add expand to two hypervisors

ansible/roles/cyberchef/docker-stack.yml.j2

@@ -11,6 +11,9 @@ services:
     networks:
       - traefik
     deploy:
+      placement:
+        constraints:
+          - "node.labels.public == true"
       labels:
         - traefik.enable=true
         - traefik.http.routers.cyberchef.entrypoints=websecure

ansible/roles/forgejo/docker-stack.yml.j2

@@ -28,7 +28,7 @@ services:
     deploy:
       placement:
         constraints:
-          - "node.labels.forgejo == true"
+          - node.role == manager
       labels:
         - traefik.port=443
         - traefik.enable=true

ansible/roles/inbucket/docker-stack.yml.j2

@@ -2,8 +2,12 @@
 version: "3.7"
 
 services:
-   kms-server:
-      image: inbucket/inbucket
-      ports:
-        - 2500:2500
-        - 9000:9000
+  kms-server:
+    image: inbucket/inbucket
+    ports:
+      - 2500:2500
+      - 9000:9000
+    deploy:
+      placement:
+        constraints:
+          - "node.labels.public == true"

ansible/roles/kms/docker-stack.yml.j2

@@ -6,3 +6,7 @@ services:
     image: teddysun/kms
     ports:
       - 1688:1688
+    deploy:
+      placement:
+        constraints:
+          - "node.labels.public == true"

ansible/roles/traefik/docker-stack.yml.j2

@@ -20,7 +20,8 @@ services:
       - 444:444
     deploy:
       placement:
-        constraints: [node.labels.traefik == true]
+        constraints:
+          - node.role == manager
       labels:
         - traefik.enable=true
         - traefik.http.routers.dashboard.entrypoints=localsecure

ansible/roles/traefik/tasks/main.yml

@@ -1,3 +1,8 @@
+- name: Create working directory
+  file:
+    path: /srv/traefik
+    state: directory
+
 - name: Create Traefik network
   docker_network:
     name: traefik