add: money balancer

group_vars/all.yaml

@@ -260,3 +260,14 @@ keycloak_clients:
         master_address: "https://resume.atlantishq.de"
         skips:
             - "/logo/light.svg"
+
+    money-balancer:
+        party_secret: "YHISTORY_PURGED_SECRET"
+        client_id: z_money_balancer
+        client_secret: "HISTORY_PURGED_SECRET"
+        redirect_uris:
+            - "https://money-balancer.atlantishq.de/*"
+        description: "Money Balancer"
+        keycloak_id: "00000000-0000-0000-0000-000000000016"
+        groups:
+        master_address: "https://money-balancer.atlantishq.de"

roles/docker-deployments/tasks/main.yaml

@@ -55,6 +55,7 @@
     - atlantis-verify
     - soundlib-interface
     - python-flask-picture-factory
+    - money-balancer
 
 - name: Copy AtlantisHub config
   copy:
@@ -101,6 +102,7 @@
     - atlantis-verify
     - soundlib-interface
     - python-flask-picture-factory
+    - money-balancer
 
 - name: Copy compose templates
   template:
@@ -121,6 +123,7 @@
     - atlantis-verify
     - soundlib-interface
     - python-flask-picture-factory
+    - money-balancer
 
 - name: Log into private registry
   docker_login:
@@ -149,6 +152,7 @@
     - atlantis-verify
     - soundlib-interface
     - python-flask-picture-factory
+    - money-balancer
 
 - name: OAuth2Proxy directories
   file:
@@ -164,6 +168,7 @@
     - soundlib-interface
     - python-flask-picture-factory
     - reactive-resume
+    - money-balancer
 
 - name: include services ports
   include_vars: services.yaml
@@ -181,6 +186,7 @@
     - soundlib-interface
     - python-flask-picture-factory
     - reactive-resume
+    - money-balancer
 
 - name: Deploy OAuth2Proxy
   community.docker.docker_compose:
@@ -195,3 +201,4 @@
     - soundlib-interface
     - python-flask-picture-factory
     - reactive-resume
+    - money-balancer

roles/docker-deployments/templates/money-balancer.yaml

@@ -0,0 +1,15 @@
+version: "3"
+services:
+  money-balancer:
+    image: ghcr.io/dorianim/money-balancer
+    restart: unless-stopped
+    ports:
+      - {{ services[item].port + 1000 }}:8000
+    volumes:
+      - /data/money-balancer:/data
+    environment:
+      - MONEYBALANCER_JWT_SECRET=HISTORY_PURGED_SECRET
+      - MONEYBALANCER_AUTH_LOCAL_ENABLED=false
+      - MONEYBALANCER_AUTH_PROXY_ENABLED=true
+      - MONEYBALANCER_AUTH_PROXY_HEADERS_USERNAME=x-forwarded-preferred-username
+      - MONEYBALANCER_AUTH_PROXY_HEADERS_NICKNAME=x-forwarded-preferred-username

vars/services.yaml

@@ -25,3 +25,5 @@ services:
         port: 5015
     reactive-resume:
         port: 5016
+    money-balancer:
+        port: 5017