manage lewis with nix

move docker swarm ansible to this repo
move thecloud ansible to this repo
support data disks in terraform

legacy/projects/docker_swarm/ansible/roles/syncthing/docker-stack.yml.j2

@@ -0,0 +1,62 @@
+# vi: ft=yaml
+version: "3"
+
+networks:
+  traefik:
+    external: true
+
+configs:
+  config:
+    external: true
+    name: "{{ config.config_name }}"
+  private_key:
+    external: true
+    name: "{{ key.config_name }}"
+  certificate:
+    external: true
+    name: "{{ cert.config_name }}"
+
+volumes:
+  nextcloud_data:
+    driver_opts:
+      type: "nfs"
+      o: "addr=192.168.30.10,nolock,soft,rw"
+      device: ":/mnt/data/nextcloud/data"
+
+services:
+  syncthing:
+    image: lscr.io/linuxserver/syncthing:1.23.6
+    networks:
+      - traefik
+    deploy:
+      labels:
+        - traefik.enable=true
+        - traefik.docker.network=traefik
+
+        - traefik.http.routers.syncthing.entrypoints=localsecure
+        - traefik.http.routers.syncthing.rule=Host(`sync.kun.is`)
+        - traefik.http.routers.syncthing.service=syncthing
+        - traefik.http.routers.syncthing.tls=true
+        - traefik.http.routers.syncthing.tls.certresolver=letsencrypt
+        - traefik.http.services.syncthing.loadbalancer.server.port=8384
+    environment:
+      - PUID=33
+      - PGID=33
+      - TZ=Europe/Amsterdam
+    volumes:
+      - type: volume
+        source: nextcloud_data
+        target: /data
+        volume:
+          nocopy: true
+    configs:
+      - source: config
+        target: /config/config.xml
+      - source: private_key
+        target: /config/key.pem
+        uid: '33'
+        gid: '33'
+      - source: certificate
+        target: /config/cert.pem
+        uid: '33'
+        gid: '33'