mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-06 10:59:59 +00:00
kevinveenbirkenbachandClaude Opus 5.5
c76e1fb843
Set the akaunting lifecycle to eol: the updaters stop proposing bumps for it and the CI deploy matrix leaves it out, as for the other eol roles. The role keeps shipping for existing deployments. The root README overview drops it, as it does for every eol role. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
107 lines
3.1 KiB
YAML
107 lines
3.1 KiB
YAML
---
|
|
logout:
|
|
bond: 1
|
|
enabled: "{{ 'web-svc-logout' in group_names }}"
|
|
shared: "{{ 'web-svc-logout' in group_names }}"
|
|
dashboard:
|
|
bond: 1
|
|
enabled: "{{ 'web-app-dashboard' in group_names }}"
|
|
shared: "{{ 'web-app-dashboard' in group_names }}"
|
|
matomo:
|
|
bond: 1
|
|
enabled: "{{ 'web-app-matomo' in group_names }}"
|
|
shared: "{{ 'web-app-matomo' in group_names }}"
|
|
email:
|
|
bond: 1
|
|
enabled: "{{ MAIL_PROVIDER in group_names }}"
|
|
shared: "{{ MAIL_PROVIDER in group_names }}"
|
|
# nocheck: playwright-service-flag — DB engine, covered by role-local integration tests
|
|
mariadb:
|
|
bond: 1
|
|
enabled: true # nocheck: dynamic-flag
|
|
shared: "{{ 'svc-db-mariadb' in group_names }}"
|
|
sso:
|
|
bond: 1
|
|
enabled: "{{ 'web-app-keycloak' in group_names }}"
|
|
shared: "{{ 'web-app-keycloak' in group_names }}"
|
|
flavor: oauth2
|
|
oauth2:
|
|
origin:
|
|
host: akaunting
|
|
port: 80
|
|
allowed_groups:
|
|
- "{{ lookup('rbac_group_path', application_id='web-app-akaunting', role='administrator') }}"
|
|
# nocheck: dynamic-flag — LDAP is disabled for this role; the literal false is intentional, not group-gated.
|
|
ldap:
|
|
enabled: false
|
|
shared: false
|
|
akaunting:
|
|
healthcheck:
|
|
flavor: tcp
|
|
modes:
|
|
compose:
|
|
enabled: true
|
|
swarm:
|
|
enabled: true
|
|
backup:
|
|
no_stop_required: true
|
|
image: docker.io/akaunting/akaunting
|
|
version: 3.1.21
|
|
repository: https://github.com/akaunting/docker.git
|
|
ref: master
|
|
name: akaunting
|
|
min_storage: 527MB
|
|
company:
|
|
name: Akaunting on {{ DOMAIN_PRIMARY | upper }}
|
|
email: "{{ lookup('users', 'administrator').email }}"
|
|
setup_admin_email: "{{ lookup('users', 'administrator').email }}"
|
|
ports:
|
|
local:
|
|
http: 8025
|
|
sso: 16499
|
|
internal:
|
|
http: 80
|
|
run_after:
|
|
- web-app-matomo
|
|
- web-app-keycloak
|
|
- web-app-stalwart
|
|
- web-app-mailu
|
|
lifecycle: eol
|
|
cpus: "0.5"
|
|
mem_reservation: 256m
|
|
mem_limit: 1g
|
|
pids_limit: 512
|
|
# nocheck: dynamic-flag
|
|
# nocheck: playwright-service-flag — DB engine, covered by role-local integration tests
|
|
redis:
|
|
backup:
|
|
disabled: true
|
|
enabled: false
|
|
shared: "{{ 'svc-db-redis' in group_names }}"
|
|
seaweedfs:
|
|
bond: 1
|
|
enabled: "{{ 'web-app-seaweedfs' in group_names }}"
|
|
shared: "{{ 'web-app-seaweedfs' in group_names }}"
|
|
# nocheck: playwright-service-flag — css consumer, no Playwright surface (provider: web-svc-css)
|
|
css:
|
|
bond: 1
|
|
enabled: "{{ 'web-svc-css' in group_names }}"
|
|
shared: "{{ 'web-svc-css' in group_names }}"
|
|
prometheus:
|
|
bond: 1
|
|
enabled: "{{ 'web-app-prometheus' in group_names }}"
|
|
shared: "{{ 'web-app-prometheus' in group_names }}"
|
|
|
|
# nocheck: playwright-service-flag
|
|
# nocheck: variants-coverage — sso-variant-tor requires the onion on in every variant, so the false polarity has no variant left to live in
|
|
tor:
|
|
bond: 0.5
|
|
enabled: "{{ 'svc-net-tor' in group_names }}"
|
|
shared: true # nocheck: dynamic-flag
|
|
# nocheck: dynamic-flag
|
|
# nocheck: playwright-service-flag, dynamic-flag infrastructure backup consumer
|
|
container_backup: # nocheck: bond-baseline backup host joins outside the variant topology
|
|
bond: 1
|
|
enabled: "{{ 'svc-bkp-volume-2-local' in group_names }}"
|
|
shared: true
|