Add selfoss role

inventories/cave/group_vars/all/gateway.yml

@@ -3,6 +3,22 @@ public_address: 15.161.166.194
 
 gateway:
   proxied_services:
+    - domain_name: feeds.troubles.io
+      internal_ip: 192.168.122.11
+      internal_port: 8082
+      cert_email: blallo@troubles.ga
+      redirect_to_https: yes
+      password_protect: yes
+      password_file: /etc/nginx/.feeds.troubles.io-htpasswd
+      username: leo
+      password: !vault |
+          $ANSIBLE_VAULT;1.2;AES256;cave
+          65623634313061616164396262613433643132333838353662343136623932333935646435376261
+          3663376338353466653465356136613236623261313934630a346234653438366362306538393966
+          35653139643361633639343035633461623338626139653262323632633038313935613362363932
+          3930386463366238640a636631663265633962336134656462653536663539663666623164633165
+          38653838383766306430336233393662373765333533366438343665663561613535393561363034
+          3538343630313964306334346563393563663865656663396664
     - domain_name: sync.troubles.io
       internal_ip: 192.168.122.11
       internal_port: 8384

inventories/cave/group_vars/all/selfoss.yml

@@ -0,0 +1,7 @@
+---
+selfoss_create_user: False
+selfoss_www_user: www-data
+selfoss_www_group: www-data
+selfoss_port: "8082"
+selfoss_url: https://feeds.troubles.io
+selfoss_include_nginx: True

inventories/sea/group_vars/all/dns_server.yml

@@ -22,6 +22,7 @@ dns_server:
       - {name: cam, type: CNAME, value: cave}
       - {name: bt, type: CNAME, value: cave}
       - {name: sync, type: CNAME, value: cave}
+      - {name: feeds, type: CNAME, value: cave}
       - {name: blog, type: CNAME, value: troubles.noblogs.org.}
       - {name: chat, type: A, value: "176.9.70.210"}
       - {name: matrix.chat, type: A, value: "176.9.70.210"}

playbooks/playbook.cave.yml

@@ -20,12 +20,14 @@
         users: "{{ default_user }}"
   - hosts: srv.cave
     roles:
+      - role: ansible-selfoss
+        tag: web, srv
+      - role: ansible-torrent-server
+        tag: srv, torrent
       - role: ansible-zsh-chic
         tag: shell
       - role: geerlingguy.mysql
         tag: srv, aux
-      - role: ansible-torrent-server
-        tag: srv, torrent
       - role: ansible-sendmail
         tag: aux
       - role: ansible-syncthing

roles/ansible-selfoss

@@ -0,0 +1 @@
+Subproject commit 39cf1909df90257e6fd3bd2c702c96114a46df7e