BOOKS

vaultwarden there is a bug in a version
bitwarden passado
2026-03-22 04:19:48 +00:00 · 2026-02-08 18:14:11 +00:00 · 2026-01-23 21:39:29 +00:00 · 2026-01-23 20:30:04 +00:00 · 2026-01-23 20:11:16 +00:00 · 2026-01-23 11:54:29 +00:00
143 changed files with 4486 additions and 7 deletions
--- a/.gitea/workflows/deploy-k8s.yml
+++ b/.gitea/workflows/deploy-k8s.yml
@ -35,7 +35,7 @@ jobs:
          bw login --apikey
          echo "session"
          BW_SESSION=$(bw unlock "$BW_PASSWORD" --raw)
-          
+          echo "BW_SESSION=$BW_SESSION" >> $GITEA_ENV

      - name: Cloning ansible repository
        uses: actions/checkout@v4
@ -55,4 +55,6 @@ jobs:
      - name: Run Ansible Playbook
        working-directory: ansible/iac
        run: |
-          ansible-playbook -i inventory.ini playbook.yml
+          ansible-playbook -i inventory.ini playbook.yml -e "BW_CLIENTID=$BW_CLIENTID BW_CLIENTSECRET=$BW_CLIENTSECRET BW_PASSWORD=$BW_PASSWORD BW_EMAIL=$BW_EMAIL"
+        env:
+          BW_SESSION: ${{ env.BW_SESSION }}
--- a/README.md
+++ b/README.md
@ -1,3 +1,18 @@
 # iac-ansible-private

 iac-ansible-private
+
+stolon comes from https://github.com/sorintlab/stolon/blob/master/examples/kubernetes/README.md
+qbittorrent comes from https://github.com/j4ym0/pia-qbittorrent-docker?tab=readme-ov-file
+prowlarr comes from https://docs.linuxserver.io/images/docker-prowlarr/#docker-mods 
+                and https://wiki.servarr.com/prowlarr/environment-variables
+sonarr comes from https://wiki.servarr.com/sonarr/environment-variables
+                and https://docs.linuxserver.io/images/docker-sonarr/#supported-architectures
+jellyfin comes from https://docs.linuxserver.io/images/docker-jellyfin/
+flaresolverr comes from https://github.com/FlareSolverr/FlareSolverr
+jellyseer comes from https://hub.docker.com/r/fallenbagel/jellyseerr
+                and https://docs.seerr.dev/extending-jellyseerr/database-config
+decluttarr comes from https://github.com/ManiMatter/decluttarr
+
+
+![logo](fenix-iac.png)
--- a/fenix-iac.png
+++ b/fenix-iac.png
--- a/playbook.yml
+++ b/playbook.yml
@ -3,13 +3,42 @@
  become: yes
  roles:
    - common
+    - vaultwarden
    - kubernetes
    - kube-master
+    - nvidia-base

 - name: Configure Kubernetes Nodes
  hosts: workers
  become: yes
  roles:
    - common
+    - vaultwarden
    - kubernetes
    - kube-node
+    - nvidia-base
+    
+- name: Configure Kubernetes Data
+  hosts: master
+  become: yes
+  roles:
+    - nvidia
+    - stolon
+    - cloudflared
+    - qbittorrent
+    - prowlarr
+    - sonarr
+    - radarr
+    - jellyfin
+    - flaresolverr
+    - jellyseerr
+    - decluttarr
+    - bazarr
+    - libreTranslate
+    - lingarr
+    - cripto
+    - anchorr
+    - lazylibrarian
+    - mangareader
+    - bookshelf
+    - shelfarr
--- a/roles/anchorr/files/anchorr-deployment.yaml
+++ b/roles/anchorr/files/anchorr-deployment.yaml
@ -0,0 +1,46 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: anchorr
+  namespace: stack-arr
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: anchorr
+  template:
+    metadata:
+      labels:
+        app: anchorr
+    spec:
+      imagePullSecrets:
+      - name: regcred
+      containers:
+      - name: anchorr
+        image: nairdah/anchorr:latest
+        securityContext:
+          capabilities:
+            add:
+              - NET_ADMIN
+        ports:
+          - containerPort: 8282 
+            name: webhook
+        env:
+        - name: PUID
+          value: "1013"
+        - name: PGID
+          value: "1013"
+        - name: TZ
+          value: 'Etc/UTC'
+        - name: NODE_ENV
+          value: 'production'
+        - name: WEBHOOK_PORT
+          value: '8282'
+        volumeMounts:
+        - name: config
+          mountPath: /usr/src/app/config
+      volumes:
+      - name: config
+        persistentVolumeClaim:
+          claimName: anchorr-config-pvc
+
--- a/roles/anchorr/files/anchorr-nfs-csi.yaml
+++ b/roles/anchorr/files/anchorr-nfs-csi.yaml
@ -0,0 +1,11 @@
+apiVersion: storage.k8s.io/v1
+kind: StorageClass
+metadata:
+  name: anchorr-nfs-csi
+  namespace: stack-arr
+provisioner: nfs.csi.k8s.io
+parameters:
+  server: 192.168.1.22
+  share: /mnt/fenix-main-nas-pool-0/data/k8s-Volumes/k8s-cluster-iac-deployed/stack-arr/anchorr
+allowVolumeExpansion: true
+reclaimPolicy: Retain
--- a/roles/anchorr/files/anchorr-pvcs.yaml
+++ b/roles/anchorr/files/anchorr-pvcs.yaml
@ -0,0 +1,29 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: anchorr-config-pv
+  namespace: stack-arr
+spec:
+  capacity:
+    storage: 2Gi
+  storageClassName: anchorr-nfs-csi
+  accessModes:
+    - ReadWriteOnce
+  persistentVolumeReclaimPolicy: Retain
+  nfs:
+    server: 192.168.1.22
+    path: /mnt/fenix-main-nas-pool-0/data/k8s-Volumes/k8s-cluster-iac-deployed/stack-arr/anchorr/config
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: anchorr-config-pvc
+  namespace: stack-arr
+spec:
+  storageClassName: anchorr-nfs-csi
+  accessModes:
+    - ReadWriteOnce
+  volumeName: anchorr-config-pv
+  resources:
+    requests:
+      storage: 2Gi
--- a/roles/anchorr/files/anchorr-service.yaml
+++ b/roles/anchorr/files/anchorr-service.yaml
@ -0,0 +1,12 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: anchorr-service
+  namespace: stack-arr
+spec:
+  ports:
+    - port: 8282
+      targetPort: 8282
+  selector:
+    app: anchorr
+  type: ClusterIP
--- a/roles/anchorr/tasks/main.yml
+++ b/roles/anchorr/tasks/main.yml
@ -0,0 +1,51 @@
+- name: Remover o diretório /tmp/stack-arr/anchorr/kubernetes-files
+  ansible.builtin.file:
+    path: /tmp/stack-arr/anchorr/kubernetes-files
+    state: absent
+
+- name: Criar diretório temporário no remoto
+  file:
+    path: /tmp/stack-arr/anchorr/kubernetes-files
+    state: directory
+    mode: '0755'
+
+- name: Copy file with owner and permissions
+  ansible.builtin.copy:
+    src: ../files
+    dest: /tmp/stack-arr/anchorr/kubernetes-files
+    owner: fenix
+    group: root
+    mode: '0644'
+
+
+#- name: Obter várias notas do Bitwarden
+#  shell: |
+#    echo "unlock"
+#    BW_SESSION=$(bw unlock {{ bw_password }} --raw)
+#    echo "get item"
+#    bw get item "{{ item.id }}" --session $BW_SESSION | jq -r '.notes' > {{ item.dest }}
+#  loop:
+#    - { id: "iac.ansible.stackarr.anchorr.secret", dest: "/tmp/stack-arr/anchorr/kubernetes-files/files/anchorr-secret.yaml" }
+#  args:
+#    executable: /bin/bash
+#  environment:
+#    BW_PASSWORD: "{{ BW_PASSWORD }}"
+
+
+- name: Listar conteúdo do diretório remoto
+  shell: ls -l /tmp/stack-arr/anchorr/kubernetes-files/files
+  register: resultado_ls
+
+
+- name: Mostrar resultado do ls
+  debug:
+    var: resultado_ls.stdout_lines
+
+
+- name: Aplicar o stolon
+  become: yes
+  become_user: fenix 
+  shell: |
+    kubectl apply -f /tmp/stack-arr/anchorr/kubernetes-files/files/
+  environment:
+    KUBECONFIG:  /home/fenix/.kube/config
--- a/roles/anchorr/vars/main.yml
+++ b/roles/anchorr/vars/main.yml
@ -0,0 +1,4 @@
+bw_password: "{{ lookup('env', 'BW_PASSWORD') }}"
+VAULTWARDEN_LINK: "{{ lookup('env', 'VAULTWARDEN_LINK') }}"
+BW_CLIENTID: "{{ lookup('env', 'BW_CLIENTID') }}"
+BW_CLIENTSECRET : "{{ lookup('env', 'BW_CLIENTSECRET') }}"
--- a/roles/bazarr/files/bazarr-deployment.yaml
+++ b/roles/bazarr/files/bazarr-deployment.yaml
@ -0,0 +1,70 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: bazarr
+  namespace: stack-arr
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: bazarr
+  template:
+    metadata:
+      labels:
+        app: bazarr
+    spec:
+      imagePullSecrets:
+      - name: regcred
+      containers:
+      - name: bazarr
+        image: lscr.io/linuxserver/bazarr:1.5.3
+        securityContext:
+          capabilities:
+            add:
+              - NET_ADMIN
+        ports:
+          - containerPort: 6767
+            name: webui
+        env:
+        - name: PUID
+          value: "1013"
+        - name: PGID
+          value: "1013"
+        - name: TZ
+          value: 'Etc/UTC'
+        - name: POSTGRES_ENABLED
+          value: 'true'
+        - name: POSTGRES_HOST
+          value: 'stolon-proxy-service.postgresql.svc.cluster.local'
+        - name: POSTGRES_PORT
+          value: '5432'
+        - name: POSTGRES_USERNAME
+          valueFrom:
+            secretKeyRef:
+              name: bazarr-secret
+              key: username
+        - name: POSTGRES_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: bazarr-secret
+              key: password
+        - name: POSTGRES_DATABASE
+          valueFrom:
+            secretKeyRef:
+              name: bazarr-secret
+              key: maindb
+        volumeMounts:
+        - name: config
+          mountPath: /config
+        - name: media
+          mountPath: /media
+      volumes:
+      - name: config
+        persistentVolumeClaim:
+          claimName: bazarr-config-pvc
+      - name: media
+        persistentVolumeClaim:
+          claimName: bazarr-media-pvc
+
+
+
--- a/roles/bazarr/files/bazarr-nfs-csi.yaml
+++ b/roles/bazarr/files/bazarr-nfs-csi.yaml
@ -0,0 +1,11 @@
+apiVersion: storage.k8s.io/v1
+kind: StorageClass
+metadata:
+  name: bazarr-nfs-csi
+  namespace: stack-arr
+provisioner: nfs.csi.k8s.io
+parameters:
+  server: 192.168.1.22
+  share: /mnt/fenix-main-nas-pool-0/data/k8s-Volumes/k8s-cluster-iac-deployed/stack-arr/bazarr
+allowVolumeExpansion: true
+reclaimPolicy: Retain
--- a/roles/bazarr/files/bazarr-pvcs.yaml
+++ b/roles/bazarr/files/bazarr-pvcs.yaml
@ -0,0 +1,60 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: bazarr-config-pv
+  namespace: stack-arr
+spec:
+  capacity:
+    storage: 2Gi
+  storageClassName: bazarr-nfs-csi
+  accessModes:
+    - ReadWriteOnce
+  persistentVolumeReclaimPolicy: Retain
+  nfs:
+    server: 192.168.1.22
+    path: /mnt/fenix-main-nas-pool-0/data/k8s-Volumes/k8s-cluster-iac-deployed/stack-arr/bazarr/config
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: bazarr-config-pvc
+  namespace: stack-arr
+spec:
+  storageClassName: bazarr-nfs-csi
+  accessModes:
+    - ReadWriteOnce
+  volumeName: bazarr-config-pv
+  resources:
+    requests:
+      storage: 2Gi
+---
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: bazarr-media-pv
+  namespace: stack-arr
+spec:
+  capacity:
+    storage: 150Gi
+  storageClassName: jellyfin-videos-nfs-csi
+  accessModes:
+    - ReadWriteOnce
+  persistentVolumeReclaimPolicy: Retain
+  nfs:
+    server: 192.168.1.22
+    path: /mnt/fenix-main-nas-pool-0/data/Filmes_e_Series
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: bazarr-media-pvc
+  namespace: stack-arr
+spec:
+  storageClassName: jellyfin-videos-nfs-csi
+  accessModes:
+    - ReadWriteOnce
+  volumeName: bazarr-media-pv
+  resources:
+    requests:
+      storage: 150Gi
+---
--- a/roles/bazarr/files/bazarr-secret.yaml
+++ b/roles/bazarr/files/bazarr-secret.yaml
@ -0,0 +1,11 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    name:  bazarr-secret
+    namespace: stack-arr
+type: Opaque
+data:
+    username: dXNlcm5hbWU=
+    password: cGFzc3dvcmQ=
+    maindb: bWFpbmRiLXByb3dsYXJy
+    logsdb: bG9nZGItcHJvd2xhcnI=
--- a/roles/bazarr/files/bazarr-service.yaml
+++ b/roles/bazarr/files/bazarr-service.yaml
@ -0,0 +1,12 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: bazarr-service
+  namespace: stack-arr
+spec:
+  ports:
+    - port: 6767
+      targetPort: 6767
+  selector:
+    app: bazarr
+  type: ClusterIP
--- a/roles/bazarr/tasks/main.yml
+++ b/roles/bazarr/tasks/main.yml
@ -0,0 +1,51 @@
+- name: Remover o diretório /tmp/stack-arr/bazarr/kubernetes-files
+  ansible.builtin.file:
+    path: /tmp/stack-arr/bazarr/kubernetes-files
+    state: absent
+
+- name: Criar diretório temporário no remoto
+  file:
+    path: /tmp/stack-arr/bazarr/kubernetes-files
+    state: directory
+    mode: '0755'
+
+- name: Copy file with owner and permissions
+  ansible.builtin.copy:
+    src: ../files
+    dest: /tmp/stack-arr/bazarr/kubernetes-files
+    owner: fenix
+    group: root
+    mode: '0644'
+
+
+- name: Obter várias notas do Bitwarden
+  shell: |
+    echo "unlock"
+    BW_SESSION=$(bw unlock {{ bw_password }} --raw)
+    echo "get item"
+    bw get item "{{ item.id }}" --session $BW_SESSION | jq -r '.notes' > {{ item.dest }}
+  loop:
+    - { id: "iac.ansible.stackarr.bazarr.secret", dest: "/tmp/stack-arr/bazarr/kubernetes-files/files/bazarr-secret.yaml" }
+  args:
+    executable: /bin/bash
+  environment:
+    BW_PASSWORD: "{{ BW_PASSWORD }}"
+
+
+- name: Listar conteúdo do diretório remoto
+  shell: ls -l /tmp/stack-arr/bazarr/kubernetes-files/files
+  register: resultado_ls
+
+
+- name: Mostrar resultado do ls
+  debug:
+    var: resultado_ls.stdout_lines
+
+
+- name: Aplicar o stolon
+  become: yes
+  become_user: fenix 
+  shell: |
+    kubectl apply -f /tmp/stack-arr/bazarr/kubernetes-files/files/
+  environment:
+    KUBECONFIG:  /home/fenix/.kube/config
--- a/roles/bazarr/vars/main.yml
+++ b/roles/bazarr/vars/main.yml
@ -0,0 +1,4 @@
+bw_password: "{{ lookup('env', 'BW_PASSWORD') }}"
+VAULTWARDEN_LINK: "{{ lookup('env', 'VAULTWARDEN_LINK') }}"
+BW_CLIENTID: "{{ lookup('env', 'BW_CLIENTID') }}"
+BW_CLIENTSECRET : "{{ lookup('env', 'BW_CLIENTSECRET') }}"
--- a/roles/bookshelf/files/bookshelf-deployment.yaml
+++ b/roles/bookshelf/files/bookshelf-deployment.yaml
@ -0,0 +1,54 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: bookshelf
+  namespace: stack-arr
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: bookshelf
+  template:
+    metadata:
+      labels:
+        app: bookshelf
+    spec:
+      imagePullSecrets:
+      - name: regcred
+      containers:
+      - name: bookshelf
+        image: ghcr.io/pennydreadful/bookshelf:softcover-v0.4.20.91
+        securityContext:
+          capabilities:
+            add:
+              - NET_ADMIN
+        ports:
+          - containerPort: 8787 
+            name: webui
+        env:
+        - name: PUID
+          value: "1013"
+        - name: PGID
+          value: "1013"
+        - name: TZ
+          value: 'Etc/UTC'
+        volumeMounts:
+        - name: config
+          mountPath: /config
+        - name: books
+          mountPath: /books
+        - name: downloads
+          mountPath: /downloads
+      volumes:
+      - name: config
+        persistentVolumeClaim:
+          claimName: bookshelf-config-pvc
+      - name: books
+        persistentVolumeClaim:
+          claimName: bookshelf-books-pvc
+      - name: downloads
+        persistentVolumeClaim:
+          claimName: qbittorrent-downloads-pvc
+
+
+
--- a/roles/bookshelf/files/bookshelf-nfs-csi.yaml
+++ b/roles/bookshelf/files/bookshelf-nfs-csi.yaml
@ -0,0 +1,11 @@
+apiVersion: storage.k8s.io/v1
+kind: StorageClass
+metadata:
+  name: bookshelf-nfs-csi
+  namespace: stack-arr
+provisioner: nfs.csi.k8s.io
+parameters:
+  server: 192.168.1.22
+  share: /mnt/fenix-main-nas-pool-0/data/k8s-Volumes/k8s-cluster-iac-deployed/stack-arr/bookshelf
+allowVolumeExpansion: true
+reclaimPolicy: Retain
--- a/roles/bookshelf/files/bookshelf-pvcs.yaml
+++ b/roles/bookshelf/files/bookshelf-pvcs.yaml
@ -0,0 +1,60 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: bookshelf-config-pv
+  namespace: stack-arr
+spec:
+  capacity:
+    storage: 20Gi
+  storageClassName: bookshelf-nfs-csi
+  accessModes:
+    - ReadWriteOnce
+  persistentVolumeReclaimPolicy: Retain
+  nfs:
+    server: 192.168.1.22
+    path: /mnt/fenix-main-nas-pool-0/data/k8s-Volumes/k8s-cluster-iac-deployed/stack-arr/bookshelf/config
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: bookshelf-config-pvc
+  namespace: stack-arr
+spec:
+  storageClassName: bookshelf-nfs-csi
+  accessModes:
+    - ReadWriteOnce
+  volumeName: bookshelf-config-pv
+  resources:
+    requests:
+      storage: 20Gi
+---
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: bookshelf-media-pv
+  namespace: stack-arr
+spec:
+  capacity:
+    storage: 150Gi
+  storageClassName: jellyfin-videos-nfs-csi
+  accessModes:
+    - ReadWriteOnce
+  persistentVolumeReclaimPolicy: Retain
+  nfs:
+    server: 192.168.1.22
+    path: /mnt/fenix-main-nas-pool-0/data/Filmes_e_Series/Livros
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: bookshelf-books-pvc
+  namespace: stack-arr
+spec:
+  storageClassName: jellyfin-videos-nfs-csi
+  accessModes:
+    - ReadWriteOnce
+  volumeName: bookshelf-media-pv
+  resources:
+    requests:
+      storage: 150Gi
+---
--- a/roles/bookshelf/files/bookshelf-service.yaml
+++ b/roles/bookshelf/files/bookshelf-service.yaml
@ -0,0 +1,12 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: bookshelf-service
+  namespace: stack-arr
+spec:
+  ports:
+    - port: 8787  
+      targetPort: 8787  
+  selector:
+    app: bookshelf
+  type: ClusterIP
--- a/roles/bookshelf/tasks/main.yml
+++ b/roles/bookshelf/tasks/main.yml
@ -0,0 +1,51 @@
+- name: Remover o diretório /tmp/stack-arr/bookshelf/kubernetes-files
+  ansible.builtin.file:
+    path: /tmp/stack-arr/bookshelf/kubernetes-files
+    state: absent
+
+- name: Criar diretório temporário no remoto
+  file:
+    path: /tmp/stack-arr/bookshelf/kubernetes-files
+    state: directory
+    mode: '0755'
+
+- name: Copy file with owner and permissions
+  ansible.builtin.copy:
+    src: ../files
+    dest: /tmp/stack-arr/bookshelf/kubernetes-files
+    owner: fenix
+    group: root
+    mode: '0644'
+
+
+#- name: Obter várias notas do Bitwarden
+#  shell: |
+#    echo "unlock"
+#    BW_SESSION=$(bw unlock {{ bw_password }} --raw)
+#    echo "get item"
+#    bw get item "{{ item.id }}" --session $BW_SESSION | jq -r '.notes' > {{ item.dest }}
+#  loop:
+#    - { id: "iac.ansible.stackarr.bookshelf.secret", dest: "/tmp/stack-arr/bookshelf/kubernetes-files/files/bookshelf-secret.yaml" }
+#  args:
+#    executable: /bin/bash
+#  environment:
+#    BW_PASSWORD: "{{ BW_PASSWORD }}"
+
+
+- name: Listar conteúdo do diretório remoto
+  shell: ls -l /tmp/stack-arr/bookshelf/kubernetes-files/files
+  register: resultado_ls
+
+
+- name: Mostrar resultado do ls
+  debug:
+    var: resultado_ls.stdout_lines
+
+
+- name: Aplicar o stolon
+  become: yes
+  become_user: fenix 
+  shell: |
+    kubectl apply -f /tmp/stack-arr/bookshelf/kubernetes-files/files/
+  environment:
+    KUBECONFIG:  /home/fenix/.kube/config
--- a/roles/bookshelf/vars/main.yml
+++ b/roles/bookshelf/vars/main.yml
@ -0,0 +1,4 @@
+bw_password: "{{ lookup('env', 'BW_PASSWORD') }}"
+VAULTWARDEN_LINK: "{{ lookup('env', 'VAULTWARDEN_LINK') }}"
+BW_CLIENTID: "{{ lookup('env', 'BW_CLIENTID') }}"
+BW_CLIENTSECRET : "{{ lookup('env', 'BW_CLIENTSECRET') }}"
--- a/roles/cloudflared/files/cloudflare-namespace.yaml
+++ b/roles/cloudflared/files/cloudflare-namespace.yaml
@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: cloudflare
--- a/roles/cloudflared/files/cloudflared-tunnel-deployment.yaml
+++ b/roles/cloudflared/files/cloudflared-tunnel-deployment.yaml
@ -0,0 +1,49 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: cloudflared-tunnel
+  namespace: cloudflare
+spec:
+  replicas: 3
+  selector:
+    matchLabels:
+      app: cloudflared
+  template:
+    metadata:
+      labels:
+        app: cloudflared
+    spec:
+      securityContext:
+        sysctls:
+        # Allows ICMP traffic (ping, traceroute) to resources behind cloudflared.
+          - name: net.ipv4.ping_group_range
+            value: "65532 65532"
+      containers:
+        - image: cloudflare/cloudflared:latest
+          name: cloudflared
+          env:
+            # Defines an environment variable for the tunnel token.
+            - name: TUNNEL_TOKEN
+              valueFrom:
+                secretKeyRef:
+                  name: tunnel-token-secret
+                  key: token
+          command:
+            # Configures tunnel run parameters
+            - cloudflared
+            - tunnel
+            - --no-autoupdate
+            - --loglevel
+            - debug
+            - --metrics
+            - 0.0.0.0:2000
+            - run
+          livenessProbe:
+            httpGet:
+              # Cloudflared has a /ready endpoint which returns 200 if and only if
+              # it has an active connection to Cloudflare's network.
+              path: /ready
+              port: 2000
+            failureThreshold: 1
+            initialDelaySeconds: 10
+            periodSeconds: 10
--- a/roles/cloudflared/files/tunnel-token-secret.yaml
+++ b/roles/cloudflared/files/tunnel-token-secret.yaml
@ -0,0 +1,8 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    name: tunnel-token-secret
+    namespace: cloudflare
+type: Opaque
+data:
+    token: <CLOUDFLARE_TUNNEL_TOKEN>
--- a/roles/cloudflared/tasks/main.yml
+++ b/roles/cloudflared/tasks/main.yml
@ -0,0 +1,51 @@
+- name: Remover o diretório /tmp/cloudflare/kubernetes-files
+  ansible.builtin.file:
+    path: /tmp/cloudflare/kubernetes-files
+    state: absent
+
+- name: Criar diretório temporário no remoto
+  file:
+    path: /tmp/cloudflare/kubernetes-files
+    state: directory
+    mode: '0755'
+
+- name: Copy file with owner and permissions
+  ansible.builtin.copy:
+    src: ../files
+    dest: /tmp/cloudflare/kubernetes-files
+    owner: fenix
+    group: root
+    mode: '0644'
+
+
+- name: Obter várias notas do Bitwarden
+  shell: |
+    echo "unlock"
+    BW_SESSION=$(bw unlock {{ bw_password }} --raw)
+    echo "get item"
+    bw get item "{{ item.id }}" --session $BW_SESSION | jq -r '.notes' > {{ item.dest }}
+  loop:
+    - { id: "iac.ansible.cloudflare.tunnel.secret", dest: "/tmp/cloudflare/kubernetes-files/files/tunnel-token-secret.yaml" }
+  args:
+    executable: /bin/bash
+  environment:
+    BW_PASSWORD: "{{ BW_PASSWORD }}"
+
+
+- name: Listar conteúdo do diretório remoto
+  shell: ls -l /tmp/cloudflare/kubernetes-files/files
+  register: resultado_ls
+
+
+- name: Mostrar resultado do ls
+  debug:
+    var: resultado_ls.stdout_lines
+
+
+- name: Aplicar o stolon
+  become: yes
+  become_user: fenix 
+  shell: |
+    kubectl apply -f /tmp/cloudflare/kubernetes-files/files/
+  environment:
+    KUBECONFIG:  /home/fenix/.kube/config
--- a/roles/cloudflared/vars/main.yml
+++ b/roles/cloudflared/vars/main.yml
@ -0,0 +1,4 @@
+bw_password: "{{ lookup('env', 'BW_PASSWORD') }}"
+VAULTWARDEN_LINK: "{{ lookup('env', 'VAULTWARDEN_LINK') }}"
+BW_CLIENTID: "{{ lookup('env', 'BW_CLIENTID') }}"
+BW_CLIENTSECRET : "{{ lookup('env', 'BW_CLIENTSECRET') }}"
--- a/roles/cripto/files/ai-deployment.yaml
+++ b/roles/cripto/files/ai-deployment.yaml
@ -0,0 +1,94 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: fenix-ai
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: crypto-forecast-api-deployment
+  namespace: fenix-ai
+spec:
+  replicas: 0
+  selector:
+    matchLabels:
+      app: crypto-forecast-api
+  template:
+    metadata:
+      labels:
+        app: crypto-forecast-api
+    spec:
+      containers:
+      - name: crypto-forecast-api
+        image: gitea.fenix-dev.com/fenix-gitea-admin/fenix-cripto-api:0.0.19
+        ports:
+        - containerPort: 8080
+        resources:
+          limits:
+            nvidia.com/gpu: 1   # garante uso da tua RTX 4060 Ti
+        env:
+        - name: ASPNETCORE_ENVIRONMENT
+          value: Development
+        volumeMounts:
+        - name: model
+          mountPath: /models
+      volumes:
+      - name: model
+        persistentVolumeClaim:
+          claimName: crypto-forecast-api-model-pvc
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: crypto-forecast-api-svc
+  namespace: fenix-ai
+spec:
+  selector:
+    app: crypto-forecast-api
+  ports:
+  - protocol: TCP
+    port: 8080
+    targetPort: 8080
+  type: NodePort   # ou LoadBalancer se tiveres suporte
+---
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: crypto-forecast-api-model-pv
+  namespace: fenix-ai
+spec:
+  capacity:
+    storage: 20Gi
+  storageClassName: fenix-ai-nfs-csi
+  accessModes:
+    - ReadWriteOnce
+  persistentVolumeReclaimPolicy: Retain
+  nfs:
+    server: 192.168.1.22
+    path: /mnt/fenix-main-nas-pool-0/data/k8s-Volumes/k8s-cluster-iac-deployed/fenix/ai/api/model
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: crypto-forecast-api-model-pvc
+  namespace: fenix-ai
+spec:
+  storageClassName: fenix-ai-nfs-csi
+  accessModes:
+    - ReadWriteOnce
+  volumeName: crypto-forecast-api-model-pv
+  resources:
+    requests:
+      storage: 20Gi
+---
+apiVersion: storage.k8s.io/v1
+kind: StorageClass
+metadata:
+  name: fenix-ai-nfs-csi
+  namespace: fenix-ai
+provisioner: nfs.csi.k8s.io
+parameters:
+  server: 192.168.1.22
+  share: /mnt/fenix-main-nas-pool-0/data/k8s-Volumes/k8s-cluster-iac-deployed/
+allowVolumeExpansion: true
+reclaimPolicy: Retain
--- a/roles/cripto/files/ai-namespace.yaml
+++ b/roles/cripto/files/ai-namespace.yaml
@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: fenix-ai
--- a/roles/cripto/files/ai-ollama-deployment.yaml
+++ b/roles/cripto/files/ai-ollama-deployment.yaml
@ -0,0 +1,97 @@
+apiVersion: metallb.io/v1beta1
+kind: IPAddressPool
+metadata:
+  name: local-pool-2
+  namespace: metallb-system
+spec:
+  addresses:
+    - 192.168.1.100-192.168.1.200
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: ollama-deployment
+  namespace: fenix-ai
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: ollama
+  template:
+    metadata:
+      labels:
+        app: ollama
+    spec:
+      containers:
+      - name: ollama
+        image: ollama/ollama:latest
+        ports:
+        - containerPort: 11434
+        resources:
+          limits:
+            nvidia.com/gpu: 1   # garante uso da tua RTX 4060 Ti
+        env:
+          - name: OLLAMA_HOST
+            value: "0.0.0.0"
+        volumeMounts:
+          - name: ollama-data
+            mountPath: /root/.ollama
+      volumes:
+      - name: ollama-data
+        persistentVolumeClaim:
+          claimName: ollama-data-pvc
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: ollama-api-svc
+  namespace: fenix-ai
+spec:
+  selector:
+    app: ollama
+  ports:
+  - protocol: TCP
+    port: 11434
+    targetPort: 11434
+  type: NodePort   # ou LoadBalancer se tiveres suporte
+---
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: ollama-data-pv
+  namespace: fenix-ai
+spec:
+  capacity:
+    storage: 20Gi
+  storageClassName: ollama-ai-nfs-csi
+  accessModes:
+    - ReadWriteOnce
+  persistentVolumeReclaimPolicy: Retain
+  nfs:
+    server: 192.168.1.22
+    path: /mnt/fenix-main-nas-pool-0/data/k8s-Volumes/k8s-cluster-iac-deployed/ollama
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: ollama-data-pvc
+  namespace: fenix-ai
+spec:
+  storageClassName: ollama-ai-nfs-csi
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 20Gi
+---
+apiVersion: storage.k8s.io/v1
+kind: StorageClass
+metadata:
+  name: ollama-ai-nfs-csi
+  namespace: fenix-ai
+provisioner: nfs.csi.k8s.io
+parameters:
+  server: 192.168.1.22
+  share: /mnt/fenix-main-nas-pool-0/data/k8s-Volumes/k8s-cluster-iac-deployed/ollama
+allowVolumeExpansion: true
+reclaimPolicy: Retain
--- a/roles/cripto/tasks/main.yml
+++ b/roles/cripto/tasks/main.yml
@ -0,0 +1,51 @@
+- name: Remover o diretório /tmp/fenix-ai/kubernetes-files
+  ansible.builtin.file:
+    path: /tmp/fenix-ai/kubernetes-files
+    state: absent
+
+- name: Criar diretório temporário no remoto
+  file:
+    path: /tmp/fenix-ai/kubernetes-files
+    state: directory
+    mode: '0755'
+
+- name: Copy file with owner and permissions
+  ansible.builtin.copy:
+    src: ../files
+    dest: /tmp/fenix-ai/kubernetes-files
+    owner: fenix
+    group: root
+    mode: '0644'
+
+
+#- name: Obter várias notas do Bitwarden
+#  shell: |
+#    echo "unlock"
+#    BW_SESSION=$(bw unlock {{ bw_password }} --raw)
+#    echo "get item"
+#    bw get item "{{ item.id }}" --session $BW_SESSION | jq -r '.notes' > {{ item.dest }}
+#  loop:
+#    - { id: "iac.ansible.stackarr.decluttarr.secret", dest: "/tmp/stack-arr/decluttarr/kubernetes-files/files/decluttarr-secret.yaml" }
+#  args:
+#    executable: /bin/bash
+#  environment:
+#    BW_PASSWORD: "{{ BW_PASSWORD }}"
+
+
+- name: Listar conteúdo do diretório remoto
+  shell: ls -l /tmp/fenix-ai/kubernetes-files/files
+  register: resultado_ls
+
+
+- name: Mostrar resultado do ls
+  debug:
+    var: resultado_ls.stdout_lines
+
+
+- name: Aplicar o stolon
+  become: yes
+  become_user: fenix 
+  shell: |
+    kubectl apply -f /tmp/fenix-ai/kubernetes-files/files/
+  environment:
+    KUBECONFIG:  /home/fenix/.kube/config
--- a/roles/cripto/vars/main.yml
+++ b/roles/cripto/vars/main.yml
@ -0,0 +1,4 @@
+bw_password: "{{ lookup('env', 'BW_PASSWORD') }}"
+VAULTWARDEN_LINK: "{{ lookup('env', 'VAULTWARDEN_LINK') }}"
+BW_CLIENTID: "{{ lookup('env', 'BW_CLIENTID') }}"
+BW_CLIENTSECRET : "{{ lookup('env', 'BW_CLIENTSECRET') }}"
--- a/roles/decluttarr/files/decluttarr-deployment.yaml
+++ b/roles/decluttarr/files/decluttarr-deployment.yaml
@ -0,0 +1,79 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: decluttarr
+  namespace: stack-arr
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: decluttarr
+  template:
+    metadata:
+      labels:
+        app: decluttarr
+    spec:
+      imagePullSecrets:
+      - name: regcred
+      containers:
+      - name: decluttarr
+        image: ghcr.io/manimatter/decluttarr:v1.50.2
+        env:
+            - name: LOG_LEVEL
+              value: VERBOSE
+            - name: REMOVE_TIMER
+              value: '3'
+            - name: REMOVE_FAILED
+              value: 'True'
+            - name: REMOVE_FAILED_IMPORTS
+              value: 'False'
+            - name: REMOVE_METADATA_MISSING
+              value: 'True'
+            - name: REMOVE_MISSING_FILES
+              value: 'True'
+            - name: REMOVE_ORPHANS
+              value: 'True'
+            - name: REMOVE_SLOW
+              value: 'False'
+            - name: REMOVE_STALLED
+              value: 'True'
+            - name: REMOVE_UNMONITORED
+              value: 'False'
+            - name: MIN_DOWNLOAD_SPEED
+              value: '100'
+            - name: PERMITTED_ATTEMPTS
+              value: '3'
+            - name: SONARR_URL
+              value: http://sonarr-service.stack-arr.svc.cluster.local:8989
+            - name: SONARR_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: decluttarr-secret
+                  key: sonarrkey
+            - name: QBITTORRENT_URL
+              value: http://qbittorrent-service.stack-arr.svc.cluster.local:8080
+            - name: QBITTORRENT_USERNAME
+              valueFrom:
+                secretKeyRef:
+                  name: decluttarr-secret
+                  key: qbittorrentuser
+            - name: QBITTORRENT_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: decluttarr-secret
+                  key: qbittorrentpass
+        volumeMounts:
+        - name: config
+          mountPath: /config
+        - name: downloads
+          mountPath: /data/downloads
+      volumes:
+      - name: config
+        persistentVolumeClaim:
+          claimName: decluttarr-config-pvc
+      - name: downloads
+        persistentVolumeClaim:
+          claimName: qbittorrent-downloads-pvc
+
+
+
--- a/roles/decluttarr/files/decluttarr-nfs-csi.yaml
+++ b/roles/decluttarr/files/decluttarr-nfs-csi.yaml
@ -0,0 +1,12 @@
+apiVersion: storage.k8s.io/v1
+kind: StorageClass
+metadata:
+  name: decluttarr-nfs-csi
+  namespace: stack-arr
+provisioner: nfs.csi.k8s.io
+parameters:
+  server: 192.168.1.22
+  share: /mnt/fenix-main-nas-pool-0/data/k8s-Volumes/k8s-cluster-iac-deployed/stack-arr/decluttarr
+allowVolumeExpansion: true
+reclaimPolicy: Retain
+---
--- a/roles/decluttarr/files/decluttarr-pvcs.yaml
+++ b/roles/decluttarr/files/decluttarr-pvcs.yaml
@ -0,0 +1,30 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: decluttarr-config-pv
+  namespace: stack-arr
+spec:
+  capacity:
+    storage: 2Gi
+  storageClassName: decluttarr-nfs-csi
+  accessModes:
+    - ReadWriteOnce
+  persistentVolumeReclaimPolicy: Retain
+  nfs:
+    server: 192.168.1.22
+    path: /mnt/fenix-main-nas-pool-0/data/k8s-Volumes/k8s-cluster-iac-deployed/stack-arr/decluttarr/config
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: decluttarr-config-pvc
+  namespace: stack-arr
+spec:
+  storageClassName: decluttarr-nfs-csi
+  accessModes:
+    - ReadWriteOnce
+  volumeName: decluttarr-config-pv
+  resources:
+    requests:
+      storage: 2Gi
+---
--- a/roles/decluttarr/files/decluttarr-secret.yaml
+++ b/roles/decluttarr/files/decluttarr-secret.yaml
@ -0,0 +1,10 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    name:  decluttarr-secret
+    namespace: stack-arr
+type: Opaque
+data:
+    sonarrkey: M2tkMDRscjk1bGY5M29lMDNsZTAzbGU=
+    qbittorrentuser: dXNlcg==
+    qbittorrentpass: cGFzcw==
--- a/roles/decluttarr/tasks/main.yml
+++ b/roles/decluttarr/tasks/main.yml
@ -0,0 +1,51 @@
+- name: Remover o diretório /tmp/stack-arr/decluttarr/kubernetes-files
+  ansible.builtin.file:
+    path: /tmp/stack-arr/decluttarr/kubernetes-files
+    state: absent
+
+- name: Criar diretório temporário no remoto
+  file:
+    path: /tmp/stack-arr/decluttarr/kubernetes-files
+    state: directory
+    mode: '0755'
+
+- name: Copy file with owner and permissions
+  ansible.builtin.copy:
+    src: ../files
+    dest: /tmp/stack-arr/decluttarr/kubernetes-files
+    owner: fenix
+    group: root
+    mode: '0644'
+
+
+- name: Obter várias notas do Bitwarden
+  shell: |
+    echo "unlock"
+    BW_SESSION=$(bw unlock {{ bw_password }} --raw)
+    echo "get item"
+    bw get item "{{ item.id }}" --session $BW_SESSION | jq -r '.notes' > {{ item.dest }}
+  loop:
+    - { id: "iac.ansible.stackarr.decluttarr.secret", dest: "/tmp/stack-arr/decluttarr/kubernetes-files/files/decluttarr-secret.yaml" }
+  args:
+    executable: /bin/bash
+  environment:
+    BW_PASSWORD: "{{ BW_PASSWORD }}"
+
+
+- name: Listar conteúdo do diretório remoto
+  shell: ls -l /tmp/stack-arr/decluttarr/kubernetes-files/files
+  register: resultado_ls
+
+
+- name: Mostrar resultado do ls
+  debug:
+    var: resultado_ls.stdout_lines
+
+
+- name: Aplicar o stolon
+  become: yes
+  become_user: fenix 
+  shell: |
+    kubectl apply -f /tmp/stack-arr/decluttarr/kubernetes-files/files/
+  environment:
+    KUBECONFIG:  /home/fenix/.kube/config
--- a/roles/decluttarr/vars/main.yml
+++ b/roles/decluttarr/vars/main.yml
@ -0,0 +1,4 @@
+bw_password: "{{ lookup('env', 'BW_PASSWORD') }}"
+VAULTWARDEN_LINK: "{{ lookup('env', 'VAULTWARDEN_LINK') }}"
+BW_CLIENTID: "{{ lookup('env', 'BW_CLIENTID') }}"
+BW_CLIENTSECRET : "{{ lookup('env', 'BW_CLIENTSECRET') }}"
--- a/roles/flaresolverr/files/flaresolverr-deployment.yaml
+++ b/roles/flaresolverr/files/flaresolverr-deployment.yaml
@ -0,0 +1,32 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: flaresolverr
+  namespace: stack-arr
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: flaresolverr
+  template:
+    metadata:
+      labels:
+        app: flaresolverr
+    spec:
+      imagePullSecrets:
+      - name: regcred
+      containers:
+      - name: flaresolverr
+        image: ghcr.io/flaresolverr/flaresolverr:latest
+        securityContext:
+          capabilities:
+            add:
+              - NET_ADMIN
+        ports:
+          - containerPort: 8191
+            name: porta
+        env:
+        - name: LOG_LEVEL
+          value: "info"
+
+
--- a/roles/flaresolverr/files/flaresolverr-service.yaml
+++ b/roles/flaresolverr/files/flaresolverr-service.yaml
@ -0,0 +1,12 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: flaresolverr-service
+  namespace: stack-arr
+spec:
+  ports:
+    - port: 8191
+      targetPort: 8191
+  selector:
+    app: flaresolverr
+  type: ClusterIP
--- a/roles/flaresolverr/tasks/main.yml
+++ b/roles/flaresolverr/tasks/main.yml
@ -0,0 +1,51 @@
+- name: Remover o diretório /tmp/stack-arr/sonarr/kubernetes-files
+  ansible.builtin.file:
+    path: /tmp/stack-arr/sonarr/kubernetes-files
+    state: absent
+
+- name: Criar diretório temporário no remoto
+  file:
+    path: /tmp/stack-arr/sonarr/kubernetes-files
+    state: directory
+    mode: '0755'
+
+- name: Copy file with owner and permissions
+  ansible.builtin.copy:
+    src: ../files
+    dest: /tmp/stack-arr/sonarr/kubernetes-files
+    owner: fenix
+    group: root
+    mode: '0644'
+
+
+#- name: Obter várias notas do Bitwarden
+#  shell: |
+#    echo "unlock"
+#    BW_SESSION=$(bw unlock {{ bw_password }} --raw)
+#    echo "get item"
+#    bw get item "{{ item.id }}" --session $BW_SESSION | jq -r '.notes' > {{ item.dest }}
+#  loop:
+#    - { id: "iac.ansible.stackarr.sonarr.secret", dest: "/tmp/stack-arr/sonarr/kubernetes-files/files/sonarr-secret.yaml" }
+#  args:
+#    executable: /bin/bash
+#  environment:
+#    BW_PASSWORD: "{{ BW_PASSWORD }}"
+
+
+- name: Listar conteúdo do diretório remoto
+  shell: ls -l /tmp/stack-arr/sonarr/kubernetes-files/files
+  register: resultado_ls
+
+
+- name: Mostrar resultado do ls
+  debug:
+    var: resultado_ls.stdout_lines
+
+
+- name: Aplicar o stolon
+  become: yes
+  become_user: fenix 
+  shell: |
+    kubectl apply -f /tmp/stack-arr/sonarr/kubernetes-files/files/
+  environment:
+    KUBECONFIG:  /home/fenix/.kube/config
--- a/roles/flaresolverr/vars/main.yml
+++ b/roles/flaresolverr/vars/main.yml
@ -0,0 +1,4 @@
+bw_password: "{{ lookup('env', 'BW_PASSWORD') }}"
+VAULTWARDEN_LINK: "{{ lookup('env', 'VAULTWARDEN_LINK') }}"
+BW_CLIENTID: "{{ lookup('env', 'BW_CLIENTID') }}"
+BW_CLIENTSECRET : "{{ lookup('env', 'BW_CLIENTSECRET') }}"
--- a/roles/jellyfin/files/jellyfin-deployment.yaml
+++ b/roles/jellyfin/files/jellyfin-deployment.yaml
@ -0,0 +1,65 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: jellyfin
+  namespace: stack-arr
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: jellyfin
+  template:
+    metadata:
+      labels:
+        app: jellyfin
+    spec:
+      imagePullSecrets:
+      - name: regcred
+      containers:
+      - name: jellyfin
+        image: lscr.io/linuxserver/jellyfin:10.11.5
+        resources:
+          limits:
+            memory: "9G" # Maximum memory allowed
+            cpu: "4" # Maximum CPU allowed
+        securityContext:
+          capabilities:
+            add:
+              - NET_ADMIN
+        ports:
+          - containerPort: 8096
+            name: webui
+          - containerPort: 8920
+            name: webuihttps
+          - containerPort: 1900
+            name: dlnaudp
+          - containerPort: 7359
+            name: discoveryudp
+        env:
+        - name: PUID
+          value: "1013"
+        - name: PGID
+          value: "1013"
+        - name: TZ
+          value: 'Etc/UTC'
+        volumeMounts:
+        - name: config
+          mountPath: /config
+        - name: videos
+          mountPath: /videos
+        - name: books
+          mountPath: /books
+      volumes:
+      - name: config
+        persistentVolumeClaim:
+          claimName: jellyfin-config-pvc
+      - name: videos
+        persistentVolumeClaim:
+          claimName: jellyfin-videos-pvc
+      - name: books
+        persistentVolumeClaim:
+          claimName: jellyfin-books-pvc
+
+
+
+
--- a/roles/jellyfin/files/jellyfin-nfs-csi.yaml
+++ b/roles/jellyfin/files/jellyfin-nfs-csi.yaml
@ -0,0 +1,23 @@
+apiVersion: storage.k8s.io/v1
+kind: StorageClass
+metadata:
+  name: jellyfin-nfs-csi
+  namespace: stack-arr
+provisioner: nfs.csi.k8s.io
+parameters:
+  server: 192.168.1.22
+  share: /mnt/fenix-main-nas-pool-0/data/k8s-Volumes/k8s-cluster-iac-deployed/stack-arr/jellyfin
+allowVolumeExpansion: true
+reclaimPolicy: Retain
+---
+apiVersion: storage.k8s.io/v1
+kind: StorageClass
+metadata:
+  name: jellyfin-videos-nfs-csi
+  namespace: stack-arr
+provisioner: nfs.csi.k8s.io
+parameters:
+  server: 192.168.1.22
+  share: /mnt/fenix-main-nas-pool-0/data/Filmes_e_Series
+allowVolumeExpansion: true
+reclaimPolicy: Retain
--- a/roles/jellyfin/files/jellyfin-pvcs.yaml
+++ b/roles/jellyfin/files/jellyfin-pvcs.yaml
@ -0,0 +1,93 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: jellyfin-config-pv
+  namespace: stack-arr
+spec:
+  capacity:
+    storage: 2Gi
+  storageClassName: jellyfin-nfs-csi
+  accessModes:
+    - ReadWriteOnce
+  persistentVolumeReclaimPolicy: Retain
+  nfs:
+    server: 192.168.1.22
+    path: /mnt/fenix-main-nas-pool-0/data/k8s-Volumes/k8s-cluster-iac-deployed/stack-arr/jellyfin/config
+  mountOptions:
+    - nolock
+    - nfsvers=3
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: jellyfin-config-pvc
+  namespace: stack-arr
+spec:
+  storageClassName: jellyfin-nfs-csi
+  accessModes:
+    - ReadWriteOnce
+  volumeName: jellyfin-config-pv
+  resources:
+    requests:
+      storage: 2Gi
+---
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: jellyfin-videos-pv
+  namespace: stack-arr
+spec:
+  capacity:
+    storage: 150Gi
+  storageClassName: jellyfin-videos-nfs-csi
+  accessModes:
+    - ReadWriteOnce
+  persistentVolumeReclaimPolicy: Retain
+  nfs:
+    server: 192.168.1.22
+    path: /mnt/fenix-main-nas-pool-0/data/Filmes_e_Series
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: jellyfin-videos-pvc
+  namespace: stack-arr
+spec:
+  storageClassName: jellyfin-videos-nfs-csi
+  accessModes:
+    - ReadWriteOnce
+  volumeName: jellyfin-videos-pv
+  resources:
+    requests:
+      storage: 150Gi
+---
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: jellyfin-books-pv
+  namespace: stack-arr
+spec:
+  capacity:
+    storage: 150Gi
+  storageClassName: jellyfin-videos-nfs-csi
+  accessModes:
+    - ReadWriteOnce
+  persistentVolumeReclaimPolicy: Retain
+  nfs:
+    server: 192.168.1.22
+    path: /mnt/fenix-main-nas-pool-0/data/Filmes_e_Series/Livros
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: jellyfin-books-pvc
+  namespace: stack-arr
+spec:
+  storageClassName: jellyfin-videos-nfs-csi
+  accessModes:
+    - ReadWriteOnce
+  volumeName: jellyfin-books-pv
+  resources:
+    requests:
+      storage: 150Gi
+---
--- a/roles/jellyfin/files/jellyfin-service.yaml
+++ b/roles/jellyfin/files/jellyfin-service.yaml
@ -0,0 +1,22 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: jellyfin-service
+  namespace: stack-arr
+spec:
+  ports:
+    - port: 8096
+      targetPort: 8096
+      name: webui
+    - port: 8920
+      targetPort: 8920
+      name: webuihttps
+    - port: 1900
+      targetPort: 1900
+      name: dlnaudp
+    - port: 7359
+      targetPort: 7359
+      name: discoveryudp
+  selector:
+    app: jellyfin
+  type: ClusterIP
--- a/roles/jellyfin/tasks/main.yml
+++ b/roles/jellyfin/tasks/main.yml
@ -0,0 +1,51 @@
+- name: Remover o diretório /tmp/stack-arr/jellyfin/kubernetes-files
+  ansible.builtin.file:
+    path: /tmp/stack-arr/jellyfin/kubernetes-files
+    state: absent
+
+- name: Criar diretório temporário no remoto
+  file:
+    path: /tmp/stack-arr/jellyfin/kubernetes-files
+    state: directory
+    mode: '0755'
+
+- name: Copy file with owner and permissions
+  ansible.builtin.copy:
+    src: ../files
+    dest: /tmp/stack-arr/jellyfin/kubernetes-files
+    owner: fenix
+    group: root
+    mode: '0644'
+
+
+#- name: Obter várias notas do Bitwarden
+#  shell: |
+#    echo "unlock"
+#    BW_SESSION=$(bw unlock {{ bw_password }} --raw)
+#    echo "get item"
+#    bw get item "{{ item.id }}" --session $BW_SESSION | jq -r '.notes' > {{ item.dest }}
+#  loop:
+#    - { id: "iac.ansible.stackarr.jellyfin.secret", dest: "/tmp/stack-arr/jellyfin/kubernetes-files/files/jelly-secret.yaml" }
+#  args:
+#    executable: /bin/bash
+#  environment:
+#    BW_PASSWORD: "{{ BW_PASSWORD }}"
+
+
+- name: Listar conteúdo do diretório remoto
+  shell: ls -l /tmp/stack-arr/jellyfin/kubernetes-files/files
+  register: resultado_ls
+
+
+- name: Mostrar resultado do ls
+  debug:
+    var: resultado_ls.stdout_lines
+
+
+- name: Aplicar o stolon
+  become: yes
+  become_user: fenix 
+  shell: |
+    kubectl apply -f /tmp/stack-arr/jellyfin/kubernetes-files/files/
+  environment:
+    KUBECONFIG:  /home/fenix/.kube/config
--- a/roles/jellyfin/vars/main.yml
+++ b/roles/jellyfin/vars/main.yml
@ -0,0 +1,4 @@
+bw_password: "{{ lookup('env', 'BW_PASSWORD') }}"
+VAULTWARDEN_LINK: "{{ lookup('env', 'VAULTWARDEN_LINK') }}"
+BW_CLIENTID: "{{ lookup('env', 'BW_CLIENTID') }}"
+BW_CLIENTSECRET : "{{ lookup('env', 'BW_CLIENTSECRET') }}"
--- a/roles/jellyseerr/files/jellyseerr-deployment.yaml
+++ b/roles/jellyseerr/files/jellyseerr-deployment.yaml
@ -0,0 +1,62 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: jellyseerr
+  namespace: stack-arr
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: jellyseerr
+  template:
+    metadata:
+      labels:
+        app: jellyseerr
+    spec:
+      imagePullSecrets:
+      - name: regcred
+      containers:
+      - name: jellyseerr
+        image: fallenbagel/jellyseerr:2.7.3
+        ports:
+          - containerPort: 5055
+            name: webui
+        env:
+        - name: TZ
+          value: 'Etc/UTC'
+        - name: LOG_LEVEL
+          value: 'debug'
+        - name: DB_TYPE
+          value: 'postgres'
+        - name: DB_HOST
+          value: 'stolon-proxy-service.postgresql.svc.cluster.local'
+        - name: DB_PORT
+          value: '5432'
+        - name: DB_USER
+          valueFrom:
+            secretKeyRef:
+              name: jellyseerr-secret
+              key: username
+        - name: DB_PASS
+          valueFrom:
+            secretKeyRef:
+              name: jellyseerr-secret
+              key: password
+        - name: DB_NAME
+          valueFrom:
+            secretKeyRef:
+              name: jellyseerr-secret
+              key: maindb
+        - name: DB_LOG_QUERIES
+          value: 'false'
+        volumeMounts:
+        - name: config
+          mountPath: /app/config
+      volumes:
+      - name: config
+        persistentVolumeClaim:
+          claimName: jellyseerr-config-pvc
+
+
+
+
--- a/roles/jellyseerr/files/jellyseerr-nfs-csi.yaml
+++ b/roles/jellyseerr/files/jellyseerr-nfs-csi.yaml
@ -0,0 +1,11 @@
+apiVersion: storage.k8s.io/v1
+kind: StorageClass
+metadata:
+  name: jellyseerr-nfs-csi
+  namespace: stack-arr
+provisioner: nfs.csi.k8s.io
+parameters:
+  server: 192.168.1.22
+  share: /mnt/fenix-main-nas-pool-0/data/k8s-Volumes/k8s-cluster-iac-deployed/stack-arr/jellyseerr
+allowVolumeExpansion: true
+reclaimPolicy: Retain
--- a/roles/jellyseerr/files/jellyseerr-pvcs.yaml
+++ b/roles/jellyseerr/files/jellyseerr-pvcs.yaml
@ -0,0 +1,30 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: jellyseerr-config-pv
+  namespace: stack-arr
+spec:
+  capacity:
+    storage: 2Gi
+  storageClassName: jellyseerr-nfs-csi
+  accessModes:
+    - ReadWriteOnce
+  persistentVolumeReclaimPolicy: Retain
+  nfs:
+    server: 192.168.1.22
+    path: /mnt/fenix-main-nas-pool-0/data/k8s-Volumes/k8s-cluster-iac-deployed/stack-arr/jellyseerr/config
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: jellyseerr-config-pvc
+  namespace: stack-arr
+spec:
+  storageClassName: jellyseerr-nfs-csi
+  accessModes:
+    - ReadWriteOnce
+  volumeName: jellyseerr-config-pv
+  resources:
+    requests:
+      storage: 2Gi
+---
--- a/roles/jellyseerr/files/jellyseerr-secret.yaml
+++ b/roles/jellyseerr/files/jellyseerr-secret.yaml
@ -0,0 +1,10 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    name:  jellyseerr-secret
+    namespace: stack-arr
+type: Opaque
+data:
+    username: dXNlcm5hbWU=
+    password: cGFzc3dvcmQ=
+    maindb: bWFpbmRiLXByb3dsYXJy
--- a/roles/jellyseerr/files/jellyseerr-service.yaml
+++ b/roles/jellyseerr/files/jellyseerr-service.yaml
@ -0,0 +1,12 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: jellyseerr-service
+  namespace: stack-arr
+spec:
+  ports:
+    - port: 5055
+      targetPort: 5055
+  selector:
+    app: jellyseerr
+  type: ClusterIP
--- a/roles/jellyseerr/tasks/main.yml
+++ b/roles/jellyseerr/tasks/main.yml
@ -0,0 +1,51 @@
+- name: Remover o diretório /tmp/stack-arr/jellyseerr/kubernetes-files
+  ansible.builtin.file:
+    path: /tmp/stack-arr/jellyseerr/kubernetes-files
+    state: absent
+
+- name: Criar diretório temporário no remoto
+  file:
+    path: /tmp/stack-arr/jellyseerr/kubernetes-files
+    state: directory
+    mode: '0755'
+
+- name: Copy file with owner and permissions
+  ansible.builtin.copy:
+    src: ../files
+    dest: /tmp/stack-arr/jellyseerr/kubernetes-files
+    owner: fenix
+    group: root
+    mode: '0644'
+
+
+- name: Obter várias notas do Bitwarden
+  shell: |
+    echo "unlock"
+    BW_SESSION=$(bw unlock {{ bw_password }} --raw)
+    echo "get item"
+    bw get item "{{ item.id }}" --session $BW_SESSION | jq -r '.notes' > {{ item.dest }}
+  loop:
+    - { id: "iac.ansible.stackarr.jellyseerr.secret", dest: "/tmp/stack-arr/jellyseerr/kubernetes-files/files/jellyseerr-secret.yaml" }
+  args:
+    executable: /bin/bash
+  environment:
+    BW_PASSWORD: "{{ BW_PASSWORD }}"
+
+
+- name: Listar conteúdo do diretório remoto
+  shell: ls -l /tmp/stack-arr/jellyseerr/kubernetes-files/files
+  register: resultado_ls
+
+
+- name: Mostrar resultado do ls
+  debug:
+    var: resultado_ls.stdout_lines
+
+
+- name: Aplicar o stolon
+  become: yes
+  become_user: fenix 
+  shell: |
+    kubectl apply -f /tmp/stack-arr/jellyseerr/kubernetes-files/files/
+  environment:
+    KUBECONFIG:  /home/fenix/.kube/config
--- a/roles/jellyseerr/vars/main.yml
+++ b/roles/jellyseerr/vars/main.yml
@ -0,0 +1,4 @@
+bw_password: "{{ lookup('env', 'BW_PASSWORD') }}"
+VAULTWARDEN_LINK: "{{ lookup('env', 'VAULTWARDEN_LINK') }}"
+BW_CLIENTID: "{{ lookup('env', 'BW_CLIENTID') }}"
+BW_CLIENTSECRET : "{{ lookup('env', 'BW_CLIENTSECRET') }}"
--- a/roles/kube-master/tasks/main.yml
+++ b/roles/kube-master/tasks/main.yml
@ -22,7 +22,7 @@
  replace:
    path: /tmp/kube-flannel.yml
    regexp: '10\.244\.0\.0/16'
-    replace: '10.244.0.0/16' # .3.
+    replace: '10.240.0.0/16' # .3.

 - name: Corrigir net-conf.json no manifest do Flannel
  become: true
@ -55,8 +55,9 @@
    argv:
      - kubeadm
      - init
-      - --pod-network-cidr=10.244.0.0/16 # .3. 
-      - --apiserver-advertise-address=192.168.1.150
+      - --pod-network-cidr=10.240.0.0/16 # .3. 
+      - --apiserver-advertise-address=192.168.1.50
+      - --service-cidr=10.95.0.0/16
    creates: /etc/kubernetes/admin.conf 


@ -102,6 +103,37 @@
  delay: 6
  become: yes

+
+- name: kubernetes untaint node-role.kubernetes.io/control-plane:NoSchedule
+  become: true
+  shell: |
+      kubectl taint nodes --all node-role.kubernetes.io/control-plane:NoSchedule-
+  become_user: fenix 
+  environment:
+    KUBECONFIG:  /home/fenix/.kube/config
+  ignore_errors: yes
+
+
+- name: kubernetes unlabel node-role.kubernetes.io/control-plane
+  become: true
+  shell: |
+      kubectl label nodes --all node-role.kubernetes.io/control-plane-
+  become_user: fenix 
+  environment:
+    KUBECONFIG:  /home/fenix/.kube/config
+  ignore_errors: yes
+
+- name: kubernetes unlabel node.kubernetes.io/exclude-from-external-load-balancers
+  become: true
+  shell: |
+      kubectl label nodes --all node.kubernetes.io/exclude-from-external-load-balancers-
+  become_user: fenix 
+  environment:
+    KUBECONFIG:  /home/fenix/.kube/config
+  ignore_errors: yes
+
+
+
 - name: cat flannel
  become: true
  shell: |
@ -133,6 +165,81 @@
  delay: 6
  become: yes

+- name: Instalar Helm no nó master
+  become: true
+  shell: |
+    curl -fsSL https://raw.githubusercontent.com/helm/helm/master/scripts/get-helm-3 | bash
+  args:
+    creates: /usr/local/bin/helm
+    
+- name: Adicionar repositório Helm do CSI NFS
+  command: >
+    helm repo add csi-driver-nfs https://raw.githubusercontent.com/kubernetes-csi/csi-driver-nfs/master/charts
+  args:
+    creates: /root/.cache/helm/repository/csi-driver-nfs-index.yaml
+
+- name: Atualizar repositórios Helm
+  command: helm repo update
+  
+- name: Instalar CSI NFS Driver via Helm
+  command: helm upgrade --install csi-driver-nfs csi-driver-nfs/csi-driver-nfs --namespace kube-system --version 4.12.0
+  register: resultado_nfs
+  environment:
+    KUBECONFIG:  /home/fenix/.kube/config
+
+ 
+- name: Mostrar resultado do nfs csi driver
+  debug:
+    var: resultado_nfs.stdout_lines
+
+
+- name: Instalar MetalLB (manifest oficial)
+  shell: kubectl apply -f https://raw.githubusercontent.com/metallb/metallb/v0.13.9/config/manifests/metallb-native.yaml
+  become_user: fenix 
+  environment:
+    KUBECONFIG:  /home/fenix/.kube/config
+
+- name: Esperar pelo webhook do MetalLB
+  shell: kubectl get endpoints webhook-service -n metallb-system -o jsonpath='{.subsets[*].addresses[*].ip}'
+  register: webhook_ready
+  until: webhook_ready.stdout != ""
+  retries: 10
+  delay: 10
+  become_user: fenix 
+  environment:
+    KUBECONFIG:  /home/fenix/.kube/config
+
+- name: Criar IP pool
+  shell: |
+    cat <<EOF | kubectl apply -f -
+    apiVersion: metallb.io/v1beta1
+    kind: IPAddressPool
+    metadata:
+      name: local-pool
+      namespace: metallb-system
+    spec:
+      addresses:
+        - 10.240.0.100-10.240.0.250
+    EOF
+  become_user: fenix 
+  environment:
+    KUBECONFIG:  /home/fenix/.kube/config
+
+- name: Criar anúncio L2
+  shell: |
+    cat <<EOF | kubectl apply -f -
+    apiVersion: metallb.io/v1beta1
+    kind: L2Advertisement
+    metadata:
+      name: advert
+      namespace: metallb-system
+    EOF
+  become_user: fenix 
+  environment:
+    KUBECONFIG:  /home/fenix/.kube/config
+
+
+
 - name: Get kubeadm join command
  become: true
  shell: kubeadm token create --print-join-command
--- a/roles/kube-master/tasks/patch_netconf.py
+++ b/roles/kube-master/tasks/patch_netconf.py
@ -10,7 +10,7 @@ with open("/tmp/kube-flannel.yml", "r") as f:
 for doc in docs:
    if doc.get("kind") == "ConfigMap" and doc.get("metadata", {}).get("name") == "kube-flannel-cfg":
        doc["data"]["net-conf.json"] = '''{
-  "Network": "10.244.0.0/16",
+  "Network": "10.240.0.0/16",
  "Backend": {
    "Type": "vxlan"
  },
--- a/roles/kubernetes/tasks/main.yml
+++ b/roles/kubernetes/tasks/main.yml
@ -88,6 +88,7 @@
      - kubelet
      - kubeadm
      - kubectl
+      - nfs-common
    state: present
    update_cache: yes

@ -161,3 +162,5 @@
    owner: root
    group: root
    mode: '0644'
+
+
--- a/roles/lazylibrarian/files/lazylibrarian-deployment.yaml
+++ b/roles/lazylibrarian/files/lazylibrarian-deployment.yaml
@ -0,0 +1,54 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: lazylibrarian
+  namespace: stack-arr
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: lazylibrarian
+  template:
+    metadata:
+      labels:
+        app: lazylibrarian
+    spec:
+      imagePullSecrets:
+      - name: regcred
+      containers:
+      - name: lazylibrarian
+        image: lscr.io/linuxserver/lazylibrarian:latest
+        securityContext:
+          capabilities:
+            add:
+              - NET_ADMIN
+        ports:
+          - containerPort: 5299
+            name: webui
+        env:
+        - name: PUID
+          value: "1013"
+        - name: PGID
+          value: "1013"
+        - name: TZ
+          value: 'Etc/UTC'
+        volumeMounts:
+        - name: config
+          mountPath: /config
+        - name: books
+          mountPath: /books
+        - name: downloads
+          mountPath: /downloads
+      volumes:
+      - name: config
+        persistentVolumeClaim:
+          claimName: lazylibrarian-config-pvc
+      - name: books
+        persistentVolumeClaim:
+          claimName: lazylibrarian-books-pvc
+      - name: downloads
+        persistentVolumeClaim:
+          claimName: qbittorrent-downloads-pvc
+
+
+
--- a/roles/lazylibrarian/files/lazylibrarian-nfs-csi.yaml
+++ b/roles/lazylibrarian/files/lazylibrarian-nfs-csi.yaml
@ -0,0 +1,11 @@
+apiVersion: storage.k8s.io/v1
+kind: StorageClass
+metadata:
+  name: lazylibrarian-nfs-csi
+  namespace: stack-arr
+provisioner: nfs.csi.k8s.io
+parameters:
+  server: 192.168.1.22
+  share: /mnt/fenix-main-nas-pool-0/data/k8s-Volumes/k8s-cluster-iac-deployed/stack-arr/lazylibrarian
+allowVolumeExpansion: true
+reclaimPolicy: Retain
--- a/roles/lazylibrarian/files/lazylibrarian-pvcs.yaml
+++ b/roles/lazylibrarian/files/lazylibrarian-pvcs.yaml
@ -0,0 +1,60 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: lazylibrarian-config-pv
+  namespace: stack-arr
+spec:
+  capacity:
+    storage: 20Gi
+  storageClassName: lazylibrarian-nfs-csi
+  accessModes:
+    - ReadWriteOnce
+  persistentVolumeReclaimPolicy: Retain
+  nfs:
+    server: 192.168.1.22
+    path: /mnt/fenix-main-nas-pool-0/data/k8s-Volumes/k8s-cluster-iac-deployed/stack-arr/lazylibrarian/config
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: lazylibrarian-config-pvc
+  namespace: stack-arr
+spec:
+  storageClassName: lazylibrarian-nfs-csi
+  accessModes:
+    - ReadWriteOnce
+  volumeName: lazylibrarian-config-pv
+  resources:
+    requests:
+      storage: 20Gi
+---
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: lazylibrarian-media-pv
+  namespace: stack-arr
+spec:
+  capacity:
+    storage: 150Gi
+  storageClassName: jellyfin-videos-nfs-csi
+  accessModes:
+    - ReadWriteOnce
+  persistentVolumeReclaimPolicy: Retain
+  nfs:
+    server: 192.168.1.22
+    path: /mnt/fenix-main-nas-pool-0/data/Filmes_e_Series/Livros
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: lazylibrarian-books-pvc
+  namespace: stack-arr
+spec:
+  storageClassName: jellyfin-videos-nfs-csi
+  accessModes:
+    - ReadWriteOnce
+  volumeName: lazylibrarian-media-pv
+  resources:
+    requests:
+      storage: 150Gi
+---
--- a/roles/lazylibrarian/files/lazylibrarian-service.yaml
+++ b/roles/lazylibrarian/files/lazylibrarian-service.yaml
@ -0,0 +1,12 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: lazylibrarian-service
+  namespace: stack-arr
+spec:
+  ports:
+    - port: 5299 
+      targetPort: 5299 
+  selector:
+    app: lazylibrarian
+  type: ClusterIP
--- a/roles/lazylibrarian/tasks/main.yml
+++ b/roles/lazylibrarian/tasks/main.yml
@ -0,0 +1,51 @@
+- name: Remover o diretório /tmp/stack-arr/lazylibrarian/kubernetes-files
+  ansible.builtin.file:
+    path: /tmp/stack-arr/lazylibrarian/kubernetes-files
+    state: absent
+
+- name: Criar diretório temporário no remoto
+  file:
+    path: /tmp/stack-arr/lazylibrarian/kubernetes-files
+    state: directory
+    mode: '0755'
+
+- name: Copy file with owner and permissions
+  ansible.builtin.copy:
+    src: ../files
+    dest: /tmp/stack-arr/lazylibrarian/kubernetes-files
+    owner: fenix
+    group: root
+    mode: '0644'
+
+
+#- name: Obter várias notas do Bitwarden
+#  shell: |
+#    echo "unlock"
+#    BW_SESSION=$(bw unlock {{ bw_password }} --raw)
+#    echo "get item"
+#    bw get item "{{ item.id }}" --session $BW_SESSION | jq -r '.notes' > {{ item.dest }}
+#  loop:
+#    - { id: "iac.ansible.stackarr.lazylibrarian.secret", dest: "/tmp/stack-arr/lazylibrarian/kubernetes-files/files/lazylibrarian-secret.yaml" }
+#  args:
+#    executable: /bin/bash
+#  environment:
+#    BW_PASSWORD: "{{ BW_PASSWORD }}"
+
+
+- name: Listar conteúdo do diretório remoto
+  shell: ls -l /tmp/stack-arr/lazylibrarian/kubernetes-files/files
+  register: resultado_ls
+
+
+- name: Mostrar resultado do ls
+  debug:
+    var: resultado_ls.stdout_lines
+
+
+- name: Aplicar o stolon
+  become: yes
+  become_user: fenix 
+  shell: |
+    kubectl apply -f /tmp/stack-arr/lazylibrarian/kubernetes-files/files/
+  environment:
+    KUBECONFIG:  /home/fenix/.kube/config
--- a/roles/lazylibrarian/vars/main.yml
+++ b/roles/lazylibrarian/vars/main.yml
@ -0,0 +1,4 @@
+bw_password: "{{ lookup('env', 'BW_PASSWORD') }}"
+VAULTWARDEN_LINK: "{{ lookup('env', 'VAULTWARDEN_LINK') }}"
+BW_CLIENTID: "{{ lookup('env', 'BW_CLIENTID') }}"
+BW_CLIENTSECRET : "{{ lookup('env', 'BW_CLIENTSECRET') }}"
--- a/roles/libreTranslate/files/libretranslate-deployment.yaml
+++ b/roles/libreTranslate/files/libretranslate-deployment.yaml
@ -0,0 +1,26 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: libretranslate
+  namespace: stack-arr
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: libretranslate
+  template:
+    metadata:
+      labels:
+        app: libretranslate
+    spec:
+      containers:
+        - name: libretranslate
+          image: libretranslate/libretranslate:latest
+          ports:
+            - containerPort: 5000
+          env:
+            - name: LT_HTTP_HOST
+              value: "0.0.0.0"
+            - name: LT_HTTP_PORT
+              value: "5000"
+
--- a/roles/libreTranslate/files/libretranslate-service.yaml
+++ b/roles/libreTranslate/files/libretranslate-service.yaml
@ -0,0 +1,12 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: libretranslate-service
+  namespace: stack-arr
+spec:
+  ports:
+    - port: 5000
+      targetPort: 5000
+  selector:
+    app: libretranslate
+  type: ClusterIP
--- a/roles/libreTranslate/tasks/main.yml
+++ b/roles/libreTranslate/tasks/main.yml
@ -0,0 +1,51 @@
+- name: Remover o diretório /tmp/stack-arr/libreTranslate/kubernetes-files
+  ansible.builtin.file:
+    path: /tmp/stack-arr/libreTranslate/kubernetes-files
+    state: absent
+
+- name: Criar diretório temporário no remoto
+  file:
+    path: /tmp/stack-arr/libreTranslate/kubernetes-files
+    state: directory
+    mode: '0755'
+
+- name: Copy file with owner and permissions
+  ansible.builtin.copy:
+    src: ../files
+    dest: /tmp/stack-arr/libreTranslate/kubernetes-files
+    owner: fenix
+    group: root
+    mode: '0644'
+
+
+#- name: Obter várias notas do Bitwarden
+#  shell: |
+#    echo "unlock"
+#    BW_SESSION=$(bw unlock {{ bw_password }} --raw)
+#    echo "get item"
+#    bw get item "{{ item.id }}" --session $BW_SESSION | jq -r '.notes' > {{ item.dest }}
+#  loop:
+#    - { id: "iac.ansible.stackarr.radarr.secret", dest: "/tmp/stack-arr/radarr/kubernetes-files/files/radarr-secret.yaml" }
+#  args:
+#    executable: /bin/bash
+#  environment:
+#    BW_PASSWORD: "{{ BW_PASSWORD }}"
+
+
+- name: Listar conteúdo do diretório remoto
+  shell: ls -l /tmp/stack-arr/libreTranslate/kubernetes-files/files
+  register: resultado_ls
+
+
+- name: Mostrar resultado do ls
+  debug:
+    var: resultado_ls.stdout_lines
+
+
+- name: Aplicar o stolon
+  become: yes
+  become_user: fenix 
+  shell: |
+    kubectl apply -f /tmp/stack-arr/libreTranslate/kubernetes-files/files/
+  environment:
+    KUBECONFIG:  /home/fenix/.kube/config
--- a/roles/libreTranslate/vars/main.yml
+++ b/roles/libreTranslate/vars/main.yml
@ -0,0 +1,4 @@
+bw_password: "{{ lookup('env', 'BW_PASSWORD') }}"
+VAULTWARDEN_LINK: "{{ lookup('env', 'VAULTWARDEN_LINK') }}"
+BW_CLIENTID: "{{ lookup('env', 'BW_CLIENTID') }}"
+BW_CLIENTSECRET : "{{ lookup('env', 'BW_CLIENTSECRET') }}"
--- a/roles/lingarr/files/lingarr-deployment.yaml
+++ b/roles/lingarr/files/lingarr-deployment.yaml
@ -0,0 +1,36 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: lingarr
+  namespace: stack-arr
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: lingarr
+  template:
+    metadata:
+      labels:
+        app: lingarr
+    spec:
+      containers:
+        - name: lingarr
+          image: lingarr/lingarr:latest
+          ports:
+            - containerPort: 9876
+          env:
+            - name: ASPNETCORE_URLS
+              value: "http://+:9876"
+            - name: WHISPER_BASE_URL
+              value: "http://whisperasr-service.stack-arr.svc.cluster.local:9000"
+            - name: SOURCE_LANGUAGE
+              value: "auto"
+            - name: TARGET_LANGUAGE
+              value: "pt"
+          volumeMounts:
+            - name: config
+              mountPath: /app/config
+      volumes:
+      - name: config
+        persistentVolumeClaim:
+          claimName: lingarr-config-pvc
--- a/roles/lingarr/files/lingarr-nfs-csi.yaml
+++ b/roles/lingarr/files/lingarr-nfs-csi.yaml
@ -0,0 +1,11 @@
+apiVersion: storage.k8s.io/v1
+kind: StorageClass
+metadata:
+  name: lingarr-nfs-csi
+  namespace: stack-arr
+provisioner: nfs.csi.k8s.io
+parameters:
+  server: 192.168.1.22
+  share: /mnt/fenix-main-nas-pool-0/data/k8s-Volumes/k8s-cluster-iac-deployed/stack-arr/lingarr
+allowVolumeExpansion: true
+reclaimPolicy: Retain
--- a/roles/lingarr/files/lingarr-pvcs.yaml
+++ b/roles/lingarr/files/lingarr-pvcs.yaml
@ -0,0 +1,29 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: lingarr-config-pv
+  namespace: stack-arr
+spec:
+  capacity:
+    storage: 10Gi
+  storageClassName: lingarr-nfs-csi
+  accessModes:
+    - ReadWriteOnce
+  persistentVolumeReclaimPolicy: Retain
+  nfs:
+    server: 192.168.1.22
+    path: /mnt/fenix-main-nas-pool-0/data/k8s-Volumes/k8s-cluster-iac-deployed/stack-arr/lingarr/config
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: lingarr-config-pvc
+  namespace: stack-arr
+spec:
+  storageClassName: lingarr-nfs-csi
+  accessModes:
+    - ReadWriteOnce
+  volumeName: lingarr-config-pv
+  resources:
+    requests:
+      storage: 10Gi
--- a/roles/lingarr/files/lingarr-service.yaml
+++ b/roles/lingarr/files/lingarr-service.yaml
@ -0,0 +1,12 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: lingarr-service
+  namespace: stack-arr
+spec:
+  ports:
+    - port: 9876
+      targetPort: 9876
+  selector:
+    app: lingarr
+  type: ClusterIP
--- a/roles/lingarr/tasks/main.yml
+++ b/roles/lingarr/tasks/main.yml
@ -0,0 +1,51 @@
+- name: Remover o diretório /tmp/stack-arr/lingarr/kubernetes-files
+  ansible.builtin.file:
+    path: /tmp/stack-arr/lingarr/kubernetes-files
+    state: absent
+
+- name: Criar diretório temporário no remoto
+  file:
+    path: /tmp/stack-arr/lingarr/kubernetes-files
+    state: directory
+    mode: '0755'
+
+- name: Copy file with owner and permissions
+  ansible.builtin.copy:
+    src: ../files
+    dest: /tmp/stack-arr/lingarr/kubernetes-files
+    owner: fenix
+    group: root
+    mode: '0644'
+
+
+#- name: Obter várias notas do Bitwarden
+#  shell: |
+#    echo "unlock"
+#    BW_SESSION=$(bw unlock {{ bw_password }} --raw)
+#    echo "get item"
+#    bw get item "{{ item.id }}" --session $BW_SESSION | jq -r '.notes' > {{ item.dest }}
+#  loop:
+#    - { id: "iac.ansible.stackarr.radarr.secret", dest: "/tmp/stack-arr/radarr/kubernetes-files/files/radarr-secret.yaml" }
+#  args:
+#    executable: /bin/bash
+#  environment:
+#    BW_PASSWORD: "{{ BW_PASSWORD }}"
+
+
+- name: Listar conteúdo do diretório remoto
+  shell: ls -l /tmp/stack-arr/lingarr/kubernetes-files/files
+  register: resultado_ls
+
+
+- name: Mostrar resultado do ls
+  debug:
+    var: resultado_ls.stdout_lines
+
+
+- name: Aplicar o stolon
+  become: yes
+  become_user: fenix 
+  shell: |
+    kubectl apply -f /tmp/stack-arr/lingarr/kubernetes-files/files/
+  environment:
+    KUBECONFIG:  /home/fenix/.kube/config
--- a/roles/lingarr/vars/main.yml
+++ b/roles/lingarr/vars/main.yml
@ -0,0 +1,4 @@
+bw_password: "{{ lookup('env', 'BW_PASSWORD') }}"
+VAULTWARDEN_LINK: "{{ lookup('env', 'VAULTWARDEN_LINK') }}"
+BW_CLIENTID: "{{ lookup('env', 'BW_CLIENTID') }}"
+BW_CLIENTSECRET : "{{ lookup('env', 'BW_CLIENTSECRET') }}"
--- a/roles/mangareader/files/mangareader-deployment.yaml
+++ b/roles/mangareader/files/mangareader-deployment.yaml
@ -0,0 +1,88 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: mangareader
+  namespace: stack-arr
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: mangareader
+  template:
+    metadata:
+      labels:
+        app: mangareader
+    spec:
+      imagePullSecrets:
+      - name: regcred
+      containers:
+      - name: mangareader
+        image: ghcr.io/suwayomi/tachidesk:v2.1.2061
+        securityContext:
+          capabilities:
+            add:
+              - NET_ADMIN
+        ports:
+          - containerPort: 4567
+            name: webui
+        env:
+        - name: PUID
+          value: "1013"
+        - name: PGID
+          value: "1013"
+        - name: TZ
+          value: 'Etc/UTC'
+        - name: AUTO_DOWNLOAD_CHAPTERS
+          value: 'true'
+        - name: AUTO_BACKUP_INCLUDE_MANGA
+          value: 'false'
+        - name: AUTO_BACKUP_INCLUDE_CATEGORIES
+          value: 'false'
+        - name: AUTO_BACKUP_INCLUDE_CHAPTERS
+          value: 'false'
+        - name: AUTO_BACKUP_INCLUDE_TRACKING
+          value: 'false'
+        - name: AUTO_BACKUP_INCLUDE_HISTORY
+          value: 'false'
+        - name: AUTO_BACKUP_INCLUDE_CLIENT_DATA
+          value: 'false'
+        - name: AUTO_BACKUP_INCLUDE_SERVER_SETTINGS
+          value: 'false'
+        - name: FLARESOLVERR_ENABLED
+          value: 'true'
+        - name: FLARESOLVERR_URL
+          value: 'http://flaresolverr-service.stack-arr.svc.cluster.local:8191'
+        - name: DATABASE_TYPE
+          value: 'POSTGRESQL'
+        - name: DATABASE_URL
+          value: 'postgresql://stolon-proxy-service.postgresql.svc.cluster.local:5432/mangareader'
+        - name: DATABASE_USERNAME
+          valueFrom:
+            secretKeyRef:
+              name: mangareader-secret
+              key: username
+        - name: DATABASE_PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: mangareader-secret
+              key: password
+        volumeMounts:
+        - name: config
+          mountPath: /home/suwayomi/.local/share/Tachidesk
+        - name: books
+          mountPath: /books
+        - name: downloads
+          mountPath: /downloads
+      volumes:
+      - name: config
+        persistentVolumeClaim:
+          claimName: mangareader-config-pvc
+      - name: books
+        persistentVolumeClaim:
+          claimName: mangareader-books-pvc
+      - name: downloads
+        persistentVolumeClaim:
+          claimName: qbittorrent-downloads-pvc
+
+
+
--- a/roles/mangareader/files/mangareader-nfs-csi.yaml
+++ b/roles/mangareader/files/mangareader-nfs-csi.yaml
@ -0,0 +1,11 @@
+apiVersion: storage.k8s.io/v1
+kind: StorageClass
+metadata:
+  name: mangareader-nfs-csi
+  namespace: stack-arr
+provisioner: nfs.csi.k8s.io
+parameters:
+  server: 192.168.1.22
+  share: /mnt/fenix-main-nas-pool-0/data/k8s-Volumes/k8s-cluster-iac-deployed/stack-arr/mangareader
+allowVolumeExpansion: true
+reclaimPolicy: Retain
--- a/roles/mangareader/files/mangareader-pvcs.yaml
+++ b/roles/mangareader/files/mangareader-pvcs.yaml
@ -0,0 +1,60 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: mangareader-config-pv
+  namespace: stack-arr
+spec:
+  capacity:
+    storage: 20Gi
+  storageClassName: mangareader-nfs-csi
+  accessModes:
+    - ReadWriteOnce
+  persistentVolumeReclaimPolicy: Retain
+  nfs:
+    server: 192.168.1.22
+    path: /mnt/fenix-main-nas-pool-0/data/k8s-Volumes/k8s-cluster-iac-deployed/stack-arr/mangareader/config
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: mangareader-config-pvc
+  namespace: stack-arr
+spec:
+  storageClassName: mangareader-nfs-csi
+  accessModes:
+    - ReadWriteOnce
+  volumeName: mangareader-config-pv
+  resources:
+    requests:
+      storage: 20Gi
+---
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: mangareader-media-pv
+  namespace: stack-arr
+spec:
+  capacity:
+    storage: 150Gi
+  storageClassName: jellyfin-videos-nfs-csi
+  accessModes:
+    - ReadWriteOnce
+  persistentVolumeReclaimPolicy: Retain
+  nfs:
+    server: 192.168.1.22
+    path: /mnt/fenix-main-nas-pool-0/data/Filmes_e_Series/Livros
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: mangareader-books-pvc
+  namespace: stack-arr
+spec:
+  storageClassName: jellyfin-videos-nfs-csi
+  accessModes:
+    - ReadWriteOnce
+  volumeName: mangareader-media-pv
+  resources:
+    requests:
+      storage: 150Gi
+---
--- a/roles/mangareader/files/mangareader-secret.yaml
+++ b/roles/mangareader/files/mangareader-secret.yaml
@ -0,0 +1,9 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    name:  mangareader-secret
+    namespace: stack-arr
+type: Opaque
+data:
+    username: dXNlcm5hbWU=
+    password: cGFzc3dvcmQ=
--- a/roles/mangareader/files/mangareader-service.yaml
+++ b/roles/mangareader/files/mangareader-service.yaml
@ -0,0 +1,12 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: mangareader-service
+  namespace: stack-arr
+spec:
+  ports:
+    - port: 4567 
+      targetPort: 4567 
+  selector:
+    app: mangareader
+  type: ClusterIP
--- a/roles/mangareader/tasks/main.yml
+++ b/roles/mangareader/tasks/main.yml
@ -0,0 +1,51 @@
+- name: Remover o diretório /tmp/stack-arr/mangareader/kubernetes-files
+  ansible.builtin.file:
+    path: /tmp/stack-arr/mangareader/kubernetes-files
+    state: absent
+
+- name: Criar diretório temporário no remoto
+  file:
+    path: /tmp/stack-arr/mangareader/kubernetes-files
+    state: directory
+    mode: '0755'
+
+- name: Copy file with owner and permissions
+  ansible.builtin.copy:
+    src: ../files
+    dest: /tmp/stack-arr/mangareader/kubernetes-files
+    owner: fenix
+    group: root
+    mode: '0644'
+
+
+- name: Obter várias notas do Bitwarden
+  shell: |
+    echo "unlock"
+    BW_SESSION=$(bw unlock {{ bw_password }} --raw)
+    echo "get item"
+    bw get item "{{ item.id }}" --session $BW_SESSION | jq -r '.notes' > {{ item.dest }}
+  loop:
+    - { id: "iac.ansible.stackarr.mangareader.secret", dest: "/tmp/stack-arr/mangareader/kubernetes-files/files/mangareader-secret.yaml" }
+  args:
+    executable: /bin/bash
+  environment:
+    BW_PASSWORD: "{{ BW_PASSWORD }}"
+
+
+- name: Listar conteúdo do diretório remoto
+  shell: ls -l /tmp/stack-arr/mangareader/kubernetes-files/files
+  register: resultado_ls
+
+
+- name: Mostrar resultado do ls
+  debug:
+    var: resultado_ls.stdout_lines
+
+
+- name: Aplicar o stolon
+  become: yes
+  become_user: fenix 
+  shell: |
+    kubectl apply -f /tmp/stack-arr/mangareader/kubernetes-files/files/
+  environment:
+    KUBECONFIG:  /home/fenix/.kube/config
--- a/roles/mangareader/vars/main.yml
+++ b/roles/mangareader/vars/main.yml
@ -0,0 +1,4 @@
+bw_password: "{{ lookup('env', 'BW_PASSWORD') }}"
+VAULTWARDEN_LINK: "{{ lookup('env', 'VAULTWARDEN_LINK') }}"
+BW_CLIENTID: "{{ lookup('env', 'BW_CLIENTID') }}"
+BW_CLIENTSECRET : "{{ lookup('env', 'BW_CLIENTSECRET') }}"
--- a/roles/nvidia-base/tasks/main.yml
+++ b/roles/nvidia-base/tasks/main.yml
@ -0,0 +1,66 @@
+- name: Instalar driver NVIDIA
+  become: yes
+  ansible.builtin.apt:
+    name: nvidia-driver-550
+    state: present
+
+- name: Instalar utilitários NVIDIA
+  become: yes
+  ansible.builtin.apt:
+    name: nvidia-utils-550
+    state: present
+
+
+- name: Reboot host e esperar voltar
+  become: yes
+  ansible.builtin.reboot:
+    reboot_timeout: 600   # tempo máximo para o host voltar (segundos)
+    test_command: whoami  # comando usado para validar que o host voltou
+
+- name: Adicionar chave GPG da NVIDIA
+  become: yes
+  become_user: fenix 
+  ansible.builtin.shell: |
+    curl -fsSL https://nvidia.github.io/libnvidia-container/gpgkey | sudo gpg --dearmor -o /usr/share/keyrings/nvidia-container-toolkit.gpg
+  args:
+    creates: /usr/share/keyrings/nvidia-container-toolkit.gpg
+
+- name: Adicionar repositório NVIDIA
+  become: yes
+  ansible.builtin.shell: |
+    curl -fsSL https://nvidia.github.io/libnvidia-container/gpgkey | sudo gpg --dearmor -o /usr/share/keyrings/nvidia-container-toolkit-keyring.gpg \
+      && curl -s -L https://nvidia.github.io/libnvidia-container/stable/deb/nvidia-container-toolkit.list | \
+        sed 's#deb https://#deb [signed-by=/usr/share/keyrings/nvidia-container-toolkit-keyring.gpg] https://#g' | \
+        sudo tee /etc/apt/sources.list.d/nvidia-container-toolkit.list
+  args:
+    creates: /etc/apt/sources.list.d/nvidia-container-toolkit.list
+
+- name: Atualizar cache de pacotes
+  become: yes
+  ansible.builtin.apt:
+    update_cache: yes
+
+- name: Instalar NVIDIA Container Toolkit
+  become: yes
+  ansible.builtin.apt:
+    name: nvidia-container-toolkit
+    state: present
+
+
+- name: Configurar runtime containerd
+  become: yes
+  ansible.builtin.shell: |
+    nvidia-ctk runtime configure --runtime=containerd
+
+- name: Reiniciar containerd
+  become: yes
+  ansible.builtin.systemd:
+    name: containerd
+    state: restarted
+
+
+- name: Mostrar resultado nvidia-smi
+  become: yes
+  ansible.builtin.debug:
+    var: nvidia_smi_output.stdout
+
--- a/roles/nvidia/files/time-slicing-config.yaml
+++ b/roles/nvidia/files/time-slicing-config.yaml
@ -0,0 +1,17 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: time-slicing-config-all
+  namespace: gpu-operator 
+data:
+  any: |-
+    version: v1
+    flags:
+      migStrategy: none
+    sharing:
+      timeSlicing:
+        renameByDefault: false
+        failRequestsGreaterThanOne: false
+        resources:
+          - name: nvidia.com/gpu
+            replicas: 4
--- a/roles/nvidia/tasks/main.yml
+++ b/roles/nvidia/tasks/main.yml
@ -0,0 +1,67 @@
+- name: Adicionar repositório Helm do nvida gpu
+  command: >
+    helm repo add nvidia https://nvidia.github.io/gpu-operator
+  ignore_errors: yes
+  
+- name: Atualizar repositórios Helm
+  command: helm repo update
+  
+- name: Instalar nvida gpu Driver via Helm
+  command:  helm upgrade --install nvidia-operator nvidia/gpu-operator --namespace gpu-operator --create-namespace
+  register: resultado_nvidia
+  environment:
+    KUBECONFIG:  /home/fenix/.kube/config
+
+- name: Mostrar resultado do nvida gpu Driver
+  debug:
+    var: resultado_nvidia.stdout_lines
+
+
+- name: Remover o diretório /tmp/nvidia/kubernetes-files
+  ansible.builtin.file:
+    path: /tmp/nvidia/kubernetes-files
+    state: absent
+
+- name: Criar diretório temporário no remoto
+  file:
+    path: /tmp/nvidia/kubernetes-files
+    state: directory
+    mode: '0755'
+
+- name: Copy file with owner and permissions
+  ansible.builtin.copy:
+    src: ../files
+    dest: /tmp/nvidia/kubernetes-files
+    owner: fenix
+    group: root
+    mode: '0644'
+
+
+- name: Listar conteúdo do diretório remoto
+  shell: ls -l /tmp/nvidia/kubernetes-files/files
+  register: resultado_ls
+
+
+- name: Mostrar resultado do ls
+  debug:
+    var: resultado_ls.stdout_lines
+
+
+- name: Aplicar o files
+  become: yes
+  become_user: fenix 
+  shell: |
+    kubectl apply -f /tmp/nvidia/kubernetes-files/files/
+  environment:
+    KUBECONFIG:  /home/fenix/.kube/config
+
+
+- name: Aplicar o files
+  become: yes
+  become_user: fenix 
+  shell: |
+    kubectl patch clusterpolicies.nvidia.com/cluster-policy -n gpu-operator --type merge -p "{\"spec\": {\"devicePlugin\": {\"config\": {\"name\": \"time-slicing-config-all\", \"default\": \"any\"}}}}"
+  environment:
+    KUBECONFIG:  /home/fenix/.kube/config
+
+
--- a/roles/prowlarr/files/prowlarr-deployment.yaml
+++ b/roles/prowlarr/files/prowlarr-deployment.yaml
@ -0,0 +1,67 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: prowlarr
+  namespace: stack-arr
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: prowlarr
+  template:
+    metadata:
+      labels:
+        app: prowlarr
+    spec:
+      imagePullSecrets:
+      - name: regcred
+      containers:
+      - name: prowlarr
+        image: lscr.io/linuxserver/prowlarr:2.1.5
+        securityContext:
+          capabilities:
+            add:
+              - NET_ADMIN
+        ports:
+          - containerPort: 9696
+            name: webui
+        env:
+        - name: PUID
+          value: "1013"
+        - name: PGID
+          value: "1013"
+        - name: TZ
+          value: 'Etc/UTC'
+        - name: PROWLARR__POSTGRES__HOST
+          value: 'stolon-proxy-service.postgresql.svc.cluster.local'
+        - name: PROWLARR__POSTGRES__USER
+          valueFrom:
+            secretKeyRef:
+              name: prowlarr-secret
+              key: username
+        - name: PROWLARR__POSTGRES__PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: prowlarr-secret
+              key: password
+        - name: PROWLARR__POSTGRES__MAINDB
+          valueFrom:
+            secretKeyRef:
+              name: prowlarr-secret
+              key: maindb
+        - name: PROWLARR__POSTGRES__LOGDB
+          valueFrom:
+            secretKeyRef:
+              name: prowlarr-secret
+              key: logsdb
+        volumeMounts:
+        - name: config
+          mountPath: /config
+      volumes:
+      - name: config
+        persistentVolumeClaim:
+          claimName: prowlarr-config-pvc
+
+
+
+
--- a/roles/prowlarr/files/prowlarr-nfs-csi.yaml
+++ b/roles/prowlarr/files/prowlarr-nfs-csi.yaml
@ -0,0 +1,11 @@
+apiVersion: storage.k8s.io/v1
+kind: StorageClass
+metadata:
+  name: prowlarr-nfs-csi
+  namespace: stack-arr
+provisioner: nfs.csi.k8s.io
+parameters:
+  server: 192.168.1.22
+  share: /mnt/fenix-main-nas-pool-0/data/k8s-Volumes/k8s-cluster-iac-deployed/stack-arr/prowlarr
+allowVolumeExpansion: true
+reclaimPolicy: Retain
--- a/roles/prowlarr/files/prowlarr-pvcs.yaml
+++ b/roles/prowlarr/files/prowlarr-pvcs.yaml
@ -0,0 +1,30 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: prowlarr-config-pv
+  namespace: stack-arr
+spec:
+  capacity:
+    storage: 2Gi
+  storageClassName: prowlarr-nfs-csi
+  accessModes:
+    - ReadWriteOnce
+  persistentVolumeReclaimPolicy: Retain
+  nfs:
+    server: 192.168.1.22
+    path: /mnt/fenix-main-nas-pool-0/data/k8s-Volumes/k8s-cluster-iac-deployed/stack-arr/prowlarr/config
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: prowlarr-config-pvc
+  namespace: stack-arr
+spec:
+  storageClassName: prowlarr-nfs-csi
+  accessModes:
+    - ReadWriteOnce
+  volumeName: prowlarr-config-pv
+  resources:
+    requests:
+      storage: 2Gi
+---
--- a/roles/prowlarr/files/prowlarr-secret.yaml
+++ b/roles/prowlarr/files/prowlarr-secret.yaml
@ -0,0 +1,11 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    name:  prowlarr-secret
+    namespace: stack-arr
+type: Opaque
+data:
+    username: dXNlcm5hbWU=
+    password: cGFzc3dvcmQ=
+    maindb: bWFpbmRiLXByb3dsYXJy
+    logsdb: bG9nZGItcHJvd2xhcnI=
--- a/roles/prowlarr/files/prowlarr-service.yaml
+++ b/roles/prowlarr/files/prowlarr-service.yaml
@ -0,0 +1,12 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: prowlarr-service
+  namespace: stack-arr
+spec:
+  ports:
+    - port: 9696
+      targetPort: 9696
+  selector:
+    app: prowlarr
+  type: ClusterIP
--- a/roles/prowlarr/tasks/main.yml
+++ b/roles/prowlarr/tasks/main.yml
@ -0,0 +1,51 @@
+- name: Remover o diretório /tmp/stack-arr/prowlarr/kubernetes-files
+  ansible.builtin.file:
+    path: /tmp/stack-arr/prowlarr/kubernetes-files
+    state: absent
+
+- name: Criar diretório temporário no remoto
+  file:
+    path: /tmp/stack-arr/prowlarr/kubernetes-files
+    state: directory
+    mode: '0755'
+
+- name: Copy file with owner and permissions
+  ansible.builtin.copy:
+    src: ../files
+    dest: /tmp/stack-arr/prowlarr/kubernetes-files
+    owner: fenix
+    group: root
+    mode: '0644'
+
+
+- name: Obter várias notas do Bitwarden
+  shell: |
+    echo "unlock"
+    BW_SESSION=$(bw unlock {{ bw_password }} --raw)
+    echo "get item"
+    bw get item "{{ item.id }}" --session $BW_SESSION | jq -r '.notes' > {{ item.dest }}
+  loop:
+    - { id: "iac.ansible.stackarr.prowlarr.secret", dest: "/tmp/stack-arr/prowlarr/kubernetes-files/files/prowlarr-secret.yaml" }
+  args:
+    executable: /bin/bash
+  environment:
+    BW_PASSWORD: "{{ BW_PASSWORD }}"
+
+
+- name: Listar conteúdo do diretório remoto
+  shell: ls -l /tmp/stack-arr/prowlarr/kubernetes-files/files
+  register: resultado_ls
+
+
+- name: Mostrar resultado do ls
+  debug:
+    var: resultado_ls.stdout_lines
+
+
+- name: Aplicar o stolon
+  become: yes
+  become_user: fenix 
+  shell: |
+    kubectl apply -f /tmp/stack-arr/prowlarr/kubernetes-files/files/
+  environment:
+    KUBECONFIG:  /home/fenix/.kube/config
--- a/roles/prowlarr/vars/main.yml
+++ b/roles/prowlarr/vars/main.yml
@ -0,0 +1,4 @@
+bw_password: "{{ lookup('env', 'BW_PASSWORD') }}"
+VAULTWARDEN_LINK: "{{ lookup('env', 'VAULTWARDEN_LINK') }}"
+BW_CLIENTID: "{{ lookup('env', 'BW_CLIENTID') }}"
+BW_CLIENTSECRET : "{{ lookup('env', 'BW_CLIENTSECRET') }}"
--- a/roles/qbittorrent/files/docker-secrets.yaml
+++ b/roles/qbittorrent/files/docker-secrets.yaml
@ -0,0 +1,9 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: regcred
+  namespace: stack-arr
+data:
+  .dockerconfigjson: >-
+    eyJhdXRocyI6eyJodHRwczovL2luZGV4LmRvY2tlci5pby92MS8iOnsidXNlcm5hbWUiOiJ1c2VyIiwicGFzc3dvcmQiOiJwYXNzIiwiYXV0aCI6ImRmamlla2ZlcldFS1dFa29mY2RrbzM0MzUzZmQ9In19fQ==
+type: kubernetes.io/dockerconfigjson
--- a/roles/qbittorrent/files/qbittorrent-deployment.yaml
+++ b/roles/qbittorrent/files/qbittorrent-deployment.yaml
@ -0,0 +1,69 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: qbittorrentvpn
+  namespace: stack-arr
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: qbittorrentvpn
+  template:
+    metadata:
+      labels:
+        app: qbittorrentvpn
+    spec:
+      imagePullSecrets:
+      - name: regcred
+      containers:
+      - name: qbittorrentvpn
+        image: j4ym0/pia-qbittorrent:5.1.2-ubuntu
+        securityContext:
+          capabilities:
+            add:
+              - NET_ADMIN
+        ports:
+          - containerPort: 8080
+            name: webui
+          - containerPort: 51413
+            name: torrent-tcp
+          - containerPort: 51413
+            name: torrent-udp
+            protocol: UDP
+        env:
+        - name: USER
+          valueFrom:
+            secretKeyRef:
+              name: vpn-secret
+              key: username
+        - name: PASSWORD
+          valueFrom:
+            secretKeyRef:
+              name: vpn-secret
+              key: password
+        - name: REGION
+          value: "Netherlands"  # ou outro servidor PIA
+        - name: WEBUI_PORT
+          value: "8080"
+        - name: DNS_SERVERS
+          value: "1.1.1.1,1.0.0.1"
+        - name: UID
+          value: "1013"
+        - name: GID
+          value: "1013"
+        - name: PORT_FORWARDING
+          value: 'true'
+        - name: HOSTHEADERVALIDATION
+          value: 'false'
+        volumeMounts:
+        - name: config
+          mountPath: /config
+        - name: downloads
+          mountPath: /downloads
+      volumes:
+      - name: config
+        persistentVolumeClaim:
+          claimName: qbittorrent-config-pvc
+      - name: downloads
+        persistentVolumeClaim:
+          claimName: qbittorrent-downloads-pvc
--- a/roles/qbittorrent/files/qbittorrent-namespace.yaml
+++ b/roles/qbittorrent/files/qbittorrent-namespace.yaml
@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: stack-arr
--- a/roles/qbittorrent/files/qbittorrent-nfs-csi.yaml
+++ b/roles/qbittorrent/files/qbittorrent-nfs-csi.yaml
@ -0,0 +1,11 @@
+apiVersion: storage.k8s.io/v1
+kind: StorageClass
+metadata:
+  name: qbittorrent-nfs-csi
+  namespace: stack-arr
+provisioner: nfs.csi.k8s.io
+parameters:
+  server: 192.168.1.22
+  share: /mnt/fenix-main-nas-pool-0/data/k8s-Volumes/k8s-cluster-iac-deployed/stack-arr/bittorrent
+allowVolumeExpansion: true
+reclaimPolicy: Retain
--- a/roles/qbittorrent/files/qbittorrent-pvcs.yaml
+++ b/roles/qbittorrent/files/qbittorrent-pvcs.yaml
@ -0,0 +1,60 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: qbittorrent-config-pv
+  namespace: stack-arr
+spec:
+  capacity:
+    storage: 2Gi
+  storageClassName: qbittorrent-nfs-csi
+  accessModes:
+    - ReadWriteOnce
+  persistentVolumeReclaimPolicy: Retain
+  nfs:
+    server: 192.168.1.22
+    path: /mnt/fenix-main-nas-pool-0/data/k8s-Volumes/k8s-cluster-iac-deployed/stack-arr/bittorrent/config
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: qbittorrent-config-pvc
+  namespace: stack-arr
+spec:
+  storageClassName: qbittorrent-nfs-csi
+  accessModes:
+    - ReadWriteOnce
+  volumeName: qbittorrent-config-pv
+  resources:
+    requests:
+      storage: 2Gi
+---
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: qbittorrent-downloads-pv
+  namespace: stack-arr
+spec:
+  capacity:
+    storage: 10Gi
+  storageClassName: qbittorrent-nfs-csi
+  accessModes:
+    - ReadWriteOnce
+  persistentVolumeReclaimPolicy: Retain
+  nfs:
+    server: 192.168.1.22
+    path: /mnt/fenix-main-nas-pool-0/data/Filmes_e_Series/Downloads
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: qbittorrent-downloads-pvc
+  namespace: stack-arr
+spec:
+  storageClassName: qbittorrent-nfs-csi
+  accessModes:
+    - ReadWriteOnce
+  volumeName: qbittorrent-downloads-pv
+  resources:
+    requests:
+      storage: 10Gi
+---
--- a/roles/qbittorrent/files/qbittorrent-service.yaml
+++ b/roles/qbittorrent/files/qbittorrent-service.yaml
@ -0,0 +1,13 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: qbittorrent-service
+  namespace: stack-arr
+spec:
+  ports:
+    - port: 8080
+      targetPort: 8080
+  selector:
+    app: qbittorrentvpn
+  type: LoadBalancer
+  loadBalancerIP: 10.240.0.101
--- a/roles/qbittorrent/files/vpn-secret.yaml
+++ b/roles/qbittorrent/files/vpn-secret.yaml
@ -0,0 +1,9 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    name:  vpn-secret
+    namespace: stack-arr
+type: Opaque
+data:
+    username: dXNlcm5hbWU=
+    password: cGFzc3dvcmQ=
--- a/roles/qbittorrent/tasks/main.yml
+++ b/roles/qbittorrent/tasks/main.yml
@ -0,0 +1,51 @@
+- name: Remover o diretório /tmp/stack-arr/qbittorrent/kubernetes-files
+  ansible.builtin.file:
+    path: /tmp/stack-arr/qbittorrent/kubernetes-files
+    state: absent
+
+- name: Criar diretório temporário no remoto
+  file:
+    path: /tmp/stack-arr/qbittorrent/kubernetes-files
+    state: directory
+    mode: '0755'
+
+- name: Copy file with owner and permissions
+  ansible.builtin.copy:
+    src: ../files
+    dest: /tmp/stack-arr/qbittorrent/kubernetes-files
+    owner: fenix
+    group: root
+    mode: '0644'
+
+- name: Obter várias notas do Bitwarden
+  shell: |
+    echo "unlock"
+    BW_SESSION=$(bw unlock {{ bw_password }} --raw)
+    echo "get item"
+    bw get item "{{ item.id }}" --session $BW_SESSION | jq -r '.notes' > {{ item.dest }}
+  loop:
+    - { id: "iac.ansible.stackarr.qbittorrent.dockersecrets", dest: "/tmp/stack-arr/qbittorrent/kubernetes-files/files/docker-secrets.yaml" }
+    - { id: "iac.ansible.stackarr.qbittorrent.secret", dest: "/tmp/stack-arr/qbittorrent/kubernetes-files/files/vpn-secret.yaml" }
+  args:
+    executable: /bin/bash
+  environment:
+    BW_PASSWORD: "{{ BW_PASSWORD }}"
+
+
+- name: Listar conteúdo do diretório remoto
+  shell: ls -l /tmp/stack-arr/qbittorrent/kubernetes-files/files
+  register: resultado_ls
+
+- name: Mostrar resultado do ls
+  debug:
+    var: resultado_ls.stdout_lines
+
+
+- name: Aplicar o qbittorrent
+  become: yes
+  become_user: fenix 
+  shell: |
+    kubectl apply -f /tmp/stack-arr/qbittorrent/kubernetes-files/files/qbittorrent-namespace.yaml
+    kubectl apply -f /tmp/stack-arr/qbittorrent/kubernetes-files/files/
+  environment:
+    KUBECONFIG:  /home/fenix/.kube/config
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
Tomás Limpinho	46505df323	BOOKS	2026-02-08 18:14:11 +00:00
Tomás Limpinho	0294601e2c	vaultwarden there is a bug in a version	2026-01-23 21:39:29 +00:00
Tomás Limpinho	1e827ede7b	bitwarden passado	2026-01-23 20:30:04 +00:00
Tomás Limpinho	d8e54b6af4	mangareader	2026-01-23 20:11:16 +00:00
Tomás Limpinho	7f42b439c9	Merge branch 'main' of https://gitea.fenix-dev.com/fenix-gitea-admin/iac-ansible-private	2026-01-23 11:54:29 +00:00
Tomás Limpinho	67dc792660	deploy	2026-01-23 11:54:18 +00:00
Tomás Limpinho	128823f456	lazylibrarian, bookshelf, suwayomi (mangareader),, shelfarr testes	2026-01-23 11:52:58 +00:00
Tomás Limpinho	9e703cf9fd	anchorr	2026-01-21 16:51:47 +00:00
fenix-gitea-admin	8ccda6978e	logo no readme	2026-01-21 16:20:14 +00:00
fenix-gitea-admin	f832f2ad37	upload logo upload logo	2026-01-21 16:18:24 +00:00
Tomás Limpinho	f7c345e505	lingarr e libreTranslate	2026-01-05 20:57:50 +00:00
Tomás Limpinho	5460418ecb	whipearr lingrrr, vai ser trocado agora por libretrasnlate	2026-01-05 15:18:13 +00:00
Tomás Limpinho	696c542b6b	nvidia time slicing and bazzar	2026-01-04 14:24:53 +00:00
Tomás Limpinho	0fda7f84ba	bazarr	2026-01-03 14:45:07 +00:00
Tomás Limpinho	82f9ab4ead	ai	2025-12-30 01:11:28 +00:00
Tomás Limpinho	51c4466103	nvidia with helm	2025-12-09 19:52:50 +00:00
Tomás Limpinho	cb1bf070b0	nvidia-base vsnvidia frfom kubernetes	2025-12-08 19:31:29 +00:00
Tomás Limpinho	8dec820f1d	nvidia for kubernetes	2025-12-08 19:01:39 +00:00
Tomás Limpinho	31f624c429	containerd	2025-12-08 18:47:24 +00:00
Tomás Limpinho	955d1ac2f2	apt install	2025-12-08 18:25:47 +00:00
Tomás Limpinho	4377f5917c	list packages corrected	2025-12-08 17:50:47 +00:00
Tomás Limpinho	4eb7726ed8	creaters	2025-12-08 17:42:58 +00:00
Tomás Limpinho	369b8dae80	correctioin adding repositorio nvidia	2025-12-08 17:27:56 +00:00
Tomás Limpinho	1c24b3e030	fenix no more	2025-12-08 17:08:37 +00:00
Tomás Limpinho	607a6b82c3	Adicionar repositório NVIDIA	2025-12-08 16:58:05 +00:00
Tomás Limpinho	3c4fab1534	correction task nvidia	2025-12-08 16:35:49 +00:00
Tomás Limpinho	4b1fa18f7f	a	2025-12-08 16:31:39 +00:00
Tomás Limpinho	40b8d89ee7	nvidia in all nodes	2025-12-08 16:25:54 +00:00
Tomás Limpinho	bdda2191c4	qbit	2025-12-08 14:35:20 +00:00
fenix-gitea-admin	6c5290a118	Update roles/stolon/tasks/main.yml	2025-12-02 14:59:43 +00:00
Tomás Limpinho	b857640bf6	declutarr	2025-12-02 14:12:42 +00:00
Tomás Limpinho	ff0f048859	radarr call	2025-11-13 22:30:09 +00:00
Tomás Limpinho	78659b1c77	radarr	2025-11-13 22:29:04 +00:00
Tomás Limpinho	32ef4ccb0d	decluttarr readme	2025-11-13 20:38:59 +00:00
Tomás Limpinho	b509854496	decluttarr	2025-11-13 19:17:24 +00:00
Tomás Limpinho	c51a7d81be	decluttarr	2025-11-13 17:34:15 +00:00
Tomás Limpinho	b053fc8019	sonarr animes folder	2025-11-13 15:49:39 +00:00
Tomás Limpinho	0cb3784757	jellyseerr	2025-11-13 13:30:09 +00:00
fenix-gitea-admin	2115a8aa61	Update README.md	2025-11-13 13:04:50 +00:00
Tomás Limpinho	076cb81c9d	flaresolverr	2025-11-13 13:02:08 +00:00
Tomás Limpinho	bdafea0784	flaresolverr	2025-11-13 13:01:39 +00:00
Tomás Limpinho	3b5d59a589	Merge branch 'main' of https://gitea.fenix-dev.com/fenix-gitea-admin/iac-ansible-private	2025-11-12 20:14:49 +00:00
Tomás Limpinho	3c07b1b998	jellyfin	2025-11-12 20:14:43 +00:00
fenix-gitea-admin	dbbcc45525	Update roles/stolon/tasks/main.yml	2025-11-12 17:30:06 +00:00
Tomás Limpinho	d3981868cf	run cloudflare	2025-11-12 17:19:18 +00:00
Tomás Limpinho	6c78b7ce39	cloudflare	2025-11-12 17:18:40 +00:00
fenix-gitea-admin	ebd772665b	Update roles/stolon/tasks/main.yml	2025-11-12 16:05:29 +00:00
Tomás Limpinho	21d91805ad	sonarr added	2025-11-12 14:39:00 +00:00
Tomás Limpinho	c00cd6a94f	prowlar service	2025-11-12 12:55:35 +00:00
fenix-gitea-admin	a34e5a5e8b	Update roles/stolon/tasks/main.yml	2025-11-11 22:44:50 +00:00
Tomás Limpinho	71ec9945b1	prowlarr call	2025-11-11 21:57:18 +00:00
Tomás Limpinho	11dbff9b8a	added prowlarr	2025-11-11 21:47:46 +00:00
Tomás Limpinho	fecbc54b79	qbit service and documentation	2025-11-11 19:44:44 +00:00
Tomás Limpinho	d693a947f2	Merge branch 'main' of https://gitea.fenix-dev.com/fenix-gitea-admin/iac-ansible-private	2025-11-11 19:15:13 +00:00
Tomás Limpinho	8c882adffe	new qbittorrent image	2025-11-11 19:14:35 +00:00
fenix-gitea-admin	fff458af5a	Update roles/qbittorrent/files/qbittorrent-deployment.yaml	2025-11-11 17:43:12 +00:00
fenix-gitea-admin	de1925a486	Update roles/qbittorrent/tasks/main.yml	2025-11-11 17:34:05 +00:00
Tomás Limpinho	2fdee619ca	Merge branch 'main' of https://gitea.fenix-dev.com/fenix-gitea-admin/iac-ansible-private	2025-11-11 16:06:28 +00:00
Tomás Limpinho	47411136d0	role changing position	2025-11-11 16:06:20 +00:00
fenix-gitea-admin	08a0bb3761	Update playbook.yml	2025-11-11 15:59:58 +00:00
Tomás Limpinho	27b924b558	bittorrent	2025-11-11 15:48:09 +00:00
fenix-gitea-admin	d460624689	Update roles/stolon/tasks/main.yml	2025-11-10 23:30:03 +00:00
Tomás Limpinho	676cc04dd4	Merge branch 'main' of https://gitea.fenix-dev.com/fenix-gitea-admin/iac-ansible-private	2025-11-10 23:13:41 +00:00
Tomás Limpinho	e62baff9e7	stolon	2025-11-10 23:13:36 +00:00
fenix-gitea-admin	f532ff4507	Update roles/kubernetes/tasks/main.yml	2025-11-10 13:06:53 +00:00
Tomás Limpinho	dd420b851c	a	2025-11-09 19:51:10 +00:00
Tomás Limpinho	07698ad8a3	Merge branch 'main' of https://gitea.fenix-dev.com/fenix-gitea-admin/iac-ansible-private	2025-11-09 14:12:56 +00:00
Tomás Limpinho	b981b12635	fsgroup	2025-11-09 14:12:46 +00:00
fenix-gitea-admin	5441e7852e	Update roles/kube-master/tasks/main.yml	2025-11-07 16:17:41 +00:00
fenix-gitea-admin	5df04be859	Update roles/kube-master/tasks/main.yml	2025-11-07 15:23:44 +00:00
fenix-gitea-admin	baa06e11d3	Update roles/kube-master/tasks/main.yml	2025-11-07 14:53:52 +00:00
fenix-gitea-admin	3afed3f5bd	Update roles/kube-master/tasks/main.yml	2025-11-07 14:36:21 +00:00
fenix-gitea-admin	5d82af3236	Update roles/kube-master/tasks/main.yml	2025-11-07 12:03:49 +00:00
fenix-gitea-admin	946621ae59	Update roles/kube-master/tasks/main.yml	2025-11-07 11:58:32 +00:00
fenix-gitea-admin	d6d5a94fd1	Update roles/stolon/tasks/main.yml	2025-11-07 11:29:39 +00:00
fenix-gitea-admin	d47040565a	Update roles/stolon/tasks/main.yml	2025-11-06 21:49:25 +00:00
fenix-gitea-admin	a794dcd037	Update roles/stolon/tasks/main.yml	2025-11-06 21:38:24 +00:00
fenix-gitea-admin	fee0b08777	Update roles/stolon/tasks/main.yml	2025-11-06 21:33:23 +00:00
fenix-gitea-admin	d047d1da32	Update roles/stolon/tasks/main.yml	2025-11-06 21:31:08 +00:00
fenix-gitea-admin	0d93657131	Update roles/stolon/tasks/main.yml	2025-11-06 21:11:20 +00:00
fenix-gitea-admin	1b1d683d38	Update roles/kube-master/tasks/main.yml	2025-11-06 20:30:04 +00:00
fenix-gitea-admin	2bca89aa2d	Update roles/kube-master/tasks/main.yml	2025-11-06 20:19:52 +00:00
fenix-gitea-admin	e2450e477a	Update roles/kube-master/tasks/main.yml	2025-11-06 15:16:57 +00:00
fenix-gitea-admin	4be17277b9	Update roles/kube-master/tasks/patch_netconf.py	2025-11-06 14:41:55 +00:00
fenix-gitea-admin	f45445443f	Update roles/kube-master/tasks/main.yml	2025-11-06 14:12:25 +00:00
fenix-gitea-admin	9e50c6c110	Update roles/kube-master/tasks/main.yml	2025-11-05 15:07:47 +00:00
fenix-gitea-admin	1e20c82f27	Update roles/kube-master/tasks/main.yml	2025-11-05 14:03:16 +00:00
fenix-gitea-admin	adcbcca46c	Update roles/kube-master/tasks/main.yml	2025-11-03 20:53:27 +00:00
fenix-gitea-admin	91355e6724	Update roles/kube-master/tasks/main.yml	2025-11-03 20:12:47 +00:00
fenix-gitea-admin	3d2d3278f3	Update roles/stolon/files/stolon-proxy-service.yaml	2025-11-03 17:24:38 +00:00
fenix-gitea-admin	ab1769f830	Update roles/stolon/tasks/main.yml	2025-10-30 22:19:10 +00:00
Tomás Limpinho	91ded9edd2	export not	2025-10-30 21:09:30 +00:00
Tomás Limpinho	460a1e07a3	vars bw to stolon	2025-10-30 21:02:15 +00:00
Tomás Limpinho	5fab44c939	bw on stolon	2025-10-30 20:55:00 +00:00
fenix-gitea-admin	46994b5cc7	Update roles/vaultwarden/tasks/main.yml	2025-10-30 20:48:00 +00:00
fenix-gitea-admin	6dcc0640b6	Update roles/vaultwarden/tasks/main.yml	2025-10-30 20:29:28 +00:00
fenix-gitea-admin	20e6e518a4	Update .gitea/workflows/deploy-k8s.yml	2025-10-30 20:24:42 +00:00
fenix-gitea-admin	99f42d7223	Update roles/vaultwarden/tasks/main.yml	2025-10-30 20:24:02 +00:00
fenix-gitea-admin	d9d8a41574	Update roles/vaultwarden/tasks/main.yml	2025-10-30 20:19:04 +00:00
fenix-gitea-admin	2e3fe12b16	Update roles/vaultwarden/tasks/main.yml	2025-10-30 20:14:38 +00:00
fenix-gitea-admin	bd480ae5cf	Update roles/vaultwarden/tasks/main.yml	2025-10-30 20:00:53 +00:00
fenix-gitea-admin	564a9b028c	Update .gitea/workflows/deploy-k8s.yml	2025-10-30 20:00:09 +00:00
fenix-gitea-admin	ae076fd98a	Update roles/vaultwarden/tasks/main.yml	2025-10-30 19:51:56 +00:00
fenix-gitea-admin	5ce25f0267	Update .gitea/workflows/deploy-k8s.yml	2025-10-30 19:50:33 +00:00
fenix-gitea-admin	5bb538322b	Update .gitea/workflows/deploy-k8s.yml	2025-10-30 19:43:35 +00:00
fenix-gitea-admin	f34763271e	Update roles/vaultwarden/tasks/main.yml	2025-10-30 17:44:19 +00:00
fenix-gitea-admin	1456906d65	Update roles/vaultwarden/vars/main.yml	2025-10-30 17:38:53 +00:00
fenix-gitea-admin	87e269c4b0	Update roles/vaultwarden/tasks/main.yml	2025-10-30 17:37:50 +00:00
fenix-gitea-admin	b172e24a0e	Update roles/vaultwarden/vars/main.yml	2025-10-30 17:24:10 +00:00
fenix-gitea-admin	c850375dd4	Update roles/vaultwarden/tasks/main.yml	2025-10-30 17:22:46 +00:00
fenix-gitea-admin	9e7f5be196	Update roles/vaultwarden/tasks/main.yml	2025-10-30 17:04:56 +00:00
tomas.limpinho	e64863f887	nodejs 20	2025-10-30 13:47:09 +00:00
tomas.limpinho	c0a8b0b00a	bw via npm	2025-10-30 13:40:17 +00:00
tomas.limpinho	2b060b27f0	bw	2025-10-30 13:33:00 +00:00
fenix-gitea-admin	895dacd28d	Update roles/stolon/tasks/main.yml	2025-10-30 13:14:08 +00:00
fenix-gitea-admin	d5ed666c77	Update roles/stolon/tasks/main.yml	2025-10-30 12:46:22 +00:00
fenix-gitea-admin	6b864989f5	Update .gitea/workflows/deploy-k8s.yml	2025-10-30 12:30:26 +00:00
fenix-gitea-admin	b4b99298e7	Update .gitea/workflows/deploy-k8s.yml	2025-10-30 12:27:16 +00:00
fenix-gitea-admin	077ac6f39b	Update roles/stolon/tasks/main.yml	2025-10-30 09:49:29 +00:00
fenix-gitea-admin	35a95c6553	Update roles/stolon/files/stolon-nfs-csi.yaml	2025-10-30 09:44:52 +00:00
fenix-gitea-admin	aa55c290e1	Update roles/kube-master/tasks/main.yml	2025-10-30 09:29:51 +00:00
fenix-gitea-admin	e2c0cb640c	Update roles/stolon/tasks/main.yml	2025-10-30 09:25:02 +00:00
fenix-gitea-admin	6b0bbff17c	Update roles/stolon/files/stolon-nfs-csi.yaml	2025-10-30 09:12:52 +00:00
fenix-gitea-admin	7c2908bea6	Update roles/stolon/files/stolon-nfs-csi.yaml	2025-10-30 09:11:43 +00:00
fenix-gitea-admin	d79c611824	Update roles/kube-master/tasks/main.yml	2025-10-29 21:17:38 +00:00
fenix-gitea-admin	b4ee6d1b83	Update roles/kube-master/tasks/main.yml	2025-10-29 20:59:35 +00:00
fenix-gitea-admin	b774664389	Update roles/kube-master/tasks/main.yml	2025-10-29 20:51:25 +00:00
fenix-gitea-admin	fd63bc9f0e	Update roles/kube-master/tasks/main.yml	2025-10-29 20:30:38 +00:00
fenix-gitea-admin	e8e9fa2d01	Update roles/kube-master/tasks/main.yml	2025-10-29 20:17:32 +00:00
fenix-gitea-admin	928c6b2445	Update roles/kube-master/tasks/main.yml	2025-10-29 20:11:07 +00:00
fenix-gitea-admin	dc2f6b163c	Update roles/kube-master/tasks/main.yml	2025-10-29 20:01:11 +00:00
fenix-gitea-admin	2f2d3c621b	Update roles/kube-master/tasks/main.yml	2025-10-29 14:39:04 +00:00
tomas.limpinho	e057170f9c	namespace	2025-10-29 13:56:32 +00:00
fenix-gitea-admin	db1d69e566	Update roles/stolon/tasks/main.yml	2025-10-29 13:51:04 +00:00
tomas.limpinho	138e0e5b8d	a	2025-10-29 13:46:32 +00:00
fenix-gitea-admin	fe48f35c87	Update roles/stolon/tasks/main.yml	2025-10-29 13:36:27 +00:00
fenix-gitea-admin	e295c09152	Update roles/stolon/tasks/main.yml	2025-10-29 13:24:18 +00:00
fenix-gitea-admin	814abb92dd	[deploy-opentofu]	2025-10-29 13:18:01 +00:00
tomas.limpinho	983167e8bc	yaml format	2025-10-29 13:16:03 +00:00
fenix-gitea-admin	a142e3acda	Update roles/stolon/kubernetes-files/stolon-proxy-service.yaml	2025-10-29 13:14:20 +00:00
fenix-gitea-admin	2eaea3dbb3	Update roles/stolon/tasks/main.yml	2025-10-28 09:05:36 +00:00
tomas.limpinho	db87c453ce	teste com secrets falsos	2025-10-28 09:00:53 +00:00
tomas.limpinho	5d60378c35	Merge branch 'main' of https://gitea.fenix-dev.com/fenix-gitea-admin/iac-ansible-private	2025-10-25 16:05:15 +01:00
tomas.limpinho	892b80c438	vaultwarden test	2025-10-25 16:04:58 +01:00
fenix-gitea-admin	39dd5e0c72	Update playbook.yml	2025-10-25 14:56:49 +00:00