
-  become_user: fenix 
-  shell: |
-    kubectl apply -f /tmp/nvidia/kubernetes-files/files/
-  environment:
-    KUBECONFIG:  /home/fenix/.kube/config
-
-
-- name: Aplicar o files
-  become: yes
-  become_user: fenix 
-  shell: |
-    kubectl patch clusterpolicies.nvidia.com/cluster-policy -n gpu-operator --type merge -p "{\"spec\": {\"devicePlugin\": {\"config\": {\"name\": \"time-slicing-config-all\", \"default\": \"any\"}}}}"
-  environment:
-    KUBECONFIG:  /home/fenix/.kube/config
-
-

roles/prowlarr/files/prowlarr-deployment.yaml

@@ -1,67 +0,0 @@
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: prowlarr
-  namespace: stack-arr
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: prowlarr
-  template:
-    metadata:
-      labels:
-        app: prowlarr
-    spec:
-      imagePullSecrets:
-      - name: regcred
-      containers:
-      - name: prowlarr
-        image: lscr.io/linuxserver/prowlarr:2.1.5
-        securityContext:
-          capabilities:
-            add:
-              - NET_ADMIN
-        ports:
-          - containerPort: 9696
-            name: webui
-        env:
-        - name: PUID
-          value: "1013"
-        - name: PGID
-          value: "1013"
-        - name: TZ
-          value: 'Etc/UTC'
-        - name: PROWLARR__POSTGRES__HOST
-          value: 'stolon-proxy-service.postgresql.svc.cluster.local'
-        - name: PROWLARR__POSTGRES__USER
-          valueFrom:
-            secretKeyRef:
-              name: prowlarr-secret
-              key: username
-        - name: PROWLARR__POSTGRES__PASSWORD
-          valueFrom:
-            secretKeyRef:
-              name: prowlarr-secret
-              key: password
-        - name: PROWLARR__POSTGRES__MAINDB
-          valueFrom:
-            secretKeyRef:
-              name: prowlarr-secret
-              key: maindb
-        - name: PROWLARR__POSTGRES__LOGDB
-          valueFrom:
-            secretKeyRef:
-              name: prowlarr-secret
-              key: logsdb
-        volumeMounts:
-        - name: config
-          mountPath: /config
-      volumes:
-      - name: config
-        persistentVolumeClaim:
-          claimName: prowlarr-config-pvc
-
-
-
-

roles/prowlarr/files/prowlarr-nfs-csi.yaml

@@ -1,11 +0,0 @@
-apiVersion: storage.k8s.io/v1
-kind: StorageClass
-metadata:
-  name: prowlarr-nfs-csi
-  namespace: stack-arr
-provisioner: nfs.csi.k8s.io
-parameters:
-  server: 192.168.1.22
-  share: /mnt/fenix-main-nas-pool-0/data/k8s-Volumes/k8s-cluster-iac-deployed/stack-arr/prowlarr
-allowVolumeExpansion: true
-reclaimPolicy: Retain

roles/prowlarr/files/prowlarr-pvcs.yaml

@@ -1,30 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: prowlarr-config-pv
-  namespace: stack-arr
-spec:
-  capacity:
-    storage: 2Gi
-  storageClassName: prowlarr-nfs-csi
-  accessModes:
-    - ReadWriteOnce
-  persistentVolumeReclaimPolicy: Retain
-  nfs:
-    server: 192.168.1.22
-    path: /mnt/fenix-main-nas-pool-0/data/k8s-Volumes/k8s-cluster-iac-deployed/stack-arr/prowlarr/config
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: prowlarr-config-pvc
-  namespace: stack-arr
-spec:
-  storageClassName: prowlarr-nfs-csi
-  accessModes:
-    - ReadWriteOnce
-  volumeName: prowlarr-config-pv
-  resources:
-    requests:
-      storage: 2Gi
----

roles/prowlarr/files/prowlarr-secret.yaml

@@ -1,11 +0,0 @@
-apiVersion: v1
-kind: Secret
-metadata:
-    name:  prowlarr-secret
-    namespace: stack-arr
-type: Opaque
-data:
-    username: dXNlcm5hbWU=
-    password: cGFzc3dvcmQ=
-    maindb: bWFpbmRiLXByb3dsYXJy
-    logsdb: bG9nZGItcHJvd2xhcnI=

roles/prowlarr/files/prowlarr-service.yaml

@@ -1,12 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: prowlarr-service
-  namespace: stack-arr
-spec:
-  ports:
-    - port: 9696
-      targetPort: 9696
-  selector:
-    app: prowlarr
-  type: ClusterIP

roles/prowlarr/tasks/main.yml

@@ -1,51 +0,0 @@
-- name: Remover o diretório /tmp/stack-arr/prowlarr/kubernetes-files
-  ansible.builtin.file:
-    path: /tmp/stack-arr/prowlarr/kubernetes-files
-    state: absent
-
-- name: Criar diretório temporário no remoto
-  file:
-    path: /tmp/stack-arr/prowlarr/kubernetes-files
-    state: directory
-    mode: '0755'
-
-- name: Copy file with owner and permissions
-  ansible.builtin.copy:
-    src: ../files
-    dest: /tmp/stack-arr/prowlarr/kubernetes-files
-    owner: fenix
-    group: root
-    mode: '0644'
-
-
-- name: Obter várias notas do Bitwarden
-  shell: |
-    echo "unlock"
-    BW_SESSION=$(bw unlock {{ bw_password }} --raw)
-    echo "get item"
-    bw get item "{{ item.id }}" --session $BW_SESSION | jq -r '.notes' > {{ item.dest }}
-  loop:
-    - { id: "iac.ansible.stackarr.prowlarr.secret", dest: "/tmp/stack-arr/prowlarr/kubernetes-files/files/prowlarr-secret.yaml" }
-  args:
-    executable: /bin/bash
-  environment:
-    BW_PASSWORD: "{{ BW_PASSWORD }}"
-
-
-- name: Listar conteúdo do diretório remoto
-  shell: ls -l /tmp/stack-arr/prowlarr/kubernetes-files/files
-  register: resultado_ls
-
-
-- name: Mostrar resultado do ls
-  debug:
-    var: resultado_ls.stdout_lines
-
-
-- name: Aplicar o stolon
-  become: yes
-  become_user: fenix 
-  shell: |
-    kubectl apply -f /tmp/stack-arr/prowlarr/kubernetes-files/files/
-  environment:
-    KUBECONFIG:  /home/fenix/.kube/config

roles/prowlarr/vars/main.yml

@@ -1,4 +0,0 @@
-bw_password: "{{ lookup('env', 'BW_PASSWORD') }}"
-VAULTWARDEN_LINK: "{{ lookup('env', 'VAULTWARDEN_LINK') }}"
-BW_CLIENTID: "{{ lookup('env', 'BW_CLIENTID') }}"
-BW_CLIENTSECRET : "{{ lookup('env', 'BW_CLIENTSECRET') }}"

roles/qbittorrent/files/docker-secrets.yaml

@@ -1,9 +0,0 @@
-apiVersion: v1
-kind: Secret
-metadata:
-  name: regcred
-  namespace: stack-arr
-data:
-  .dockerconfigjson: >-
-    eyJhdXRocyI6eyJodHRwczovL2luZGV4LmRvY2tlci5pby92MS8iOnsidXNlcm5hbWUiOiJ1c2VyIiwicGFzc3dvcmQiOiJwYXNzIiwiYXV0aCI6ImRmamlla2ZlcldFS1dFa29mY2RrbzM0MzUzZmQ9In19fQ==
-type: kubernetes.io/dockerconfigjson