Add sb-mirror to role, ignore for backups

playbooks/prod_web.yml

@@ -33,6 +33,7 @@
         - web/srv.yml
         - web/synapse.yml
         - web/transmission.yml
+        - web/sb-mirror.yml
         - game/factorio.yml
         - game/minecraft-create-extra.yml
         - game/minecraft-vanilla.yml
@@ -53,6 +54,7 @@
           - /data/minecraft/stoneblock/backups
           - /data/minecraft/create-extra/backups
           - /data/minecraft/prominence/FeedTheBeast/world/.git
+          - /data/sb-mirror
           - /data/shared/media
           - /data/shared/downloads
           - /data/terraria/generic/backups
@@ -251,6 +253,7 @@
           - name: firefly-importer.desu.ltd
             directives:
               - "allow 24.182.160.0/20"
+              - "allow 97.91.128.0/17"
               - "deny all"
             proxy_pass: http://firefly-importer:8080
           - name: git.desu.ltd
@@ -258,7 +261,7 @@
           - name: lr.desu.ltd
             directives:
               - "allow 24.182.160.0/20"
-              - "allow 99.109.108.102/32"
+              - "allow 97.91.128.0/17"
               - "deny all"
             proxy_pass: http://libreddit:8080
           - name: matrix.desu.ltd
@@ -291,25 +294,25 @@
           - name: prowlarr.media.desu.ltd
             directives:
               - "allow 24.182.160.0/20"
-              - "allow 99.109.108.102/32"
+              - "allow 97.91.128.0/17"
               - "deny all"
             proxy_pass: http://prowlarr:9696
           - name: sonarr.media.desu.ltd
             directives:
               - "allow 24.182.160.0/20"
-              - "allow 99.109.108.102/32"
+              - "allow 97.91.128.0/17"
               - "deny all"
             proxy_pass: http://sonarr:8989
           - name: radarr.media.desu.ltd
             directives:
               - "allow 24.182.160.0/20"
-              - "allow 99.109.108.102/32"
+              - "allow 97.91.128.0/17"
               - "deny all"
             proxy_pass: http://radarr:7878
           - name: transmission.media.desu.ltd
             directives:
               - "allow 24.182.160.0/20"
-              - "allow 99.109.108.102/32"
+              - "allow 97.91.128.0/17"
               - "deny all"
             proxy_pass: http://transmission:9091
           # 9iron

playbooks/tasks/web/sb-mirror.yml

@@ -0,0 +1,19 @@
+# vim:ft=ansible:
+- name: docker deploy sb-mirror
+  docker_container:
+    name: sb-mirror
+    image: mchangrh/sb-mirror
+    # Enable me if you want the mirror public
+    # https://github.com/mchangrh/sb-mirror
+    # Should be port 873
+#    networks:
+#      - name: web
+#        aliases: [ "sb-mirror" ]
+    volumes:
+      - /data/sb-mirror/mirror:/mirror
+      - /data/sb-export/export:/export
+    env:
+      CSVLINT: "TRUE"
+      MIRROR: "TRUE"
+      VALIDATE: "TRUE"
+  tags: [ docker, sb-mirror ]