change directory structure

ansible/roles/radicale/files/radicale.conf

@@ -0,0 +1,24 @@
+[server]
+hosts = 0.0.0.0:5232, [::]:5232
+ssl = False
+
+[encoding]
+request = utf-8
+stock = utf-8
+
+[auth]
+realm = Radicale - Password Required
+type = htpasswd
+htpasswd_filename = /config/users
+htpasswd_encryption = md5
+
+[rights]
+type = owner_only
+
+[storage]
+type = multifilesystem
+filesystem_folder = /data
+
+[logging]
+
+[headers]

ansible/roles/radicale/files/users

@@ -0,0 +1 @@
+pim:$apr1$GUiTihkS$dDCkaUxFx/O86m6NCy/yQ.

ansible/roles/radicale/meta/main.yml

@@ -0,0 +1,4 @@
+dependencies:
+  - role: common
+  - role: docker
+  - role: traefik

ansible/roles/radicale/tasks/main.yml

@@ -0,0 +1,29 @@
+- name: Create Radicale app directory
+  file:
+    path: "{{ service_dir }}"
+    state: directory
+- name: Copy docker-compose.yml file
+  template:
+    src: "{{ role_path }}/templates/docker-compose.yml.j2"
+    dest: "{{ service_dir }}/docker-compose.yml"
+- name: Create Radicale config directory
+  file:
+    path: "{{ service_dir }}/config"
+    state: directory
+- name: Copy radicale.conf
+  copy:
+    src: "{{ role_path }}/files/radicale.conf"
+    dest: "{{ service_dir }}/config/config"
+- name: Copy users file
+  copy:
+    src: "{{ role_path }}/files/users"
+    dest: "{{ service_dir }}/config/users"
+- name: Create Radicale data directory
+  file:
+    path: "{{ data_dir }}"
+    state: directory
+- name: Start Docker Compose
+  docker_compose:
+    project_src: "{{ service_dir }}"
+    pull: true
+    remove_orphans: true

ansible/roles/radicale/templates/docker-compose.yml.j2

@@ -0,0 +1,39 @@
+version: '3.7'
+
+services:
+  radicale:
+    image: tomsquest/docker-radicale
+    container_name: radicale
+    init: true
+    read_only: true
+    security_opt:
+      - no-new-privileges:true
+    cap_drop:
+      - ALL
+    cap_add:
+      - SETUID
+      - SETGID
+      - CHOWN
+      - KILL
+    healthcheck:
+      test: curl -f http://127.0.0.1:5232 || exit 1
+      interval: 30s
+      retries: 3
+    restart: unless-stopped
+    volumes:
+      - {{ data_dir }}:/data
+      - {{ service_dir }}/config:/config:ro
+    networks:
+      - traefik
+    labels:
+      - traefik.enable=true
+      - traefik.http.routers.radicale.entrypoints=websecure
+      - traefik.http.routers.radicale.rule=Host(`{{ dav_domain }}`)
+      - traefik.http.routers.radicale.tls=true
+      - traefik.http.routers.radicale.tls.certresolver=letsencrypt
+      - traefik.http.routers.radicale.service=radicale
+      - traefik.http.services.radicale.loadbalancer.server.port=5232
+
+networks:
+  traefik:
+    external: true

ansible/roles/radicale/vars/main.yml

@@ -0,0 +1,5 @@
+service_name: radicale
+data_dir: "{{ base_data_dir }}/{{ service_name }}"
+service_dir: "{{ base_service_dir }}/{{ service_name }}"
+
+dav_domain: "dav.{{ domain_name_pim }}"