migrate freshrss and radicale to nfs

ansible/roles/freshrss/docker-stack.yml.j2

@@ -5,18 +5,34 @@ networks:
   traefik:
     external: true
 
+volumes:
+  data:
+    driver_opts:
+      type: "nfs"
+      o: "addr=192.168.30.10,nolock,soft,rw"
+      device: ":/mnt/data/freshrss/data"
+  extensions:
+    driver_opts:
+      type: "nfs"
+      o: "addr=192.168.30.10,nolock,soft,rw"
+      device: ":/mnt/data/freshrss/extensions"
+
 services:
   freshrss:
     image: freshrss/freshrss:edge
     networks:
       - traefik
     volumes:
-      - type: bind
-        source: /mnt/data/freshrss/data
+      - type: volume
+        source: data
         target: /var/www/FreshRSS/data
-      - type: bind
-        source: /mnt/data/freshrss/extensions
+        volume:
+          nocopy: true
+      - type: volume
+        source: extensions
         target: /var/www/FreshRSS/extensions
+        volume:
+          nocopy: true
     environment:
       TZ: Europe/Amsterdam
       CRON_MIN: '2,32'
@@ -25,13 +41,10 @@ services:
       ADMIN_API_PASSWORD: {{ admin_password }}
       PUBLISHED_PORT: 443
     deploy:
-      placement:
-        constraints:
-          - "node.labels.freshrss == true"
       labels:
         - traefik.enable=true
         - traefik.http.routers.freshrss.entrypoints=websecure
-        - traefik.http.routers.freshrss.rule=Host(`rss.pim.kunis.nl`)
+        - traefik.http.routers.freshrss.rule=Host(`rss.kun.is`)
         - traefik.http.routers.freshrss.tls=true
         - traefik.http.routers.freshrss.tls.certresolver=letsencrypt
         - traefik.http.routers.freshrss.service=freshrss