manage lewis with nix

move docker swarm ansible to this repo
move thecloud ansible to this repo
support data disks in terraform

legacy/projects/docker_swarm/ansible/roles/ampache/docker-stack.yml.j2

@@ -0,0 +1,56 @@
+# vi: ft=yaml
+version: '3.7'
+
+networks:
+  traefik:
+    external: true
+
+volumes:
+  ampache_mysql:
+    driver_opts:
+      type: "nfs"
+      o: "addr=192.168.30.10,nolock,soft,rw"
+      device: ":/mnt/data/ampache/mysql"
+  ampache_config:
+    driver_opts:
+      type: "nfs"
+      o: "addr=192.168.30.10,nolock,soft,rw"
+      device: ":/mnt/data/ampache/config"
+  music:
+    driver_opts:
+      type: "nfs"
+      o: "addr=192.168.30.10,nolock,soft,rw"
+      device: ":/mnt/data/nextcloud/data/data/pim/files/Music"
+
+services:
+  ampache:
+    image: ampache/ampache:6
+    volumes:
+      - type: volume
+        source: ampache_mysql
+        target: /var/lib/mysql
+        volume:
+          nocopy: true
+      - type: volume
+        source: ampache_config
+        target: /var/www/config
+        volume:
+          nocopy: true
+      - type: volume
+        source: music
+        target: /media
+        read_only: true
+        volume:
+          nocopy: true
+    networks:
+      - traefik
+    deploy:
+      labels:
+        - traefik.enable=true
+        - traefik.http.routers.ampache.entrypoints=websecure
+        - traefik.http.routers.ampache.rule=Host(`music.kun.is`)
+        - traefik.http.routers.ampache.tls=true
+        - traefik.http.routers.ampache.tls.certresolver=letsencrypt
+        - traefik.http.routers.ampache.service=ampache
+        - traefik.http.services.ampache.loadbalancer.server.port=80
+        - traefik.docker.network=traefik

legacy/projects/docker_swarm/ansible/roles/ampache/tasks/main.yml

@@ -0,0 +1,5 @@
+- name: Deploy Docker stack
+  docker_stack:
+    name: ampache
+    compose:
+      - "{{ lookup('template', '{{ role_path }}/docker-stack.yml.j2') | from_yaml }}"