feat: olive url & tube archivist skel

group_vars/all.yaml

@@ -342,8 +342,19 @@ keycloak_clients:
         client_id: olive-tin
         client_secret: "HISTORY_PURGED_SECRET"
         redirect_uris:
-            - "https://junglersfault.atlantishq.de/*"
+            - "https://olive.atlantishq.de/*"
         description: "Olive-Tin"
         keycloak_id: "00000000-0000-0000-0000-000000000021"
+        groups: "pki"
+        master_address: "https://olive.atlantishq.de"
+
+    tube-archivist:
+        party_secret: "EHISTORY_PURGED_SECRET"
+        client_id: tube-archivist
+        client_secret: "HISTORY_PURGED_SECRET"
+        redirect_uris:
+            - "https://youtube-proxy.atlantishq.de/*"
+        description: "Tube Archivist"
+        keycloak_id: "00000000-0000-0000-0000-000000000022"
         groups: ""
-        master_address: "https://junglersfault.atlantishq.de"
+        master_address: "https://youtube-proxy.atlantishq.de"

roles/docker-deployments/templates/tube-archivist.yaml

@@ -0,0 +1,65 @@
+ersion: '3.5'
+
+services:
+  tubearchivist:
+    container_name: tubearchivist
+    restart: unless-stopped
+    image: bbilly1/tubearchivist
+    ports:
+      - 8000:8000
+    volumes:
+      - media:/youtube
+      - cache:/cache
+    environment:
+      - ES_URL=http://archivist-es:9200     # needs protocol e.g. http and port
+      - REDIS_HOST=archivist-redis          # don't add protocol
+      - HOST_UID=1000
+      - HOST_GID=1000
+      - TA_HOST=tubearchivist.local         # set your host name
+      - TA_USERNAME=tubearchivist           # your initial TA credentials
+      - TA_PASSWORD=verysecret              # your initial TA credentials
+      - ELASTIC_PASSWORD=HISTORY_PURGED_SECRET         # set password for Elasticsearch
+      - TZ=Europe/Berlin                 # set your time zone
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:8000/health"]
+      interval: 2m
+      timeout: 10s
+      retries: 3
+      start_period: 30s
+    depends_on:
+      - archivist-es
+      - archivist-redis
+  archivist-redis:
+    image: redis/redis-stack-server
+    container_name: archivist-redis
+    restart: unless-stopped
+    expose:
+      - "6379"
+    volumes:
+      - redis:/data
+    depends_on:
+      - archivist-es
+  archivist-es:
+    image: bbilly1/tubearchivist-es         # only for amd64, or use official es 8.14.3
+    container_name: archivist-es
+    restart: unless-stopped
+    environment:
+      - "ELASTIC_PASSWORD=HISTORY_PURGED_SECRET"       # matching Elasticsearch password
+      - "ES_JAVA_OPTS=-Xms1g -Xmx1g"
+      - "xpack.security.enabled=true"
+      - "discovery.type=single-node"
+      - "path.repo=/usr/share/elasticsearch/data/snapshot"
+    ulimits:
+      memlock:
+        soft: -1
+        hard: -1
+    volumes:
+      - es:/usr/share/elasticsearch/data    # check for permission error when using bind mount, see readme
+    expose:
+      - "9200"
+
+volumes:
+  media:
+  cache:
+  redis:
+  es: