ansible-playbook.yml 1.2 KB

1234567891011121314151617181920212223242526272829303132333435363738394041
  1. - hosts: [some-host]
  2. become: true
  3. tasks:
  4. - docker_network:
  5. name: tor
  6. - docker_container:
  7. name: tor_proxy
  8. # 1.0.0-tor0.4.1.6-amd64
  9. image: fphammerle/tor-proxy@sha256:ad55d07b1b21c35fa044dc3e1ea6c7d8494f39eb89491ddad35c245340f7cd4b
  10. networks:
  11. - name: tor
  12. purge_networks: yes
  13. restart_policy: unless-stopped
  14. memory: 128M
  15. cpu_quota: 5000
  16. cpu_period: 10000
  17. security_opts: [no-new-privileges]
  18. - docker_volume:
  19. name: onion_service_monitor_mail_queue
  20. - docker_container:
  21. name: onion_service_monitor
  22. # docker/1.0.0-amd64
  23. image: docker.io/fphammerle/onion-service-status-mail@sha256:98585eb7a6d9724240982560a8e7262a5c4019aa875de590bf608917d841377c
  24. env:
  25. TOR_HOST: tor_proxy
  26. TOR_PORT: 9050
  27. ONION_SERVICE_HOST: change-me.onion
  28. ONION_SERVICE_PORT: 80
  29. # TIMEOUT_SECONDS: 8
  30. # SLEEP_DURATION: 1m
  31. RECIPIENT_ADDRESS: change.me@domain.tld
  32. volumes:
  33. - onion_service_monitor_mail_queue:/var/spool/dma:rw
  34. networks:
  35. - name: tor
  36. purge_networks: yes
  37. restart_policy: unless-stopped
  38. memory: 64M
  39. cpu_quota: 2000
  40. cpu_period: 10000
  41. security_opts: [no-new-privileges]