From d2c29ff5717389c933be67f88f64a9a7228cd022 Mon Sep 17 00:00:00 2001
From: Sheppy <sheppy@atlantishq.de>
Date: Wed, 31 Jan 2024 01:04:35 +0000
Subject: [PATCH] add: money balancer

---
 group_vars/all.yaml                               | 11 +++++++++++
 roles/docker-deployments/tasks/main.yaml          |  7 +++++++
 .../templates/money-balancer.yaml                 | 15 +++++++++++++++
 vars/services.yaml                                |  2 ++
 4 files changed, 35 insertions(+)
 create mode 100644 roles/docker-deployments/templates/money-balancer.yaml

diff --git a/group_vars/all.yaml b/group_vars/all.yaml
index 7470e38..59a6b7b 100644
--- a/group_vars/all.yaml
+++ b/group_vars/all.yaml
@@ -260,3 +260,14 @@ keycloak_clients:
         master_address: "https://resume.atlantishq.de"
         skips:
             - "/logo/light.svg"
+
+    money-balancer:
+        party_secret: "YHISTORY_PURGED_SECRET"
+        client_id: z_money_balancer
+        client_secret: "HISTORY_PURGED_SECRET"
+        redirect_uris:
+            - "https://money-balancer.atlantishq.de/*"
+        description: "Money Balancer"
+        keycloak_id: "00000000-0000-0000-0000-000000000016"
+        groups:
+        master_address: "https://money-balancer.atlantishq.de"
diff --git a/roles/docker-deployments/tasks/main.yaml b/roles/docker-deployments/tasks/main.yaml
index 8a1e4e1..f7c354c 100644
--- a/roles/docker-deployments/tasks/main.yaml
+++ b/roles/docker-deployments/tasks/main.yaml
@@ -55,6 +55,7 @@
     - atlantis-verify
     - soundlib-interface
     - python-flask-picture-factory
+    - money-balancer
 
 - name: Copy AtlantisHub config
   copy:
@@ -101,6 +102,7 @@
     - atlantis-verify
     - soundlib-interface
     - python-flask-picture-factory
+    - money-balancer
 
 - name: Copy compose templates
   template:
@@ -121,6 +123,7 @@
     - atlantis-verify
     - soundlib-interface
     - python-flask-picture-factory
+    - money-balancer
 
 - name: Log into private registry
   docker_login:
@@ -149,6 +152,7 @@
     - atlantis-verify
     - soundlib-interface
     - python-flask-picture-factory
+    - money-balancer
 
 - name: OAuth2Proxy directories
   file:
@@ -164,6 +168,7 @@
     - soundlib-interface
     - python-flask-picture-factory
     - reactive-resume
+    - money-balancer
 
 - name: include services ports
   include_vars: services.yaml
@@ -181,6 +186,7 @@
     - soundlib-interface
     - python-flask-picture-factory
     - reactive-resume
+    - money-balancer
 
 - name: Deploy OAuth2Proxy
   community.docker.docker_compose:
@@ -195,3 +201,4 @@
     - soundlib-interface
     - python-flask-picture-factory
     - reactive-resume
+    - money-balancer
diff --git a/roles/docker-deployments/templates/money-balancer.yaml b/roles/docker-deployments/templates/money-balancer.yaml
new file mode 100644
index 0000000..d225cab
--- /dev/null
+++ b/roles/docker-deployments/templates/money-balancer.yaml
@@ -0,0 +1,15 @@
+version: "3"
+services:
+  money-balancer:
+    image: ghcr.io/dorianim/money-balancer
+    restart: unless-stopped
+    ports:
+      - {{ services[item].port + 1000 }}:8000
+    volumes:
+      - /data/money-balancer:/data
+    environment:
+      - MONEYBALANCER_JWT_SECRET=HISTORY_PURGED_SECRET
+      - MONEYBALANCER_AUTH_LOCAL_ENABLED=false
+      - MONEYBALANCER_AUTH_PROXY_ENABLED=true
+      - MONEYBALANCER_AUTH_PROXY_HEADERS_USERNAME=x-forwarded-preferred-username
+      - MONEYBALANCER_AUTH_PROXY_HEADERS_NICKNAME=x-forwarded-preferred-username
diff --git a/vars/services.yaml b/vars/services.yaml
index 8b4f6ad..17abd13 100644
--- a/vars/services.yaml
+++ b/vars/services.yaml
@@ -25,3 +25,5 @@ services:
         port: 5015
     reactive-resume:
         port: 5016
+    money-balancer:
+        port: 5017