ansible-playbook.yml 1.5 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344
  1. - hosts: [some-host]
  2. become: true
  3. gather_facts: no
  4. tasks:
  5. - docker_network:
  6. name: tor
  7. driver_options:
  8. com.docker.network.bridge.name: tor-proxy
  9. register: tor_proxy_network
  10. - docker_container:
  11. name: tor_proxy
  12. # 1.0.0-tor0.4.1.6-amd64
  13. image: fphammerle/tor-proxy@sha256:ad55d07b1b21c35fa044dc3e1ea6c7d8494f39eb89491ddad35c245340f7cd4b
  14. networks:
  15. - name: '{{ tor_proxy_network.ansible_facts.docker_network.Name }}'
  16. purge_networks: yes
  17. restart_policy: unless-stopped
  18. memory: 128M
  19. cpu_quota: 5000
  20. cpu_period: 10000
  21. security_opts: [no-new-privileges]
  22. register: tor_proxy_container
  23. - docker_container:
  24. name: onion_service_monitor
  25. # docker/1.0.0-amd64
  26. image: docker.io/fphammerle/onion-service-status-mail@sha256:98585eb7a6d9724240982560a8e7262a5c4019aa875de590bf608917d841377c
  27. env:
  28. TOR_HOST: "{{ tor_proxy_container.ansible_facts.docker_container.Name | replace('/', '') }}"
  29. TOR_PORT: 9050
  30. ONION_SERVICE_HOST: change-me.onion
  31. ONION_SERVICE_PORT: 80
  32. # TIMEOUT_SECONDS: 8
  33. # SLEEP_DURATION: 1m
  34. RECIPIENT_ADDRESS: change.me@domain.tld
  35. volumes:
  36. - onion_service_monitor_mail_queue:/var/spool/dma:rw
  37. networks:
  38. - name: '{{ tor_proxy_network.ansible_facts.docker_network.Name }}'
  39. purge_networks: yes
  40. restart_policy: unless-stopped
  41. memory: 64M
  42. cpu_quota: 2000
  43. cpu_period: 10000
  44. security_opts: [no-new-privileges]