ansible-playbook.yml 1.5 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445
  1. - hosts: [some-host]
  2. become: true
  3. gather_facts: no
  4. tasks:
  5. - docker_network:
  6. name: tor
  7. driver_options:
  8. com.docker.network.bridge.name: tor-proxy
  9. register: tor_proxy_network
  10. - docker_container:
  11. name: tor_proxy
  12. # 1.0.0-tor0.4.1.6-amd64
  13. image: fphammerle/tor-proxy@sha256:ad55d07b1b21c35fa044dc3e1ea6c7d8494f39eb89491ddad35c245340f7cd4b
  14. networks:
  15. - name: '{{ tor_proxy_network.ansible_facts.docker_network.Name }}'
  16. purge_networks: yes
  17. restart_policy: unless-stopped
  18. memory: 128M
  19. cpu_quota: 5000
  20. cpu_period: 10000
  21. security_opts: [no-new-privileges]
  22. - docker_volume:
  23. name: onion_service_monitor_mail_queue
  24. - docker_container:
  25. name: onion_service_monitor
  26. # docker/1.0.0-amd64
  27. image: docker.io/fphammerle/onion-service-status-mail@sha256:98585eb7a6d9724240982560a8e7262a5c4019aa875de590bf608917d841377c
  28. env:
  29. TOR_HOST: tor_proxy
  30. TOR_PORT: 9050
  31. ONION_SERVICE_HOST: change-me.onion
  32. ONION_SERVICE_PORT: 80
  33. # TIMEOUT_SECONDS: 8
  34. # SLEEP_DURATION: 1m
  35. RECIPIENT_ADDRESS: change.me@domain.tld
  36. volumes:
  37. - onion_service_monitor_mail_queue:/var/spool/dma:rw
  38. networks:
  39. - name: '{{ tor_proxy_network.ansible_facts.docker_network.Name }}'
  40. purge_networks: yes
  41. restart_policy: unless-stopped
  42. memory: 64M
  43. cpu_quota: 2000
  44. cpu_period: 10000
  45. security_opts: [no-new-privileges]