Initial commit

2026-10-24 16:21:16 -04:00
commit b894fa148a
21 changed files with 719 additions and 0 deletions
@@ -0,0 +1,30 @@
+---
+# Runs on the controller using its existing kubeconfig; no SSH target required.
+# Preserve names to adopt existing resources without migrating persistent data.
+- name: Deploy eom.dev Owncast
+  hosts: localhost
+  connection: local
+  gather_facts: false
+  vars:
+    owncast_namespace: owncast
+    owncast_name: owncast
+    owncast_pvc_name: owncast
+    owncast_image: owncast/owncast:0.3.0
+    owncast_storage_size: 128Gi
+    owncast_resources:
+      requests:
+        cpu: "1.5"
+    owncast_service_type: LoadBalancer
+    owncast_external_traffic_policy: Local
+    owncast_ingress_enabled: true
+    owncast_hostname: owncast.eom.dev
+    owncast_ingress_class: nginx
+    owncast_tls_enabled: true
+    owncast_cluster_issuer: ca-issuer
+    owncast_tls_secret_name: owncast
+    # Formerly managed by the shared EOM onion task. Requires the Tor operator;
+    # override to false if that optional integration was never installed.
+    owncast_onion_enabled: true
+    owncast_onion_name: http
+  roles:
+    - ansible-role-owncast
@@ -0,0 +1,37 @@
+---
+# Supply friend_owncast_hostname and friend_owncast_cluster_issuer in inventory
+# or an external vars file. Do not guess a domain or reuse eom.dev's ingress.
+- name: Deploy an isolated Owncast instance for a friend
+  hosts: localhost
+  connection: local
+  gather_facts: false
+  vars:
+    owncast_namespace: owncast-friend
+    owncast_name: owncast-friend
+    owncast_pvc_name: owncast-friend
+    owncast_image: owncast/owncast:0.3.0
+    owncast_storage_size: 128Gi
+    owncast_resources:
+      requests:
+        cpu: "1.5"
+    owncast_service_type: LoadBalancer
+    owncast_external_traffic_policy: Local
+    owncast_ingress_enabled: true
+    owncast_hostname: "{{ friend_owncast_hostname | default('') }}"
+    owncast_ingress_class: nginx
+    owncast_tls_enabled: true
+    owncast_cluster_issuer: "{{ friend_owncast_cluster_issuer | default('') }}"
+    owncast_tls_secret_name: owncast-friend
+    owncast_onion_enabled: false
+  pre_tasks:
+    - name: Require friend-specific settings before changing the cluster
+      ansible.builtin.assert:
+        that:
+          - friend_owncast_hostname | default('') | length > 0
+          - friend_owncast_hostname | default('') != 'owncast.eom.dev'
+          - friend_owncast_cluster_issuer | default('') | length > 0
+          - owncast_namespace != 'owncast'
+          - owncast_hostname != 'owncast.eom.dev'
+        fail_msg: Supply friend_owncast_hostname and friend_owncast_cluster_issuer for a separate instance.
+  roles:
+    - ansible-role-owncast