From 35c318797f9c028f9fa788d54b450ee50dd8f751 Mon Sep 17 00:00:00 2001
From: Justus Grunow <jg@justus.ws>
Date: Sun, 10 Nov 2024 17:40:10 -0500
Subject: [PATCH] Added external Traefik service for Gitea

---
 ansible/assets/docker-ext/compose.yml.j2 | 20 +-------------------
 ansible/assets/docker-ext/rules.yaml.j2  | 22 ++++++++++++++++++++++
 ansible/buildHomelab.yaml                | 16 +++++++++++++---
 3 files changed, 36 insertions(+), 22 deletions(-)
 create mode 100644 ansible/assets/docker-ext/rules.yaml.j2

diff --git a/ansible/assets/docker-ext/compose.yml.j2 b/ansible/assets/docker-ext/compose.yml.j2
index 670a4b6..b55d8bf 100644
--- a/ansible/assets/docker-ext/compose.yml.j2
+++ b/ansible/assets/docker-ext/compose.yml.j2
@@ -1,24 +1,5 @@
 version: "3.5"
 services:
-  #linkwarden:
-  #  env_file: .linkwarden_env
-  #  environment:
-  #    - DATABASE_URL=postgresql://linkwarden:cigt3nau!Xh!7HDjacW@postgres.injust.us:5432/linkwarden
-  #  restart: always
-  #  # build: . # uncomment this line to build from source
-  #  image: ghcr.io/linkwarden/linkwarden:latest # comment this line to build from source
-  #  ports:
-  #    - 3000:3000
-  #  volumes:
-  #    - ./data:/data/data
-  #  labels:
-  #    #- "traefik.http.routers.whoami.rule=Host(`linkwarden.injust.us`)"
-  #    - "traefik.http.routers.linkwarden.rule=Host(`linkwarden.coxgrunow.ca`)"
-  #    - "traefik.http.routers.linkwarden.entrypoints=websecure"
-  #    - "traefik.http.routers.linkwarden.tls.certresolver=myresolver"
-  #    - traefik.http.routers.linkwarden.tls=true
-  #      #depends_on:
-  #    #- reverse-proxy
   traefik:
     container_name: traefik
     # The official v2 Traefik docker image
@@ -30,6 +11,7 @@ services:
     command: 
       - "--api.insecure=true"
       - "--providers.docker=true"
+      - "--providers.file=true"
       - "--accesslog.filepath=/var/log/traefik/access.log"
       - "--providers.file.filename=/etc/traefik/rules.yaml"
       - "--entrypoints.web.address=:80"
diff --git a/ansible/assets/docker-ext/rules.yaml.j2 b/ansible/assets/docker-ext/rules.yaml.j2
new file mode 100644
index 0000000..aedda87
--- /dev/null
+++ b/ansible/assets/docker-ext/rules.yaml.j2
@@ -0,0 +1,22 @@
+http:
+  routers:
+    router-gitea:
+      entryPoints:
+        - websecure
+      rule: Host(`gitea.mycomputer.party`)
+      service: service-gitea
+      tls:
+        certResolver: myresolver
+
+  services:
+    service-gitea:
+      loadBalancer:
+        servers:
+          - url: "http://git:3000"
+
+          #certificatesResolvers:
+          #  myresolver:
+          #    email: jg@justus.ws
+          #    storage: /letsencrypt/acme_fileprovider.json
+          #    httpChallenge:
+          #      entryPoint: web
diff --git a/ansible/buildHomelab.yaml b/ansible/buildHomelab.yaml
index 0f26e57..409a4a3 100644
--- a/ansible/buildHomelab.yaml
+++ b/ansible/buildHomelab.yaml
@@ -59,9 +59,7 @@
 
 - name: Configure Docker hosts
   hosts: 
-    - docker-ext
-    - docker-int
-    - basementpi
+    - docker
   vars:
   tags:
     - docker
@@ -88,3 +86,15 @@
         src: assets/{{ inventory_hostname }}/wg0.conf.j2
         dest: /etc/wireguard/wg0.conf
         backup: true
+
+- name: Traefik config
+  hosts:
+    - docker-ext
+  tags:
+    - traefik
+  tasks:
+    - name: "Traefik rules"
+      ansible.builtin.template:
+        src: assets/{{ inventory_hostname }}/rules.yaml.j2
+        dest: /root/docker/traefik/rules.yaml
+        backup: true