add: paperless oauthproxy layer

roles/paperless/tasks/main.yaml

@@ -32,3 +32,28 @@
   community.docker.docker_compose:
     project_src: /opt/paperless/
     pull: true
+
+- name: OAuth2Proxy directories
+  file:
+    path: "/opt/oauth2proxy/{{ item }}/"
+    state: directory
+    recurse: yes
+  with_items:
+   - paperless
+
+- name: include services ports
+  include_vars: services.yaml
+
+- name: Deploy OAuth2Proxy compose files
+  template:
+    src: oauth-standalone-docker-compose.yaml
+    dest: "/opt/oauth2proxy/{{ item }}/docker-compose.yaml"
+  with_items:
+    - paperless
+
+- name: Deploy OAuth2Proxy
+  community.docker.docker_compose:
+    project_src: /opt/oauth2proxy/{{ item }}/
+    pull: true
+  with_items:
+    - paperless

roles/paperless/templates/docker-compose.env

@@ -4,3 +4,5 @@ PAPERLESS_OCR_LANGUAGE=deu
 PAPERLESS_SECRET_KEY=HISTORY_PURGED_SECRET
 PAPERLESS_ADMIN_USER=sheppy
 PAPERLESS_ADMIN_PASSWORD=HISTORY_PURGED_SECRET
+PAPERLESS_ENABLE_HTTP_REMOTE_USER=TRUE
+PAPERLESS_HTTP_REMOTE_USER_HEADER_NAME=X-Forwarded-Preferred-Username

roles/paperless/templates/docker-compose.yml

@@ -57,7 +57,7 @@ services:
       - gotenberg
       - tika
     ports:
-      - "8000:8000"
+      - "9000:8000"
     healthcheck:
       test: ["CMD", "curl", "-fs", "-S", "--max-time", "2", "http://localhost:8000"]
       interval: 30s