From 81b6f45b085010d98e0f06a8c1f5389998b55439 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?c=C4=83t=C4=83lin?= <catalin@roboces.dev>
Date: Sat, 10 Feb 2024 19:40:04 +0100
Subject: [PATCH] feat: add ansible/nextcloud

---
 .gitignore                          |  3 ++-
 ansible/ansible.cfg                 |  3 +++
 ansible/inventory                   |  5 +++++
 ansible/nextcloud/role-promtail.yml | 26 ++++++++++++++++++++++++++
 ansible/nextcloud/sample.env        |  1 +
 ansible/requirements.yml            |  2 ++
 6 files changed, 39 insertions(+), 1 deletion(-)
 create mode 100644 ansible/ansible.cfg
 create mode 100644 ansible/inventory
 create mode 100644 ansible/nextcloud/role-promtail.yml
 create mode 100644 ansible/nextcloud/sample.env
 create mode 100644 ansible/requirements.yml

diff --git a/.gitignore b/.gitignore
index 7bb6416..a5bd9d8 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,2 +1,3 @@
 .idea/
-secrets.yaml
\ No newline at end of file
+secrets.yaml
+.env
\ No newline at end of file
diff --git a/ansible/ansible.cfg b/ansible/ansible.cfg
new file mode 100644
index 0000000..0626e63
--- /dev/null
+++ b/ansible/ansible.cfg
@@ -0,0 +1,3 @@
+[defaults]
+inventory = inventory
+host_key_checking = False
\ No newline at end of file
diff --git a/ansible/inventory b/ansible/inventory
new file mode 100644
index 0000000..e82750b
--- /dev/null
+++ b/ansible/inventory
@@ -0,0 +1,5 @@
+[nextclouds]
+cloud.fuku
+
+[nextclouds:vars]
+ansible_user=root
\ No newline at end of file
diff --git a/ansible/nextcloud/role-promtail.yml b/ansible/nextcloud/role-promtail.yml
new file mode 100644
index 0000000..77c506c
--- /dev/null
+++ b/ansible/nextcloud/role-promtail.yml
@@ -0,0 +1,26 @@
+- name: Install promtail
+  hosts:
+    - nextclouds
+
+  roles:
+    - role: patrickjahns.promtail
+      vars:
+        promtail_version: 2.9.4
+        promtail_config_clients:
+          - url: https://loki.fuku/loki/api/v1/push
+            basic_auth:
+              username: cloud
+              password: "{{ lookup('env', 'NEXTCLOUD_PROMTAIL_PASSWORD') | mandatory }}"
+            tls_config:
+              insecure_skip_verify: true
+        promtail_config_scrape_configs:
+          - job_name: system
+            static_configs:
+              - targets:
+                  - localhost
+                labels:
+                  nextcloud: cloud.fukurokuju.dev
+                  __path__: /mnt/share/data/cloud/data/{nextcloud,audit}.log
+        promtail_config_limits_config:
+          readline_rate_enabled: true
+          readline_rate_drop: true
\ No newline at end of file
diff --git a/ansible/nextcloud/sample.env b/ansible/nextcloud/sample.env
new file mode 100644
index 0000000..90a820a
--- /dev/null
+++ b/ansible/nextcloud/sample.env
@@ -0,0 +1 @@
+NEXTCLOUD_PROMTAIL_PASSWORD=superdupersecure
\ No newline at end of file
diff --git a/ansible/requirements.yml b/ansible/requirements.yml
new file mode 100644
index 0000000..a56717c
--- /dev/null
+++ b/ansible/requirements.yml
@@ -0,0 +1,2 @@
+- name: patrickjahns.promtail
+  version: 1.26.0
\ No newline at end of file