add homekeeper stack

infrastructure/roles/podman/tasks/main.yml

@@ -0,0 +1,59 @@
+---
+- name: Install podman
+  apt:
+    name:
+      - podman
+      - podman-compose   # for ad-hoc use; production uses quadlets
+    state: present
+    update_cache: true
+
+- name: Create homekeeper data directories
+  file:
+    path: "{{ item }}"
+    state: directory
+    mode: "0750"
+  loop:
+    - "{{ homekeeper_data_dir }}"
+    - "{{ homekeeper_data_dir }}/pg_data"
+    - "{{ gitea_data_dir }}"
+
+- name: Configure Gitea as additional registry
+  template:
+    src: registries.conf.j2
+    dest: /etc/containers/registries.conf.d/gitea.conf
+    mode: "0644"
+  notify: Restart podman services
+
+- name: Login to Gitea container registry
+  command: >
+    podman login {{ registry_host }}:{{ registry_port }}
+    -u {{ registry_user }} -p {{ registry_token }}
+  register: login_result
+  changed_when: "'Login Succeeded' in login_result.stdout"
+  # Run this after Gitea is up and registry_token is set
+
+- name: Enable podman-auto-update timer
+  systemd:
+    name: podman-auto-update.timer
+    enabled: true
+    state: started
+    daemon_reload: true
+
+- name: Override auto-update timer schedule
+  copy:
+    dest: /etc/systemd/system/podman-auto-update.timer.d/override.conf
+    content: |
+      [Timer]
+      OnCalendar=
+      OnCalendar={{ autoupdate_schedule }}
+      AccuracySec=1s
+    mode: "0644"
+  notify: Reload systemd
+
+handlers:
+  - name: Reload systemd
+    systemd:
+      daemon_reload: true
+
+  - name: Restart podman services
+    command: systemctl daemon-reload