ansible-playbook.yml 1.3 KB

123456789101112131415161718192021222324252627282930313233343536373839404142
  1. - hosts: [some-host]
  2. become: true
  3. gather_facts: no
  4. tasks:
  5. - docker_network:
  6. name: tor
  7. - docker_container:
  8. name: tor_proxy
  9. # 1.0.0-tor0.4.1.6-amd64
  10. image: fphammerle/tor-proxy@sha256:ad55d07b1b21c35fa044dc3e1ea6c7d8494f39eb89491ddad35c245340f7cd4b
  11. networks:
  12. - name: tor
  13. purge_networks: yes
  14. restart_policy: unless-stopped
  15. memory: 128M
  16. cpu_quota: 5000
  17. cpu_period: 10000
  18. security_opts: [no-new-privileges]
  19. - docker_volume:
  20. name: onion_service_monitor_mail_queue
  21. - docker_container:
  22. name: onion_service_monitor
  23. # docker/1.0.0-amd64
  24. image: docker.io/fphammerle/onion-service-status-mail@sha256:98585eb7a6d9724240982560a8e7262a5c4019aa875de590bf608917d841377c
  25. env:
  26. TOR_HOST: tor_proxy
  27. TOR_PORT: 9050
  28. ONION_SERVICE_HOST: change-me.onion
  29. ONION_SERVICE_PORT: 80
  30. # TIMEOUT_SECONDS: 8
  31. # SLEEP_DURATION: 1m
  32. RECIPIENT_ADDRESS: change.me@domain.tld
  33. volumes:
  34. - onion_service_monitor_mail_queue:/var/spool/dma:rw
  35. networks:
  36. - name: tor
  37. purge_networks: yes
  38. restart_policy: unless-stopped
  39. memory: 64M
  40. cpu_quota: 2000
  41. cpu_period: 10000
  42. security_opts: [no-new-privileges]