playbooks/apps/all.yaml

@@ -4,6 +4,7 @@
 - import_playbook: charasheet.yaml # noqa: name[play]
 - import_playbook: checkout.yaml # noqa: name[play]
 - import_playbook: code.yaml # noqa: name[play]
+- import_playbook: collabora.yaml # noqa: name[play]
 - import_playbook: display.yaml # noqa: name[play]
 - import_playbook: ghost.yaml # noqa: name[play]
 - import_playbook: git.yaml # noqa: name[play]

playbooks/apps/collabora.yaml

@@ -0,0 +1,19 @@
+---
+- name: Collabora
+  hosts: servers
+  gather_facts: false
+  tasks:
+    - name: Docker
+      ansible.builtin.include_role:
+        name: docker
+
+  vars:
+    docker_app_name: collabora
+    password: !vault |
+      $ANSIBLE_VAULT;1.1;AES256
+      64396634656334643030623536313236663438653730663266346530326233353836656339356631
+      3762666139313164663236323936626530623334356663620a336232383763333039643834636131
+      66396663393662316535346530656636343931383833313234653338623934346265363563366138
+      3838653135306563340a656661343434663230336566396335633165356663633030383065626233
+      34633162303534353231636537613262653865646231313464316164653239376166316266663963
+      6163643335386535366239363637613066306661343866393433

playbooks/apps/files/bin/dump-paperless

@@ -1,3 +0,0 @@
-#!/bin/bash
-set -euo pipefail
-/usr/bin/docker compose -f /mnt/data/paperless-ngx/docker-compose.yaml exec -T webserver document_exporter ../export --delete --no-archive --no-thumbnail --split-manifest --no-progress-bar

playbooks/apps/files/paperless-ngx/docker-compose.yaml

@@ -63,8 +63,6 @@ services:
       - ./export:/usr/src/paperless/export
       - ./consume:/usr/src/paperless/consume
     env_file: docker-compose.env
-    init: true
-    tty: true
     environment:
       PAPERLESS_REDIS: redis://broker:6379
       PAPERLESS_DBHOST: db
@@ -75,8 +73,6 @@ services:
   gotenberg:
     image: docker.io/gotenberg/gotenberg:8.7
     restart: unless-stopped
-    init: true
-    tty: true
 
     # The gotenberg chromium route is used to convert .eml files. We do not
     # want to allow external content like tracking pixels or even javascript.
@@ -93,8 +89,6 @@ services:
     restart: unless-stopped
     env_file: ftp.env
     image: garethflowers/ftp-server
-    init: true
-    tty: true
     ports:
       - '7020-7021:20-21/tcp'
 #      - '40000-40009:40000-40009/tcp' # Only needed for passive mode

playbooks/apps/templates/collabora/docker-compose.yaml.j2

@@ -0,0 +1,14 @@
+services:
+  code:
+    image: collabora/code
+    restart: always
+    environment:
+      server_name: 'cloud.augendre.info'
+      aliasgroup1: 'https://cloud.augendre.info:443'
+      DONT_GEN_SSL_CERT: '1'
+      username: admin
+      password: "{{password}}"
+      extra_params: '--o:ssl.enable=false --o:ssl.termination=true'
+    mem_limit: 2g
+    ports:
+      - "127.0.0.1:8007:9980"

playbooks/apps/templates/paperless-ngx/docker-compose.env.j2

@@ -46,5 +46,3 @@ PAPERLESS_USE_X_FORWARD_PORT=true
 
 PAPERLESS_CONSUMER_ENABLE_BARCODES=true
 PAPERLESS_CONSUMER_BARCODE_STRING=PATCHT
-PAPERLESS_TASK_WORKERS=2
-PAPERLESS_OCR_USER_ARGS={"invalidate_digital_signatures": true}

playbooks/system/cron.yaml

@@ -46,11 +46,6 @@
         name: Dump manuels
         minute: 45
         job: /mnt/data/bin/healthcheck dump-manuels /mnt/data/bin/dump-manuels
-    - name: Cron - Dump paperless
-      ansible.builtin.cron:
-        name: Dump paperless
-        minute: 47
-        job: /mnt/data/bin/healthcheck dump-paperless /mnt/data/bin/dump-paperless
     - name: Cron - Dump miniflux
       ansible.builtin.cron:
         name: Dump miniflux