Initial commit

This commit is contained in:
2026-06-17 12:46:08 -04:00
commit cf7f48ae05
8 changed files with 265 additions and 0 deletions
+38
View File
@@ -0,0 +1,38 @@
Role Name
=========
A brief description of the role goes here.
Requirements
------------
Any pre-requisites that may not be covered by Ansible itself or the role should be mentioned here. For instance, if the role uses the EC2 module, it may be a good idea to mention in this section that the boto package is required.
Role Variables
--------------
A description of the settable variables for this role should go here, including any variables that are in defaults/main.yml, vars/main.yml, and any variables that can/should be set via parameters to the role. Any variables that are read from other roles and/or the global scope (ie. hostvars, group vars, etc.) should be mentioned here as well.
Dependencies
------------
A list of other roles hosted on Galaxy should go here, plus any details in regards to parameters that may need to be set for other roles, or variables that are used from other roles.
Example Playbook
----------------
Including an example of how to use your role (for instance, with variables passed in as parameters) is always nice for users too:
- hosts: servers
roles:
- { role: username.rolename, x: 42 }
License
-------
BSD
Author Information
------------------
An optional section for the role authors to include contact information, or a website (HTML is not allowed).
+3
View File
@@ -0,0 +1,3 @@
#SPDX-License-Identifier: MIT-0
---
# defaults file for ansible-role-pixelfed
+3
View File
@@ -0,0 +1,3 @@
#SPDX-License-Identifier: MIT-0
---
# handlers file for ansible-role-pixelfed
+35
View File
@@ -0,0 +1,35 @@
#SPDX-License-Identifier: MIT-0
galaxy_info:
author: your name
description: your role description
company: your company (optional)
# If the issue tracker for your role is not on github, uncomment the
# next line and provide a value
# issue_tracker_url: http://example.com/issue/tracker
# Choose a valid license ID from https://spdx.org - some suggested licenses:
# - BSD-3-Clause (default)
# - MIT
# - GPL-2.0-or-later
# - GPL-3.0-only
# - Apache-2.0
# - CC-BY-4.0
license: license (GPL-2.0-or-later, MIT, etc)
min_ansible_version: 2.1
# If this a Container Enabled role, provide the minimum Ansible Container version.
# min_ansible_container_version:
galaxy_tags: []
# List tags for your role here, one per line. A tag is a keyword that describes
# and categorizes the role. Users find roles by searching for tags. Be sure to
# remove the '[]' above, if you add tags to this list.
#
# NOTE: A tag is limited to a single word comprised of alphanumeric characters.
# Maximum 20 tags per role.
dependencies: []
# List your role dependencies here, one per line. Be sure to remove the '[]' above,
# if you add dependencies to this list.
+174
View File
@@ -0,0 +1,174 @@
#SPDX-License-Identifier: MIT-0
---
# tasks file for ansible-role-pixelfed
- name: Add Small Hack repo
kubernetes.core.helm_repository:
name: small-hack-pixelfed
repo_url: https://small-hack.github.io/pixelfed-chart
register: repo
- name: Update Helm repos
command: helm repo update
when: repo.changed
- name: Deploy Pixelfed
kubernetes.core.helm:
name: pixelfed
chart_ref: small-hack-pixelfed/pixelfed
release_namespace: pixelfed
create_namespace: true
values:
ingress:
enabled: true
annotations: {}
hosts:
- host: pixelfed.eom.dev
paths:
- path: /
pathType: ImplementationSpecific
tls:
- secretName: pixelfed-tls
hosts:
- pixelfed.eom.dev
autoscaling:
enabled: false
minReplicas: 1
maxReplicas: 100
targetCPUUtilizationPercentage: 80
valkey:
enabled: true
fullnameOverride: "valkey"
global:
storageClass: "r720-nfs-client"
auth:
enabled: true
existingSecret: ""
existingSecretPasswordKey: "password"
postgresql:
enabled: true
fullnameOverride: "postgresql"
global:
storageClass: ""
volumePermissions:
enabled: false
phpConfigs: {}
# www.conf: |-
# [www]
# user = www-data
# group = www-data
# security.limit_extensions = .php .css .js .html
# pm = dynamic
# pm.max_children = 350
# pm.start_servers = 100
# pm.min_spare_servers = 100
# pm.max_spare_servers = 280
persistence:
enabled: true
storageClassName: ""
storage: 2Ti
accessModes:
- ReadWriteOnce
pixelfed:
db:
connection: pgsql
apply_new_migrations_automatically: false
filesystem:
# -- Many applications store files both locally and in the cloud.
# For this reason, you may specify a default “cloud” driver here.
# This driver will be bound as the Cloud disk implementation in the container.
cloud: "s3"
driver: "local"
covid:
enable_label: false
banned_usernames: ""
media_delete_local_after_cloud: true
timezone: "america/new_york"
app:
key: "{{ pixelfed_app_key }}"
name: "Pixelfed"
env: "production"
url: "https://pixelfed.eom.dev"
locale: "en"
domain: "pixelfed.eom.dev"
laravel:
log_channel: stack
log_level: "debug"
open_registration: true
enforce_email_verification: true
min_password_length: 16
account_deletion: true
oauth_enabled: true
stories_enabled: true
custom_emoji: false
custom_emoji_max_size: 2000000
media_types: "image/jpeg,image/png,image/gif"
enable_config_cache: true
image_quality: 100
max_account_size: 1000000
max_photo_size: 15000
max_avatar_size: 2000
max_caption_length: 1000
max_bio_length: 256
max_name_length: 32
max_album_length: 6
force_https_urls: true
exp_loops: false
image_driver: "gd"
instance:
description: "Pixelfed on eom.dev"
discover_public: true
public_hashtags: true
contact_form: true
contact_email: "eric@eom.dev"
contact_max_per_day: 1
profile_embeds: true
post_embeds: true
cur_reg: false
show_peers: false
reports:
email_enabled: false
email_addresses: []
email_autospam: false
landing:
show_directory: true
show_explore: true
pf:
hide_nsfw_on_public_feeds: false
local_avatar_to_cloud: true
admin_invites_enabled: true
max_user_blocks: 50
max_user_mutes: 50
max_domain_blocks: 50
enable_cloud: true
max_users: 1000
enforce_max_users: 2000
optimize_images: true
optimize_videos: true
max_collection_length: 100
activity_pub:
enabled: true
remote_follow: true
inbox: true
outbox: true
sharedinbox: true
logger_enabled: true
atom_feeds: "true"
nodeinfo: "true"
webfinger: "true"
mail:
driver: smtp
host: postfix.eom.dev
port: 587
username: "pixelfed"
password: "{{ pixelfed_admin_password }}"
encryption: "tls"
from_address: "pixelfed@eom.dev"
from_name: "Pixelfed"
s3:
url: "https://minio.eom.dev"
endpoint: "minio.eom.dev"
bucket: "pixelfed"
region: "us-east-1"
access_key_id: "{{ pixelfed_minio_access_key }}"
secret_access_key: "{{ pixelfed_minio_secret_key }}"
use_path_style_endpoint: true
+3
View File
@@ -0,0 +1,3 @@
#SPDX-License-Identifier: MIT-0
localhost
+6
View File
@@ -0,0 +1,6 @@
#SPDX-License-Identifier: MIT-0
---
- hosts: localhost
remote_user: root
roles:
- ansible-role-pixelfed
+3
View File
@@ -0,0 +1,3 @@
#SPDX-License-Identifier: MIT-0
---
# vars file for ansible-role-pixelfed