✨: add koillection

roles/koillection/tasks/db.yml

@@ -0,0 +1,15 @@
+---
+
+- name: Create koillection db role
+  become_user: postgres
+  become: true
+  community.postgresql.postgresql_user:
+    name: "{{ koillection_pg_role }}"
+    password: "{{ koillection_pg_password }}"
+
+- name: Create koillection db
+  become_user: postgres
+  become: true
+  community.postgresql.postgresql_db:
+    name: "{{ koillection_pg_database }}"
+    owner: "{{ koillection_pg_role }}"

roles/koillection/tasks/main.yml

@@ -0,0 +1,55 @@
+---
+
+- name: Init db
+  ansible.builtin.include_tasks: db.yml
+
+- name: Create application directory
+  ansible.builtin.file:
+    state: directory
+    dest: "{{ koillection_home }}"
+    owner: root
+    group: www-data
+    mode: "0o750"
+
+- name: Install koillection application
+  ansible.builtin.unarchive:
+    remote_src: true
+    src: "{{ koillection_url }}"
+    dest: "{{ koillection_home }}"
+    owner: root
+    group: www-data
+    mode: "a-rwx,u+rwX,g+rX"
+    extra_opts: ['--strip-components=1']
+    exclude:
+      - .env
+      - config/jwt
+
+- name: Put config file
+  ansible.builtin.template:
+    src: "env.j2"
+    dest: "{{ koillection_home }}/.env"
+    owner: root
+    group: www-data
+    mode: "0o640"
+
+- name: Check writable dirs
+  ansible.builtin.file:
+    state: directory
+    dest: "{{ koillection_home }}/{{ item }}"
+    owner: root
+    group: www-data
+    mode: "g+w"
+    recurse: true
+  loop:
+    - "var"
+    - "config/jwt"
+    - "public/uploads"
+    - "public/tmp"
+
+- name: Run lexik jwt
+  become: true
+  become_user: www-data
+  ansible.builtin.command:
+    cmd: "php bin/console lexik:jwt:generate-keypair"
+    chdir: "{{ koillection_home }}"
+    creates: "{{ koillection_home }}/config/jwt/private.pem"

roles/koillection/templates/env.j2

@@ -0,0 +1,44 @@
+########################################################################################################
+#                                                WEB
+#
+# APP_DEBUG=1 displays detailed error message
+#
+# APP_SECRET is a random string used for security, you can use for example openssl rand -base64 21
+# APP_SECRET is automatically generated when using Docker
+#
+# PHP_TZ, see possible values here https://www.w3schools.com/php/php_ref_timezones.asp
+########################################################################################################
+
+APP_DEBUG=0
+APP_ENV=prod
+APP_SECRET={{ koillection_app_secret }}
+
+HTTPS_ENABLED=1
+UPLOAD_MAX_FILESIZE=20M
+PHP_MEMORY_LIMIT=512M
+PHP_TZ=Europe/Paris
+
+########################################################################################################
+#                                                API
+#
+#
+# JWT_PASSPHRASE is a random string used for security, you can use for example openssl rand -base64 21
+# JWT_PASSPHRASE is automatically generated when using Docker
+########################################################################################################
+
+CORS_ALLOW_ORIGIN='^https?://(localhost|127\.0\.0\.1)(:[0-9]+)?$'
+JWT_SECRET_KEY=%kernel.project_dir%/config/jwt/private.pem
+JWT_PUBLIC_KEY=%kernel.project_dir%/config/jwt/public.pem
+JWT_PASSPHRASE={{ koillection_jwt_passphrase }}
+
+########################################################################################################
+#                                                DATABASE
+########################################################################################################
+
+DB_DRIVER=pdo_pgsql
+DB_NAME={{ koillection_pg_database }}
+DB_HOST=localhost
+DB_PORT=5432
+DB_USER={{ koillection_pg_role }}
+DB_PASSWORD={{ koillection_pg_password }}
+DB_VERSION={{ postgres_pg_version }}

roles/koillection/vars/main.yml

@@ -0,0 +1,8 @@
+---
+
+koillection_version: "1.6.10"
+koillection_url: "https://giteu.be/koillection/koillection/releases/download/{{ koillection_version }}/koillection-{{ koillection_version }}.tar.gz"
+
+koillection_access_url: "{{ web_hostname | selectattr('type', 'defined') | selectattr('type', '==', 'koillection') | map(attribute='host') | first }}"
+
+koillection_home: "/srv/http/{{ koillection_access_url }}"

roles/nginx/templates/vhosts/koi.libertus.eu.conf.j2

@@ -0,0 +1,26 @@
+server {
+{% include './templates/header.conf.j2' %}
+
+	root /srv/http/koi.libertus.eu/public;
+
+	index index.html index.htm index.php;
+
+	# Media: images, icons, video, audio, fonts
+	location ~* \.(?:jpg|jpeg|gif|png|webp|ico|svg|webm|eot|ttf|otf|woff|woff2|js|css)$ {
+		expires 2w;
+		access_log off;
+	}
+
+	location / {
+		try_files $uri $uri/ /index.php?$query_string;
+	}
+
+	location ~ [^/]\.php(/|$) {
+		fastcgi_split_path_info ^(.+?\.php)(/.*)$;
+
+		try_files $uri $document_root$fastcgi_script_name =404;
+
+		include fastcgi_params;
+		fastcgi_pass unix:/run/php/php{{ php_version }}-fpm.sock;
+	}
+}

roles/postgres/vars/main.yml

@@ -1,10 +0,0 @@
----
-
-postgres_pg_versions:
-  Debian:
-    "buster": 11
-    "bullseye": 13
-    "bookworm": 15
-    "trixie": 17
-
-postgres_pg_version: "{{ postgres_pg_versions[ansible_os_family][ansible_distribution_release] }}"