Initial commit

playbooks/deploy-friend.yml

@@ -0,0 +1,37 @@
+---
+# Supply friend_owncast_hostname and friend_owncast_cluster_issuer in inventory
+# or an external vars file. Do not guess a domain or reuse eom.dev's ingress.
+- name: Deploy an isolated Owncast instance for a friend
+  hosts: localhost
+  connection: local
+  gather_facts: false
+  vars:
+    owncast_namespace: owncast-friend
+    owncast_name: owncast-friend
+    owncast_pvc_name: owncast-friend
+    owncast_image: owncast/owncast:0.3.0
+    owncast_storage_size: 128Gi
+    owncast_resources:
+      requests:
+        cpu: "1.5"
+    owncast_service_type: LoadBalancer
+    owncast_external_traffic_policy: Local
+    owncast_ingress_enabled: true
+    owncast_hostname: "{{ friend_owncast_hostname | default('') }}"
+    owncast_ingress_class: nginx
+    owncast_tls_enabled: true
+    owncast_cluster_issuer: "{{ friend_owncast_cluster_issuer | default('') }}"
+    owncast_tls_secret_name: owncast-friend
+    owncast_onion_enabled: false
+  pre_tasks:
+    - name: Require friend-specific settings before changing the cluster
+      ansible.builtin.assert:
+        that:
+          - friend_owncast_hostname | default('') | length > 0
+          - friend_owncast_hostname | default('') != 'owncast.eom.dev'
+          - friend_owncast_cluster_issuer | default('') | length > 0
+          - owncast_namespace != 'owncast'
+          - owncast_hostname != 'owncast.eom.dev'
+        fail_msg: Supply friend_owncast_hostname and friend_owncast_cluster_issuer for a separate instance.
+  roles:
+    - ansible-role-owncast