Disable some services

Move vikunja, ofellia and nginx-lb to microos

core-os-podman/nginx-lb.tf

@@ -0,0 +1,59 @@
+data "docker_registry_image" "nginx-lb" {
+  name = "jonasal/nginx-certbot:latest"
+}
+
+resource "docker_image" "nginx-lb" {
+  name = data.docker_registry_image.nginx-lb.name
+  pull_triggers = [data.docker_registry_image.nginx-lb.sha256_digest]
+}
+
+resource "docker_network" "nginx-lb" {
+  name = "nginx-lb"
+}
+
+resource "docker_container" "nginx-lb" {
+  image = docker_image.nginx-lb.image_id
+  name = "nginx-lb"
+
+  env = [
+    "CERTBOT_EMAIL=letsencrypt@xz1.nl"
+  ]
+
+  mounts {
+    target = "/etc/nginx/nginx.conf"
+    source = "/var/lib/containers/nginx-lb/nginx.conf"
+    type = "bind"
+  }
+
+  mounts {
+    target = "/etc/nginx/config"
+    source = "/var/lib/containers/nginx-lb/conf"
+    type = "bind"
+  }
+
+  mounts {
+    target = "/etc/nginx/user_conf.d"
+    source = "/var/lib/containers/nginx-lb/user_conf.d"
+    type = "bind"
+  }
+
+  mounts {
+    target = "/etc/letsencrypt"
+    source = "/var/lib/containers/nginx-lb/secrets"
+    type = "bind"
+  }
+
+  restart = "always"
+
+  networks_advanced {
+    name = docker_network.container-public.name
+    ipv4_address = "192.168.3.29"
+  }
+
+  lifecycle {
+    ignore_changes = [
+      ulimit,
+      log_opts
+    ]
+  }
+}

core-os-podman/ofelia.tf

@@ -0,0 +1,36 @@
+## Job scheduler for ofelia
+
+data "docker_registry_image" "ofelia" {
+  name = "mcuadros/ofelia:latest"
+}
+
+resource "docker_image" "ofelia" {
+  name = data.docker_registry_image.ofelia.name
+  pull_triggers = [data.docker_registry_image.ofelia.sha256_digest]
+}
+
+resource "docker_container" "ofelia" {
+  image = docker_image.ofelia.image_id
+  name = "ofelia"
+  restart = "always"
+
+  mounts {
+    target = "/var/run/docker.sock"
+    source = "/var/run/docker.sock"
+    type = "bind"
+    read_only = true
+  }
+
+  mounts {
+    target = "/etc/ofelia"
+    source = "/var/lib/containers/ofelia"
+    type = "bind"
+  }
+
+  lifecycle {
+    ignore_changes = [
+      ulimit,
+      log_opts
+    ]
+  }
+}

core-os-podman/vikunja.tf

@@ -0,0 +1,52 @@
+data "docker_registry_image" "vikunja" {
+  name = "vikunja/vikunja:latest"
+}
+
+resource "docker_image" "vikunja" {
+  name = data.docker_registry_image.vikunja.name
+  pull_triggers = [data.docker_registry_image.vikunja.sha256_digest]
+}
+
+resource "docker_container" "vikunja" {
+  image = docker_image.vikunja.image_id
+  name = "vikunja"
+  restart = "always"
+
+  log_driver = "local"
+
+  env = [
+    "VIKUNJA_SERVICE_PUBLICURL=https://vikunja.rescla.me",
+    "VIKUNJA_DATABASE_HOST=192.168.3.24",
+    "VIKUNJA_DATABASE_PASSWORD=4PU^B%Kz8R*8!cT8R",
+    "VIKUNJA_DATABASE_TYPE=mysql",
+    "VIKUNJA_DATABASE_USER=vikunja",
+    "VIKUNJA_DATABASE_DATABASE=vikunja",
+    "VIKUNJA_SERVICE_JWTSECRET=c781764b63b920bc11f533013c70367df421ae0396a0819e84a300ba02c46e9c",
+    "VIKUNJA_MAILER_ENABLED=true",
+    "VIKUNJA_MAILER_HOST=mail.smtp2go.com",
+    "VIKUNJA_MAILER_PORT=465",
+    "VIKUNJA_MAILER_AUTHTYPE=login",
+    "VIKUNJA_MAILER_USERNAME=vikunja@xz1.nl",
+    "VIKUNJA_MAILER_PASSWORD=TL4Dhrqco2Z9GGEH",
+    "VIKUNJA_MAILER_FROMEMAIL=vikunja@xz1.nl",
+    "VIKUNJA_MAILER_FORCESSL=true"
+  ]
+
+  networks_advanced {
+    name = docker_network.container-public.name
+    ipv4_address = "192.168.3.28"
+  }
+
+  mounts {
+    target = "/files"
+    source = "/var/lib/containers/vikunja"
+    type = "bind"
+  }
+
+  lifecycle {
+    ignore_changes = [
+      ulimit,
+      log_opts
+    ]
+  }
+}