Branch Comparison Report

+ #!/usr/bin/python+ """+ Ansible module for fetching Cloudflare DNS records.+ + This module provides functionality to fetch DNS records from Cloudflare+ for a specific zone and record name.+ + Example Usage:+     # Fetch DNS records for a domain+     - name: Fetch Cloudflare DNS records+       cloudflare_dns_records:+         auth_email: "user@example.com"+         auth_key: "api_key_here"+         zone_name: "example.com"+         record: "subdomain.example.com"+       register: dns_records+ +     # Fetch DNS records using API token (recommended)+     - name: Fetch Cloudflare DNS records with token+       cloudflare_dns_records:+         auth_token: "token_here"+         zone_name: "example.com"+         record: "subdomain.example.com"+       register: dns_records+ + Return Values:+     records:+         description: List of DNS records matching the query+         type: list+         returned: success+     zone_id:+         description: The Cloudflare zone ID for the specified zone+         type: str+         returned: success+     changed:+         description: Whether any changes were made (always False for this read-only module)+         type: bool+         returned: always+ """+ + from __future__ import annotations+ + from typing import TYPE_CHECKING+ + from ansible.module_utils.basic import AnsibleModule+ + if TYPE_CHECKING:+     from cloudflare import Cloudflare+ + DOCUMENTATION = """+ ---+ module: cloudflare_dns_records+ short_description: Fetch DNS records from Cloudflare+ description:+     - "This module fetches DNS records from Cloudflare for a specific zone and record name."+     - "It supports both API key and API token authentication methods."+ options:+     auth_email:+         description:+             - Email associated with Cloudflare account+             - Required when using auth_key authentication+         required: false+         type: str+     auth_key:+         description:+             - API key for Cloudflare+             - Required when using auth_key authentication+         required: false+         type: str+     auth_token:+         description:+             - API token for Cloudflare (recommended over auth_key)+             - Can be used instead of auth_email and auth_key+         required: false+         type: str+     zone_name:+         description:+             - Name of the Cloudflare zone (e.g., example.com)+         required: true+         type: str+     record:+         description:+             - DNS record name to fetch (e.g., subdomain.example.com)+         required: true+         type: str+ """+ + EXAMPLES = """+ # Fetch DNS records using API key+ - name: Fetch Cloudflare DNS records with API key+   cloudflare_dns_records:+     auth_email: "user@example.com"+     auth_key: "{{ cloudflare_api_key }}"+     zone_name: "example.com"+     record: "app.example.com"+   register: dns_records+ + # Fetch DNS records using API token (recommended)+ - name: Fetch Cloudflare DNS records with token+   cloudflare_dns_records:+     auth_token: "{{ cloudflare_api_token }}"+     zone_name: "example.com"+     record: "app.example.com"+   register: dns_records+ + # Access the records+ - name: Display records+   debug:+     var: dns_records.records+ """+ + + def get_zone_id(client: Cloudflare, zone_name: str, module: AnsibleModule) -> str:+     """+     Fetch the zone ID for a given zone name from Cloudflare.+ +     Args:+         client: Cloudflare client instance+         zone_name (str): Name of the zone to look up+         module: AnsibleModule instance for error reporting+ +     Returns:+         str: The zone ID+ +     Raises:+         Calls module.fail_json on error+     """+     try:+         zone = client.zones.list(name=zone_name)+         if len(zone.result) == 0:+             module.fail_json(msg=f"Specified zone '{zone_name}' was not found")+         return zone.result[0].id+     except Exception as e:+         module.fail_json(msg=f"Error fetching zone ID: {str(e)}")+ + + def fetch_dns_records(client: Cloudflare, zone_id: str, record_name: str, module: AnsibleModule) -> list[dict[str, object]]:+     """+     Fetch DNS records from Cloudflare.+ +     Args:+         client: Cloudflare client instance+         zone_id (str): The Cloudflare zone ID+         record_name (str): The DNS record name to fetch+         module: AnsibleModule instance for error reporting+ +     Returns:+         list: List of DNS records+ +     Raises:+         Calls module.fail_json on error+     """+     try:+         records_response = client.dns.records.list(zone_id=zone_id, name={"exact": record_name})+         if records_response is None:+             module.fail_json(msg="No response from Cloudflare API")+ +         records = records_response.to_dict()+         results = records.get("result", [])+         if not isinstance(results, list):+             module.fail_json(msg="Unexpected response format from Cloudflare API")+         return results+     except Exception as e:+         module.fail_json(msg=f"Error fetching DNS records: {str(e)}")+ + + def run_module() -> None:+     """+     Main module execution.+ +     This function handles the module's argument parsing, execution flow,+     and return value preparation.+     """+     module_args = dict(+         auth_email=dict(type='str', required=False, no_log=False),+         auth_key=dict(type='str', required=False, no_log=True),+         auth_token=dict(type='str', required=False, no_log=True),+         zone_name=dict(type='str', required=True),+         record=dict(type='str', required=True),+     )+ +     result: dict[str, bool | str | list[dict[str, object]]] = {+         'changed': False,+         'records': [],+         'zone_id': '',+     }+ +     module = AnsibleModule(+         argument_spec=module_args,+         supports_check_mode=True,+         required_one_of=[+             ['auth_token', 'auth_key']+         ],+         required_together=[+             ['auth_email', 'auth_key']+         ],+     )+ +     try:+         # Import cloudflare here to provide better error message if not installed+         try:+             from cloudflare import Cloudflare+         except ImportError:+             module.fail_json(msg="The 'cloudflare' Python library is required. Install it with: pip install cloudflare")+ +         auth_email = module.params.get('auth_email')+         auth_key = module.params.get('auth_key')+         auth_token = module.params.get('auth_token')+         zone_name = module.params['zone_name']+         record = module.params['record']+ +         # Initialize Cloudflare client+         if auth_token:+             cf = Cloudflare(api_token=auth_token)+         else:+             cf = Cloudflare(api_email=auth_email, api_key=auth_key)+ +         # Fetch zone ID+         zone_id = get_zone_id(cf, zone_name, module)+         result['zone_id'] = zone_id+ +         # Fetch DNS records+         records = fetch_dns_records(cf, zone_id, record, module)+         result['records'] = records+ +         module.exit_json(**result)+ +     except Exception as e:+         module.fail_json(msg=f"Unexpected error: {str(e)}")+ + + def main() -> None:+     """+     Module entry point.+     """+     run_module()+ + + if __name__ == '__main__':+     main()

+ #!/usr/bin/python+ """+ Ansible module for retrieving Cloudflare SSL/TLS encryption mode.+ + This module provides functionality to get the SSL/TLS encryption mode+ for a specific Cloudflare zone. It can automatically parse domain names+ to extract the zone using the tld library.+ + Example Usage:+     # Get SSL/TLS mode for a zone (automatically parses domain)+     - name: Get Cloudflare SSL mode+       cloudflare_ssl:+         auth_email: "user@example.com"+         auth_key: "api_key_here"+         domain: "subdomain.example.com"+       register: ssl_mode+ +     # Get SSL/TLS mode with explicit zone name+     - name: Get Cloudflare SSL mode with zone+       cloudflare_ssl:+         auth_token: "token_here"+         zone_name: "example.com"+       register: ssl_mode+ + Return Values:+     ssl_mode:+         description: The SSL/TLS encryption mode for the zone+         type: str+         returned: success+         sample: 'full'+     zone_id:+         description: The Cloudflare zone ID for the specified zone+         type: str+         returned: success+     zone_name:+         description: The zone name that was queried+         type: str+         returned: success+     changed:+         description: Whether any changes were made (always False for this read-only module)+         type: bool+         returned: always+ """+ + from __future__ import annotations+ + from typing import TYPE_CHECKING+ + from ansible.module_utils.basic import AnsibleModule+ + if TYPE_CHECKING:+     from cloudflare import Cloudflare+ + DOCUMENTATION = """+ ---+ module: cloudflare_ssl+ short_description: Retrieve Cloudflare SSL/TLS encryption mode for a zone+ description:+     - "This module retrieves the SSL/TLS encryption mode for a specific Cloudflare zone."+     - "It supports both API key and API token authentication methods."+     - "Can automatically extract the zone from a domain using the tld library."+ options:+     auth_email:+         description:+             - Email associated with Cloudflare account+             - Required when using auth_key authentication+         required: false+         type: str+     auth_key:+         description:+             - API key for Cloudflare+             - Required when using auth_key authentication+         required: false+         type: str+     auth_token:+         description:+             - API token for Cloudflare (recommended over auth_key)+             - Can be used instead of auth_email and auth_key+         required: false+         type: str+     domain:+         description:+             - Domain name to parse and extract zone from (e.g., subdomain.example.com)+             - Mutually exclusive with zone_name+         required: false+         type: str+     zone_name:+         description:+             - Name of the Cloudflare zone (e.g., example.com)+             - Mutually exclusive with domain+         required: false+         type: str+ """+ + EXAMPLES = """+ # Get SSL/TLS mode using domain (automatically extracts zone)+ - name: Get Cloudflare SSL mode with domain+   cloudflare_ssl:+     auth_email: "user@example.com"+     auth_key: "{{ cloudflare_api_key }}"+     domain: "{{ user.domain }}"+   register: ssl_mode+ + # Get SSL/TLS mode using explicit zone name+ - name: Get Cloudflare SSL mode with zone+   cloudflare_ssl:+     auth_token: "{{ cloudflare_api_token }}"+     zone_name: "example.com"+   register: ssl_mode+ + # Display the SSL mode+ - name: Display SSL mode+   debug:+     msg: "SSL/TLS mode: {{ ssl_mode.ssl_mode }}"+ """+ + + def get_zone_id(client: Cloudflare, zone_name: str, module: AnsibleModule) -> str:+     """+     Fetch the zone ID for a given zone name from Cloudflare.+ +     Args:+         client: Cloudflare client instance+         zone_name (str): Name of the zone to look up+         module: AnsibleModule instance for error reporting+ +     Returns:+         str: The zone ID+ +     Raises:+         Calls module.fail_json on error+     """+     try:+         zone = client.zones.list(name=zone_name)+         if len(zone.result) == 0:+             module.fail_json(msg=f"Specified zone '{zone_name}' was not found")+         return zone.result[0].id+     except Exception as e:+         module.fail_json(msg=f"Error fetching zone ID: {str(e)}")+         raise # Unreachable - Pylance silencer+ + + def get_ssl_tls_mode(client: Cloudflare, zone_id: str, module: AnsibleModule) -> str:+     """+     Get the SSL/TLS settings for a zone.+ +     Args:+         client: Cloudflare client instance+         zone_id (str): The Cloudflare zone ID+         module: AnsibleModule instance for error reporting+ +     Returns:+         str: The SSL/TLS mode value+ +     Raises:+         Calls module.fail_json on error+     """+     try:+         ssl_response = client.zones.settings.get(setting_id='ssl', zone_id=zone_id)+         if ssl_response is None:+             module.fail_json(msg="No response from Cloudflare API")+ +         ssl_settings = ssl_response.to_dict()+         ssl_mode = ssl_settings.get('value')+ +         if ssl_mode is None:+             module.fail_json(msg="SSL/TLS mode value not found in API response")+ +         return str(ssl_mode)+     except Exception as e:+         module.fail_json(msg=f"Error fetching SSL/TLS settings: {str(e)}")+         raise # Unreachable - Pylance silencer+ + + def run_module() -> None:+     """+     Main module execution.+ +     This function handles the module's argument parsing, execution flow,+     and return value preparation.+     """+     module_args = dict(+         auth_email=dict(type='str', required=False, no_log=False),+         auth_key=dict(type='str', required=False, no_log=True),+         auth_token=dict(type='str', required=False, no_log=True),+         domain=dict(type='str', required=False),+         zone_name=dict(type='str', required=False),+     )+ +     result = dict(+         changed=False,+         ssl_mode='',+         zone_id='',+         zone_name='',+     )+ +     module = AnsibleModule(+         argument_spec=module_args,+         supports_check_mode=True,+         required_one_of=[+             ['auth_token', 'auth_key'],+             ['domain', 'zone_name']+         ],+         required_together=[+             ['auth_email', 'auth_key']+         ],+         mutually_exclusive=[+             ['domain', 'zone_name']+         ],+     )+ +     try:+         # Import cloudflare here to provide better error message if not installed+         try:+             from cloudflare import Cloudflare+         except ImportError:+             module.fail_json(msg="The 'cloudflare' Python library is required. Install it with: pip install cloudflare")+ +         auth_email = module.params.get('auth_email')+         auth_key = module.params.get('auth_key')+         auth_token = module.params.get('auth_token')+         domain = module.params.get('domain')+         zone_name = module.params.get('zone_name')+ +         # Parse domain to get zone name if domain is provided+         if domain:+             try:+                 from tld import get_tld+                 res = get_tld(f"http://{domain}", as_object=True)+                 zone_name = getattr(res, 'fld', None)+                 if not zone_name:+                     module.fail_json(msg=f"Failed to extract zone name from domain '{domain}'")+             except ImportError:+                 module.fail_json(msg="The 'tld' Python library is required for domain parsing. Install it with: pip install tld")+             except Exception as e:+                 module.fail_json(msg=f"Failed to parse domain '{domain}': {str(e)}")+ +         # Ensure zone_name is set+         if not zone_name:+             module.fail_json(msg="Zone name could not be determined from provided parameters")+ +         # Initialize Cloudflare client+         if auth_token:+             cf = Cloudflare(api_token=auth_token)+         else:+             cf = Cloudflare(api_email=auth_email, api_key=auth_key)+ +         # Fetch zone ID+         zone_id = get_zone_id(cf, zone_name, module)+         result['zone_id'] = zone_id+         result['zone_name'] = zone_name+ +         # Fetch SSL/TLS mode+         ssl_mode = get_ssl_tls_mode(cf, zone_id, module)+         result['ssl_mode'] = ssl_mode+ +         module.exit_json(**result)+ +     except Exception as e:+         module.fail_json(msg=f"Unexpected error: {str(e)}")+ + + def main() -> None:+     """+     Module entry point.+     """+     run_module()+ + + if __name__ == '__main__':+     main()

+ #!/usr/bin/python+ # -*- coding: utf-8 -*-+ + DOCUMENTATION = '''+ ---+ module: ip_timezone_lookup+ short_description: Fetch timezone based on IP address from multiple sources+ description:+     - Fetches timezone information from multiple IP geolocation services+     - Returns a consensus timezone when multiple sources agree+     - Provides individual results from each source for verification+     - Returns only valid IANA timezone identifiers suitable for timedatectl+ version_added: "2.9"+ author: "Custom Module"+ options:+     ip_address:+         description:+             - IP address to lookup timezone for+         required: true+         type: str+     timeout:+         description:+             - Timeout in seconds for each API request+         required: false+         default: 5+         type: int+     min_consensus:+         description:+             - Minimum number of sources that must agree for consensus+         required: false+         default: 2+         type: int+ '''+ + EXAMPLES = '''+ - name: Get timezone for specific IP+   ip_timezone_lookup:+     ip_address: "8.8.8.8"+   register: tz_result+ + - name: Set system timezone based on IP location+   command: timedatectl set-timezone {{ tz_result.timezone }}+   when: tz_result.confidence == 'high'+ + - name: Display consensus timezone+   debug:+     msg: "Consensus timezone: {{ tz_result.timezone }}"+ + - name: Display all source results+   debug:+     msg: "{{ tz_result.sources }}"+ '''+ + RETURN = '''+ timezone:+     description: The consensus timezone in IANA format (suitable for timedatectl)+     type: str+     returned: always+     sample: "Europe/Helsinki"+ confidence:+     description: Confidence level of the result (high/medium/low)+     type: str+     returned: always+     sample: "high"+ consensus_count:+     description: Number of sources agreeing on the timezone+     type: int+     returned: always+     sample: 8+ total_sources:+     description: Total number of sources queried+     type: int+     returned: always+     sample: 8+ successful_lookups:+     description: Number of successful API calls returning valid timezones+     type: int+     returned: always+     sample: 8+ sources:+     description: Dictionary containing results from each source+     type: dict+     returned: always+     sample: {+         "ipapi": {"timezone": "Europe/Helsinki", "success": true},+         "ipinfo": {"timezone": "Europe/Helsinki", "success": true}+     }+ ip_used:+     description: The IP address that was looked up+     type: str+     returned: always+     sample: "8.8.8.8"+ '''+ + from ansible.module_utils.basic import AnsibleModule+ import json+ from collections import Counter+ import asyncio+ import aiohttp+ + class IPTimezoneLookup:+     def __init__(self, module):+         self.module = module+         self.ip_address = module.params['ip_address']+         self.timeout = module.params['timeout']+         self.min_consensus = module.params['min_consensus']+         self.results = {}+         +     async def make_request(self, session, url, headers=None):+         """Make async HTTP request with error handling"""+         try:+             async with session.get(url, headers=headers, timeout=aiohttp.ClientTimeout(total=self.timeout)) as response:+                 if response.status == 200:+                     return await response.json()+                 return None+         except (aiohttp.ClientError, asyncio.TimeoutError, json.JSONDecodeError) as e:+             return None+     +     async def fetch_ipapi(self, session):+         """Fetch from ip-api.com (free, reliable)"""+         url = f"http://ip-api.com/json/{self.ip_address}"+         data = await self.make_request(session, url)+         if data and data.get('status') == 'success':+             return data.get('timezone')+         return None+ +     async def fetch_ipinfo(self, session):+         """Fetch from ipinfo.io (free tier, reliable)"""+         url = f"https://ipinfo.io/{self.ip_address}/json"+         data = await self.make_request(session, url)+         if data:+             return data.get('timezone')+         return None+ +     async def fetch_ipapi_co(self, session):+         """Fetch from ipapi.co (reliable)"""+         url = f"https://ipapi.co/{self.ip_address}/json/"+         data = await self.make_request(session, url)+         if data and not data.get('error'):+             return data.get('timezone')+         return None+ +     async def fetch_freegeoip(self, session):+         """Fetch from freegeoip.app (reliable)"""+         url = f"https://freegeoip.app/json/{self.ip_address}"+         data = await self.make_request(session, url)+         if data:+             return data.get('time_zone')+         return None+ +     async def fetch_ipwhois(self, session):+         """Fetch from ipwhois.app (reliable)"""+         url = f"https://ipwhois.app/json/{self.ip_address}"+         data = await self.make_request(session, url)+         if data and data.get('success') != False:+             return data.get('timezone')+         return None+ +     async def fetch_geojs(self, session):+         """Fetch from geojs.io (reliable)"""+         url = f"https://get.geojs.io/v1/ip/geo/{self.ip_address}.json"+         data = await self.make_request(session, url)+         if data:+             return data.get('timezone')+         return None+ +     async def fetch_ipregistry(self, session):+         """Fetch from ipregistry.co (reliable with tryout key)"""+         url = f"https://api.ipregistry.co/{self.ip_address}?key=tryout"+         data = await self.make_request(session, url)+         if data:+             tz_info = data.get('time_zone')+             if tz_info:+                 return tz_info.get('id')+         return None+ +     async def fetch_ipapi_is(self, session):+         """Fetch from ipapi.is (reliable)"""+         url = f"https://api.ipapi.is/?q={self.ip_address}"+         data = await self.make_request(session, url)+         if data:+             location = data.get('location')+             if location:+                 return location.get('timezone')+         return None+     +     async def _fetch_from_source(self, session, source_name, lookup_func):+         """Fetch timezone from a single source with error handling"""+         try:+             timezone = await lookup_func(session)+             if timezone and '/' in timezone:  # Valid IANA timezone+                 return source_name, {+                     'timezone': timezone,+                     'success': True+                 }+             else:+                 return source_name, {+                     'timezone': None,+                     'success': False,+                     'error': 'No valid IANA timezone returned'+                 }+         except Exception as e:+             return source_name, {+                 'timezone': None,+                 'success': False,+                 'error': str(e)+             }+ +     async def _run_lookups_async(self):+         """Run all timezone lookups concurrently"""+         # Only include sources that returned valid results in testing+         lookup_methods = {+             'ipapi': self.fetch_ipapi,+             'ipinfo': self.fetch_ipinfo,+             'ipapi_co': self.fetch_ipapi_co,+             'freegeoip': self.fetch_freegeoip,+             'ipwhois': self.fetch_ipwhois,+             'geojs': self.fetch_geojs,+             'ipregistry': self.fetch_ipregistry,+             'ipapi_is': self.fetch_ipapi_is,+         }+ +         # Create aiohttp session and run all lookups concurrently+         async with aiohttp.ClientSession() as session:+             tasks = [+                 self._fetch_from_source(session, source_name, lookup_func)+                 for source_name, lookup_func in lookup_methods.items()+             ]+             results = await asyncio.gather(*tasks)+ +             # Store results+             for source_name, result in results:+                 self.results[source_name] = result+ +     def run_lookups(self):+         """Run all timezone lookups (synchronous wrapper for async operations)"""+         asyncio.run(self._run_lookups_async())+     +     def determine_consensus(self):+         """Determine the consensus timezone"""+         # Collect all successful timezones+         timezones = []+         +         for source, result in self.results.items():+             if result['success'] and result['timezone']:+                 timezones.append(result['timezone'])+         +         if not timezones:+             return None, 'none', 0+         +         # Count occurrences+         tz_counter = Counter(timezones)+         most_common = tz_counter.most_common(1)[0]+         consensus_tz = most_common[0]+         consensus_count = most_common[1]+         +         # Determine confidence+         total_valid = len(timezones)+         if consensus_count >= self.min_consensus:+             if consensus_count >= total_valid * 0.7:+                 confidence = 'high'+             elif consensus_count >= total_valid * 0.5:+                 confidence = 'medium'+             else:+                 confidence = 'low'+         else:+             confidence = 'low'+         +         return consensus_tz, confidence, consensus_count+ + def main():+     module = AnsibleModule(+         argument_spec=dict(+             ip_address=dict(type='str', required=True),+             timeout=dict(type='int', default=5),+             min_consensus=dict(type='int', default=2)+         ),+         supports_check_mode=True+     )+     +     if module.check_mode:+         module.exit_json(changed=False)+     +     lookup = IPTimezoneLookup(module)+     lookup.run_lookups()+     +     consensus_tz, confidence, consensus_count = lookup.determine_consensus()+     +     successful_lookups = sum(1 for r in lookup.results.values() if r['success'])+     +     result = {+         'changed': False,+         'timezone': consensus_tz,+         'confidence': confidence,+         'consensus_count': consensus_count,+         'total_sources': len(lookup.results),+         'successful_lookups': successful_lookups,+         'sources': lookup.results,+         'ip_used': lookup.ip_address+     }+     +     if consensus_tz:+         module.exit_json(**result)+     else:+         module.fail_json(msg="Could not determine timezone from any source", **result)+ + if __name__ == '__main__':+     main()

+ #!/usr/bin/python+ # -*- coding: utf-8 -*-+ + #########################################################################+ # Title:         Saltbox: Library | TLD Parse                          #+ # Author(s):     salty                                                  #+ # URL:           https://github.com/saltyorg/Saltbox                    #+ # --                                                                    #+ #########################################################################+ #                   GNU General Public License v3.0                     #+ #########################################################################+ + from __future__ import annotations+ + from typing import TYPE_CHECKING, Any+ + from ansible.module_utils.basic import AnsibleModule+ from tld import get_tld+ + if TYPE_CHECKING:+     from tld.utils import Result+ + DOCUMENTATION = r'''+ ---+ module: tld_parse+ short_description: Parse domain names for DNS operations+ description:+     - Parses a domain name into components needed for DNS record management+     - Extracts the full domain and subdomain portions+     - Uses the tld Python library for parsing+ options:+     url:+         description:+             - The domain or URL to parse+         required: true+         type: str+     record:+         description:+             - Optional DNS record to prepend to the domain+         required: false+         type: str+         default: ''+ author:+     - Saltbox Team+ '''+ + EXAMPLES = r'''+ - name: Parse domain+   tld_parse:+     url: "{{ user.domain }}"+   register: domain_info+ + - name: Parse domain with record+   tld_parse:+     url: "{{ user.domain }}"+     record: "subdomain"+   register: domain_info+ + - name: Use parsed values+   debug:+     msg: "Domain: {{ domain_info.domain }}, Record: {{ domain_info.record }}"+ '''+ + RETURN = r'''+ fld:+     description: Full domain name (e.g., example.com)+     type: str+     returned: always+     sample: 'example.com'+ subdomain:+     description: Subdomain portion (empty string if none)+     type: str+     returned: always+     sample: 'www'+ record:+     description: DNS record format (subdomain or '@' for root domain)+     type: str+     returned: always+     sample: 'www'+ tld:+     description: Top-level domain (e.g., com, org, co.uk)+     type: str+     returned: always+     sample: 'com'+ domain:+     description: Domain name without TLD (e.g., example)+     type: str+     returned: always+     sample: 'example'+ '''+ + + def main() -> None:+     module: Any = AnsibleModule(+         argument_spec=dict(+             url=dict(type='str', required=True),+             record=dict(type='str', default='')+         ),+         supports_check_mode=True+     )+ +     url: str = module.params['url']+     record: str = module.params['record']+ +     try:+         # Build the full URL+         full_url: str+         if record:+             full_url = f"http://{record}.{url}"+         else:+             # Only add http:// if URL doesn't already have a scheme+             if not url.startswith(('http://', 'https://')):+                 full_url = f"http://{url}"+             else:+                 full_url = url+ +         # Parse using tld library+         res: Result = get_tld(full_url, as_object=True)  # type: ignore[assignment]+ +         # Extract components - use same naming as tld library+         fld: str = res.fld+         subdomain: str = res.subdomain if res.subdomain else ''+         tld: str = res.tld+         domain: str = res.domain+ +         # Format record for DNS operations+         dns_record: str = subdomain if subdomain else '@'+ +         module.exit_json(+             changed=False,+             fld=fld,+             subdomain=subdomain,+             record=dns_record,+             tld=tld,+             domain=domain+         )+ +     except Exception as e:+         module.fail_json(msg=f"Failed to parse domain: {e!s}")+ + + if __name__ == '__main__':+     main()

+ from ansible.plugins.lookup import LookupBase+ from ansible.errors import AnsibleLookupError+ from ansible.utils.display import Display+ from typing import Any, List, Optional, Dict+ import json+ + display = Display()+ + DOCUMENTATION = """+     name: docker_var+     author: salty+     version_added: "N/A"+     short_description: Look up a role variable with automatic fallback and JSON conversion+     description:+       - This lookup replicates lookup('vars', _instance_name + suffix, default=lookup('vars', _var_prefix + '_role' + suffix))+       - For instance names or var prefixes with dashes, checks both original and underscore-converted versions+       - Automatically converts lists of JSON strings to dictionaries when detected+     options:+       _terms:+         description: The suffix to append (e.g. '_docker_network_mode')+         required: true+       default:+         description: The default value to return if neither variable is found+         type: raw+         required: false+       convert_json:+         description: Whether to automatically convert JSON string lists to dictionaries (default true)+         type: bool+         required: false+         default: true+ """+ + class LookupModule(LookupBase):+ +     def _is_json_string_list(self, value: Any) -> bool:+         """Check if value is a list of JSON strings"""+         if not isinstance(value, list):+             return False+         +         # Check if all items are strings that look like JSON objects+         for item in value:+             if not isinstance(item, str):+                 return False+             stripped = item.strip()+             if not (stripped.startswith('{') and stripped.endswith('}')):+                 return False+         +         return len(value) > 0+ +     def _convert_json_list_to_dict(self, json_list: List[str]) -> Optional[Dict[str, Any]]:+         """Convert a list of JSON strings to a combined dictionary"""+         combined_dict: Dict[str, Any] = {}+ +         for json_str in json_list:+             try:+                 # Parse the JSON string directly+                 parsed = json.loads(json_str)+                 if isinstance(parsed, dict):+                     combined_dict.update(parsed)+                 else:+                     display.warning(f"[docker_var] JSON string parsed to non-dict: {parsed}")+                     return None+             except json.JSONDecodeError as je:+                 display.warning(f"[docker_var] Invalid JSON in: {json_str[:100]}... Error: {je}")+                 return None+             except (TypeError, AttributeError) as e:+                 display.warning(f"[docker_var] Failed to process JSON string: {e}")+                 return None+ +         display.vvv(f"[docker_var] Converted JSON list to dict with {len(combined_dict)} keys using manual parsing")+         return combined_dict+ +     def run(self, terms: List[str], variables: Optional[Dict[str, Any]] = None, **kwargs: Any) -> List[Any]:+         if variables is None:+             variables = {}+         +         suffix: str = terms[0] if terms else ''+         self.set_options(var_options=variables, direct=kwargs)+         default: Any = self.get_option('default')+         convert_json: Optional[bool] = self.get_option('convert_json')+         if convert_json is None:+             convert_json = True+ +         self._templar.available_variables = variables+ +         if '_var_prefix' not in variables:+             raise KeyError("[docker_var] Required variable '_var_prefix' not found")+         if '_instance_name' not in variables:+             raise KeyError("[docker_var] Required variable '_instance_name' not found")+ +         var_prefix: str = self._templar.template(variables['_var_prefix'], fail_on_undefined=True)+         instance_name: str = self._templar.template(variables['_instance_name'], fail_on_undefined=True)+         +         # Create lists of prefixes to try (including dash/underscore variants)+         instance_names_to_try: List[str] = [instance_name]+         if '-' in instance_name:+             underscore_instance: str = instance_name.replace('-', '_')+             instance_names_to_try.append(underscore_instance)+             display.vvv(f"[docker_var] Added underscore variant for instance: {underscore_instance}")+ +         var_prefixes_to_try: List[str] = [var_prefix]+         if '-' in var_prefix:+             underscore_prefix: str = var_prefix.replace('-', '_')+             var_prefixes_to_try.append(underscore_prefix)+             display.vvv(f"[docker_var] Added underscore variant for prefix: {underscore_prefix}")+ +         # Build the variable names to check+         vars_to_check: List[str] = []+         +         # For each instance name variant, add the primary variable+         for inst_name in instance_names_to_try:+             primary_var: str = inst_name + suffix+             vars_to_check.append(primary_var)+ +         # For each var prefix variant, add the fallback variable+         for var_pref in var_prefixes_to_try:+             fallback_var: str+             if suffix == '_name':+                 fallback_var = var_pref + suffix+             else:+                 fallback_var = var_pref + '_role' + suffix+             vars_to_check.append(fallback_var)+ +         display.vvv(f"[docker_var] Checking these keys in order: {vars_to_check}")+         if display.verbosity >= 3:+             debug_keys = sorted([+                 k for k in variables+                 if suffix in k or k.endswith(suffix) or any(k.startswith(prefix) for prefix in instance_names_to_try + var_prefixes_to_try)+             ])+             display.vvv(f"[docker_var] Relevant vars: {debug_keys}")+         +         # Try each variable name in order+         last_error: Optional[Exception] = None+         for var_name in vars_to_check:+             if var_name in variables:+                 raw_value = variables.get(var_name)+                 if raw_value is None:+                     display.vvv(f"[docker_var] Skipping {var_name} (value is None)")+                     continue+                 try:+                     result = self._templar.template(raw_value, fail_on_undefined=True)+                     if result is not None:+                         # Check if we should convert JSON list to dict+                         if convert_json and self._is_json_string_list(result):+                             display.vvv(f"[docker_var] Found JSON string list for {var_name}, converting to dict")+                             converted = self._convert_json_list_to_dict(result)+                             if converted is not None:+                                 return [converted]+                             else:+                                 display.vvv(f"[docker_var] Conversion failed, returning original list")+ +                         display.vvv(f"[docker_var] Returning templated value for {var_name}: {result}")+                         return [result]+                     else:+                         display.vvv(f"[docker_var] {var_name} is None after templating, skipping")+                 except Exception as e:+                     display.vvv(f"[docker_var] Error templating {var_name}: {e}")+                     last_error = e+             else:+                 display.vvv(f"[docker_var] {var_name} not found in variables — skipping")+ +         # If we have a default, use it+         if default is not None:+             display.vvv(f"[docker_var] No usable variable found, returning default: {default}")+             return [default]+ +         # If all attempts failed with errors, raise the last error+         if last_error is not None:+             raise last_error+ +         # Otherwise raise an error - variable not found and no default provided+         raise AnsibleLookupError(+             f"[docker_var] Variable not found and no default provided. "+             f"Tried the following variables in order: {', '.join(vars_to_check)}"+         )

+ from ansible.plugins.lookup import LookupBase+ from ansible.errors import AnsibleLookupError+ from ansible.utils.display import Display+ from typing import Any, List, Optional, Dict+ import json+ + display = Display()+ + DOCUMENTATION = """+     name: role_var+     author: salty+     version_added: "N/A"+     short_description: Look up a role variable with automatic fallback and JSON conversion+     description:+       - This lookup replicates lookup('vars', traefik_role_var + suffix, default=lookup('vars', role_name + '_role' + suffix))+       - When 'role' parameter is specified, constructs the appropriate traefik_role_var for that role+       - For _name variables with dashes, checks both original and underscore-converted versions+       - Automatically converts lists of JSON strings to dictionaries when detected+     options:+       _terms:+         description: The suffix to append (e.g. '_dns_record')+         required: true+       default:+         description: The default value to return if neither variable is found+         type: raw+         required: false+       role:+         description: The role name to use for lookup instead of the current role_name+         type: str+         required: false+       convert_json:+         description: Whether to automatically convert JSON string lists to dictionaries (default true)+         type: bool+         required: false+         default: true+ """+ + class LookupModule(LookupBase):+ +     def _is_json_string_list(self, value: Any) -> bool:+         """Check if value is a list of JSON strings"""+         if not isinstance(value, list):+             return False+         +         # Check if all items are strings that look like JSON objects+         for item in value:+             if not isinstance(item, str):+                 return False+             stripped = item.strip()+             if not (stripped.startswith('{') and stripped.endswith('}')):+                 return False+         +         return len(value) > 0+ +     def _convert_json_list_to_dict(self, json_list: List[str]) -> Optional[Dict[str, Any]]:+         """Convert a list of JSON strings to a combined dictionary"""+         combined_dict: Dict[str, Any] = {}+ +         for json_str in json_list:+             try:+                 # Parse the JSON string directly+                 parsed = json.loads(json_str)+                 if isinstance(parsed, dict):+                     combined_dict.update(parsed)+                 else:+                     display.warning(f"[role_var] JSON string parsed to non-dict: {parsed}")+                     return None+             except json.JSONDecodeError as je:+                 display.warning(f"[role_var] Invalid JSON in: {json_str[:100]}... Error: {je}")+                 return None+             except (TypeError, AttributeError) as e:+                 display.warning(f"[role_var] Failed to process JSON string: {e}")+                 return None+ +         display.vvv(f"[role_var] Converted JSON list to dict with {len(combined_dict)} keys using manual parsing")+         return combined_dict+ +     def run(self, terms: List[str], variables: Optional[Dict[str, Any]] = None, **kwargs: Any) -> List[Any]:+         if variables is None:+             variables = {}+ +         suffix: str = terms[0] if terms else ''+         self.set_options(var_options=variables, direct=kwargs)+         default: Any = self.get_option('default')+         specified_role: Optional[str] = self.get_option('role')+         convert_json: Optional[bool] = self.get_option('convert_json')+         if convert_json is None:+             convert_json = True+ +         self._templar.available_variables = variables+ +         # Use specified role if provided, otherwise fall back to role_name+         if specified_role:+             role_name: str = self._templar.template(specified_role, fail_on_undefined=True)+         else:+             if 'role_name' not in variables:+                 raise KeyError("[role_var] Required variable 'role_name' not found")+             role_name: str = self._templar.template(variables['role_name'], fail_on_undefined=True)+         +         # If a custom role is specified, we need to construct the appropriate traefik_role_var for that role+         traefik_role_var: str+         if specified_role:+             # Replicate the logic: traefik_role_var: "{{ lookup('vars', role_name + '_name', default=role_name) }}"+             custom_role_name_var: str = role_name + '_name'+             if custom_role_name_var in variables:+                 traefik_role_var = self._templar.template(variables[custom_role_name_var], fail_on_undefined=True)+             else:+                 traefik_role_var = role_name+             display.vvv(f"[role_var] Using custom traefik_role_var for role '{role_name}': {traefik_role_var}")+         else:+             if 'traefik_role_var' not in variables:+                 raise KeyError("[role_var] Required variable 'traefik_role_var' not found")+             traefik_role_var = self._templar.template(variables['traefik_role_var'], fail_on_undefined=True)+ +         # Build the variable names to check+         primary_var: str+         fallback_var: str+         if suffix == '_name':+             primary_var = traefik_role_var + suffix+             fallback_var = role_name + suffix+         else:+             primary_var = traefik_role_var + suffix+             fallback_var = role_name + '_role' + suffix+ +         # Create list of all variable names to check (including dash/underscore variants)+         vars_to_check: List[str] = []+         +         for var_name in [primary_var, fallback_var]:+             vars_to_check.append(var_name)+             # If the variable name contains dashes, also check the underscore version+             if '-' in var_name:+                 underscore_var = var_name.replace('-', '_')+                 vars_to_check.append(underscore_var)+                 display.vvv(f"[role_var] Added underscore variant: {underscore_var} for {var_name}")+ +         display.vvv(f"[role_var] Checking these keys in order: {vars_to_check}")+         if display.verbosity >= 3:+             debug_keys = sorted([+                 k for k in variables+                 if suffix in k or k.endswith(suffix) or k.startswith((traefik_role_var, role_name))+             ])+             display.vvv(f"[role_var] Relevant vars: {debug_keys}")+ +         # Try each variable name in order+         last_error: Optional[Exception] = None+         for var_name in vars_to_check:+             if var_name in variables:+                 raw_value = variables.get(var_name)+                 if raw_value is None:+                     display.vvv(f"[role_var] Skipping {var_name} (value is None)")+                     continue+                 try:+                     result = self._templar.template(raw_value, fail_on_undefined=True)+                     if result is not None:+                         # Check if we should convert JSON list to dict+                         if convert_json and self._is_json_string_list(result):+                             display.vvv(f"[role_var] Found JSON string list for {var_name}, converting to dict")+                             converted = self._convert_json_list_to_dict(result)+                             if converted is not None:+                                 return [converted]+                             else:+                                 display.vvv(f"[role_var] Conversion failed, returning original list")+ +                         display.vvv(f"[role_var] Returning templated value for {var_name}: {result}")+                         return [result]+                     else:+                         display.vvv(f"[role_var] {var_name} is None after templating, skipping")+                 except Exception as e:+                     display.vvv(f"[role_var] Error templating {var_name}: {e}")+                     last_error = e+             else:+                 display.vvv(f"[role_var] {var_name} not found in variables — skipping")+ +         # If we have a default, use it+         if default is not None:+             display.vvv(f"[role_var] No usable variable found, returning default: {default}")+             return [default]+ +         # If all attempts failed with errors, raise the last error+         if last_error is not None:+             raise last_error+ +         # Otherwise raise an error - variable not found and no default provided+         raise AnsibleLookupError(+             f"[role_var] Variable not found and no default provided. "+             f"Tried the following variables in order: {', '.join(vars_to_check)}"+         )

+ #########################################################################+ # Title:         Saltbox: Resources | Tasks | Instances | Get NZBGet Info #+ # Author(s):     salty                                                    #+ # URL:           https://github.com/saltyorg/Saltbox                      #+ # --                                                                      #+ #########################################################################+ #                   GNU General Public License v3.0                       #+ #########################################################################+ ---+ - name: Resources | Tasks | Instances | Get Info | Check if NZBGet exists+   ansible.builtin.stat:+     path: "{{ lookup('role_var', '_paths_config_location', role='nzbget') }}"+   register: nzbget_role_paths_config_location_stat+ + - name: Resources | Tasks | Instances | Get Info | NZBGet tasks+   when: nzbget_role_paths_config_location_stat.stat.exists+   block:+     - name: Resources | Tasks | Instances | Get Info | Fetch NZBGet ControlUsername+       ansible.builtin.shell: "grep -oP '^ControlUsername=\\K.*' {{ lookup('role_var', '_paths_config_location', role='nzbget') }}"+       register: nzbget_username_result+       changed_when: false+ +     - name: Resources | Tasks | Instances | Get Info | Fetch NZBGet ControlPassword+       ansible.builtin.shell: "grep -oP '^ControlPassword=\\K.*' {{ lookup('role_var', '_paths_config_location', role='nzbget') }}"+       register: nzbget_password_result+       changed_when: false+ +     - name: Resources | Tasks | Instances | Get Info | Set 'nzbget_info' variable+       ansible.builtin.set_fact:+         nzbget_info:+           name: nzbget+           url: "{{ lookup('role_var', '_web_url', role='nzbget') }}"+           username: "{{ nzbget_username_result.stdout }}"+           password: "{{ nzbget_password_result.stdout }}"+ + - name: Resources | Tasks | Instances | Get Info | Set 'nzbget_info' variable+   ansible.builtin.set_fact:+     nzbget_info:+       name: nzbget+       url: "{{ lookup('role_var', '_web_url', role='nzbget') }}"+       username: "not installed"+       password: "not installed"+   when: (not nzbget_role_paths_config_location_stat.stat.exists)

+ #########################################################################+ # Title:         Saltbox: Resources | Tasks | Instances | Get SABnzbd Info #+ # Author(s):     salty                                                     #+ # URL:           https://github.com/saltyorg/Saltbox                       #+ # --                                                                       #+ #########################################################################+ #                   GNU General Public License v3.0                        #+ #########################################################################+ ---+ - name: Resources | Tasks | Instances | Get Info | Check if SABnzbd exists+   ansible.builtin.stat:+     path: "{{ lookup('role_var', '_paths_config_location', role='sabnzbd') }}"+   register: sabnzbd_role_paths_config_location_stat+ + - name: Resources | Tasks | Instances | Get Info | SABnzbd API Key tasks+   when: sabnzbd_role_paths_config_location_stat.stat.exists+   block:+     - name: Resources | Tasks | Instances | Get Info | Fetch SABnzbd API Key+       ansible.builtin.shell: "grep -oP '^api_key = \\K.*' {{ lookup('role_var', '_paths_config_location', role='sabnzbd') }}"+       register: sabnzbd_api_key_result+       changed_when: false+ +     - name: Resources | Tasks | Instances | Get Info | Set 'sabnzbd_info' variable+       ansible.builtin.set_fact:+         sabnzbd_info:+           name: sabnzbd+           url: "{{ lookup('role_var', '_web_url', role='sabnzbd') }}"+           api_key: "{{ sabnzbd_api_key_result.stdout }}"+ + - name: Resources | Tasks | Instances | Get Info | Set 'sabnzbd_info' variable+   ansible.builtin.set_fact:+     sabnzbd_info:+       name: sabnzbd+       url: "{{ lookup('role_var', '_web_url', role='sabnzbd') }}"+       api_key: "not installed"+   when: (not sabnzbd_role_paths_config_location_stat.stat.exists)

+ #####################################################################################+ # Title:         Saltbox: Resources | Tasks | Variables | Import Inventory Vars     #+ # Author(s):     salty                                                              #+ # URL:           https://github.com/saltyorg/Saltbox                                #+ # --                                                                                #+ #####################################################################################+ #                   GNU General Public License v3.0                                 #+ #####################################################################################+ ---+ - name: "Resources | Tasks | Variables | Import Inventory Vars | Check if 'localhost.yml' exists"+   ansible.builtin.stat:+     path: "/srv/git/saltbox/inventories/host_vars/localhost.yml"+   register: localhost_inventory_file+ + - name: "Resources | Tasks | Variables | Import Inventory Vars | Import Inventory variables"+   ansible.builtin.include_vars: "/srv/git/saltbox/inventories/host_vars/localhost.yml"+   when: localhost_inventory_file.stat.exists

+ ################################################################################+ # Title:         Saltbox: Resources | Tasks | Variables | Import Role Vars     #+ # Author(s):     salty                                                         #+ # URL:           https://github.com/saltyorg/Saltbox                           #+ # --                                                                           #+ ################################################################################+ #                   GNU General Public License v3.0                            #+ ################################################################################+ ---+ - name: "Resources | Tasks | Variables | Import Role Vars | Include {{ import_role_name }} role default vars"+   ansible.builtin.include_vars: "/srv/git/saltbox/roles/{{ import_role_name }}/defaults/main.yml"+ + - name: "Resources | Tasks | Variables | Import Role Vars | Check if 'localhost.yml' exists"+   ansible.builtin.stat:+     path: "/srv/git/saltbox/inventories/host_vars/localhost.yml"+   register: localhost_inventory_file+ + - name: "Resources | Tasks | Variables | Import Role Vars | Import Inventory variables"+   ansible.builtin.include_vars: "/srv/git/saltbox/inventories/host_vars/localhost.yml"+   when: localhost_inventory_file.stat.exists

+ #########################################################################+ # Title:         Saltbox: Cloudplow Disable Role                        #+ # Author(s):     salty                                                  #+ # URL:           https://github.com/saltyorg/Saltbox                    #+ # --                                                                    #+ #########################################################################+ #                   GNU General Public License v3.0                     #+ #########################################################################+ ---+ - name: Delete Legacy Service+   ansible.builtin.include_tasks: "{{ resources_tasks_path }}/systemd/delete_service.yml"+   vars:+     _service_name: "{{ cloudplow_service_name_old }}"+ + - name: Delete Service+   ansible.builtin.include_tasks: "{{ resources_tasks_path }}/systemd/delete_service.yml"+   vars:+     _service_name: "{{ cloudplow_service_name }}"

+ #########################################################################+ # Title:         Saltbox: MOTD | Build Emby Info                       #+ # Author(s):     salty                                                 #+ # URL:           https://github.com/saltyorg/Saltbox                   #+ # --                                                                   #+ #########################################################################+ #                   GNU General Public License v3.0                    #+ #########################################################################+ ---+ - name: Set 'emby_info' variable+   ansible.builtin.set_fact:+     emby_info: "{{ emby_info | default({}) | combine({emby_name: {'name': emby_name, 'url': lookup('role_var', '_web_url', role=emby_name), 'token': 'not installed'}}) }}"

+ #########################################################################+ # Title:         Saltbox: MOTD | Build Jellyfin Info                   #+ # Author(s):     salty                                                 #+ # URL:           https://github.com/saltyorg/Saltbox                   #+ # --                                                                   #+ #########################################################################+ #                   GNU General Public License v3.0                    #+ #########################################################################+ ---+ - name: Set 'jellyfin_info' variable+   ansible.builtin.set_fact:+     jellyfin_info: "{{ jellyfin_info | default({}) | combine({jellyfin_name: {'name': jellyfin_name, 'url': lookup('role_var', '_web_url', role=jellyfin_name), 'token': 'not installed'}}) }}"

+ #########################################################################+ # Title:         Saltbox: MOTD | Build qBittorrent Info                 #+ # Author(s):     salty                                                  #+ # URL:           https://github.com/saltyorg/Saltbox                    #+ # --                                                                    #+ #########################################################################+ #                   GNU General Public License v3.0                     #+ #########################################################################+ ---+ - name: Set 'qbittorrent_info' variable+   ansible.builtin.set_fact:+     qbittorrent_info: "{{ qbittorrent_info | default({}) | combine({qbittorrent_name: {'name': qbittorrent_name, 'url': lookup('role_var', '_web_url', role=qbittorrent_name), 'username': user.name, 'password': user.pass}}) }}"

+ ##########################################################################+ # Title:         Saltbox: PostgreSQL | Default Variables                 #+ # Author(s):     salty                                                   #+ # URL:           https://github.com/saltyorg/Saltbox                     #+ # --                                                                     #+ ##########################################################################+ #                   GNU General Public License v3.0                      #+ ##########################################################################+ ---+ ################################+ # Basics+ ################################+ + # Supports any versions from https://wiki.postgresql.org/wiki/Apt+ # Each version is unique and you cannot specify the same version twice+ postgres_host_role_versions: ["17"]+ + ################################+ # Paths+ ################################+ + postgres_host_role_data_directory: "{{ server_appdata_path }}/postgresql"+ + ################################+ # Superuser+ ################################+ + postgres_host_role_create_root_superuser: true+ postgres_host_role_root_superuser_name: "root"+ postgres_host_role_root_superuser_password: "password4321"+ + ################################+ # Per-Version Configuration+ ################################+ + # Example:+ # postgres_host_role_config:+ #   "16":+ #     allowed_hosts:+ #       - "172.19.0.0/16"+ #       - "10.0.0.0/8"+ #     auth_method: "md5"+ #     users:+ #       - name: "app_user"+ #         password: "password1"+ #       - name: "app_user2"+ #         password: "password2"+ #     databases:+ #       - name: "app_database"+ #         users:+ #           - "app_user"+ #           - "app_user2"+ #       - name: "metrics_db"+ #         users:+ #           - "app_user"+ #   "17":+ #     allowed_hosts:+ #       - "172.19.0.0/16"+ #     auth_method: "scram-sha-256"+ #     users:+ #       - name: "app_user3"+ #         password: "password3"+ #     databases:+ #       - name: "new_app_database"+ #         users:+ #           - "app_user3"+ postgres_host_role_config: {}+ + ################################+ # Access Control+ ################################+ + postgres_host_role_allowed_hosts:+   - "172.19.0.0/16"+ + postgres_host_role_auth_method: "scram-sha-256"+ + ################################+ # User & Database Configuration+ ################################+ + postgres_host_role_users:+   - name: "{{ user.name }}"+     password: "{{ user.pass }}"+ + postgres_host_role_databases:+   - name: "saltbox"+     users: ["{{ user.name }}"]

+ #########################################################################+ # Title:         Saltbox: PostgreSQL Host Role                          #+ # Author(s):     salty                                                  #+ # URL:           https://github.com/saltyorg/Saltbox                    #+ # --                                                                    #+ #########################################################################+ #                   GNU General Public License v3.0                     #+ #########################################################################+ ---+ - name: Update apt cache+   ansible.builtin.apt:+     update_cache: true+ + - name: Install postgresql-common+   ansible.builtin.apt:+     name: postgresql-common+     state: latest+ + - name: Run PGDG script+   ansible.builtin.command: /usr/share/postgresql-common/pgdg/apt.postgresql.org.sh -y+   args:+     creates: /etc/apt/sources.list.d/pgdg.list+ + - name: Create PostgreSQL data directory+   ansible.builtin.file:+     path: "{{ postgres_host_role_data_directory }}"+     state: directory+     owner: "{{ user.name }}"+     group: "{{ user.name }}"+     mode: '0755'+ + - name: Create symlink for entire PostgreSQL directory+   ansible.builtin.file:+     src: "{{ postgres_host_role_data_directory }}"+     dest: "/etc/postgresql"+     state: link+     owner: "{{ user.name }}"+     group: "{{ user.name }}"+     follow: false+     force: true+ + - name: Install PostgreSQL packages for specified versions+   ansible.builtin.apt:+     name: "postgresql-{{ item }}"+     state: latest+   loop: "{{ postgres_host_role_versions }}"+ + - name: Discover existing PostgreSQL clusters+   ansible.builtin.shell: |+     pg_lsclusters --no-header | awk '{print $1":"$2":"$3}'+   register: existing_clusters+   changed_when: false+   failed_when: false+ + - name: Parse cluster information+   ansible.builtin.set_fact:+     postgres_cluster_info: "{{ postgres_cluster_info | default([]) + [{'version': item.split(':')[0], 'name': item.split(':')[1], 'port': item.split(':')[2]}] }}"+   loop: "{{ existing_clusters.stdout_lines | default([]) }}"+   when: (existing_clusters.stdout_lines is defined)+ + - name: Find all PostgreSQL services+   ansible.builtin.shell: |+     systemctl list-units --type=service --state=loaded --no-legend | grep postgresql | awk '{print $1}'+   register: postgres_services+   changed_when: false+   failed_when: false+ + - name: Stop and disable unspecified PostgreSQL versions+   ansible.builtin.systemd:+     name: "{{ item }}"+     state: stopped+     enabled: false+   loop: "{{ postgres_services.stdout_lines }}"+   when:+     - postgres_services.stdout_lines is defined+     - item != "postgresql.service"+     - item not in (postgres_host_role_versions | map('regex_replace', '^(.*)$', 'postgresql@\\1-main.service') | list)+   failed_when: false+ + - name: Check if default clusters exist+   ansible.builtin.stat:+     path: "/var/lib/postgresql/{{ item }}/main"+   register: default_clusters_exist+   loop: "{{ postgres_host_role_versions }}"+ + - name: Stop default clusters if they exist+   ansible.builtin.command: >+     pg_ctlcluster {{ item.item }} main stop+   loop: "{{ default_clusters_exist.results }}"+   become: true+   become_user: "{{ user.name }}"+   when: item.stat.exists+   failed_when: false+ + - name: Remove default clusters if they exist+   ansible.builtin.command: >+     pg_dropcluster {{ item.item }} main+   loop: "{{ default_clusters_exist.results }}"+   become: true+   become_user: "{{ user.name }}"+   when: item.stat.exists+   failed_when: false+ + - name: Check if clusters are already configured+   ansible.builtin.shell: |+     pg_lsclusters --no-header | grep "^{{ item }}\s\+main" || echo "not_found"+   register: clusters_configured+   loop: "{{ postgres_host_role_versions }}"+   become: true+   become_user: "{{ user.name }}"+   changed_when: false+   failed_when: false+ + - name: Update port in postgresql.conf for existing clusters+   ansible.builtin.lineinfile:+     path: "{{ postgres_host_role_data_directory }}/{{ item }}/main/postgresql.conf"+     regexp: "^#?port ="+     line: "port = {{ postgres_port_assignments[item] }}"+     owner: "{{ user.name }}"+     group: "{{ user.name }}"+     mode: '0644'+   loop: "{{ postgres_host_role_versions }}"+   when: postgres_port_assignments[item] is defined+ + - name: Create clusters with custom data directory and user+   ansible.builtin.command: >+     pg_createcluster {{ item.item }} main+     --datadir={{ postgres_host_role_data_directory }}/{{ item.item }}/data+     --user={{ user.name }}+     --port={{ postgres_port_assignments[item.item] }}+   loop: "{{ clusters_configured.results }}"+   become: true+   become_user: "{{ user.name }}"+   when: ('not_found' in item.stdout)+ + - name: Create systemd override directory for PostgreSQL service+   ansible.builtin.file:+     path: "/etc/systemd/system/postgresql@.service.d"+     state: directory+     owner: root+     group: root+     mode: '0755'+ + - name: Create systemd override for PostgreSQL service+   ansible.builtin.copy:+     content: |+       [Service]+       User={{ user.name }}+       Group={{ user.name }}+ +       # Ensure runtime directory exists and has correct ownership+       ExecStartPre=+/bin/mkdir -p /var/run/postgresql+       ExecStartPre=+/bin/chown -R {{ user.name }}:{{ user.name }} /var/run/postgresql+       ExecStartPre=+/bin/chmod 0775 /var/run/postgresql+ +       # Ensure log directory has correct ownership+       ExecStartPre=+/bin/mkdir -p /var/run/postgresql+       ExecStartPre=+/bin/chown -R {{ user.name }}:{{ user.name }} /var/log/postgresql+     dest: "/etc/systemd/system/postgresql@.service.d/override.conf"+     owner: root+     group: root+     mode: '0644'+   register: postgres_systemd_override+ + - name: Reload systemd daemon after override changes+   ansible.builtin.systemd:+     daemon_reload: true+   when: postgres_systemd_override.changed+ + - name: Calculate desired port assignments based on version order+   ansible.builtin.set_fact:+     postgres_port_assignments: "{{ postgres_port_assignments | default({}) | combine({item: (5432 + my_idx)}) }}"+   loop: "{{ postgres_host_role_versions }}"+   loop_control:+     index_var: my_idx+ + - name: Stop all PostgreSQL services before port validation+   ansible.builtin.systemd:+     name: "postgresql@{{ item }}-main"+     state: stopped+   loop: "{{ postgres_host_role_versions }}"+   failed_when: false+ + - name: Stop generic PostgreSQL service+   ansible.builtin.systemd:+     name: postgresql+     state: stopped+   failed_when: false+ + - name: Check if desired ports are available+   ansible.builtin.wait_for:+     port: "{{ postgres_port_assignments[item] }}"+     host: "127.0.0.1"+     state: stopped+     timeout: 1+   loop: "{{ postgres_host_role_versions }}"+   register: port_check_results+   failed_when: false+ + - name: Fail if any desired ports are not available+   ansible.builtin.fail:+     msg: "Port {{ postgres_port_assignments[item] }} for PostgreSQL version {{ item }} is not available (in use by another service)"+   loop: "{{ postgres_host_role_versions }}"+   loop_control:+     index_var: port_idx+   when: port_check_results.results[port_idx].failed+ + - name: Start PostgreSQL services with correct port assignments+   ansible.builtin.systemd:+     name: "postgresql@{{ item }}-main"+     state: started+     enabled: true+   loop: "{{ postgres_host_role_versions }}"+ + - name: Ensure generic PostgreSQL service is enabled+   ansible.builtin.systemd:+     name: postgresql+     enabled: true+ + - name: Rediscover PostgreSQL clusters after setup+   ansible.builtin.shell: |+     pg_lsclusters --no-header | awk '{print $1":"$2":"$3":"$4}'+   register: updated_clusters+   changed_when: false+   failed_when: false+ + - name: Parse updated cluster information+   ansible.builtin.set_fact:+     postgres_active_clusters: "{{ postgres_active_clusters | default([]) + [{'version': item.split(':')[0], 'name': item.split(':')[1], 'port': item.split(':')[2], 'status': item.split(':')[3]}] }}"+   loop: "{{ updated_clusters.stdout_lines | default([]) }}"+   when:+     - (updated_clusters.stdout_lines is defined)+     - (item.split(':')[0] in postgres_host_role_versions)+ + - name: Setup databases and users for each PostgreSQL version+   ansible.builtin.include_tasks: setup_version.yml+   vars:+     postgres_version: "{{ postgres_item }}"+     cluster_port: "{{ postgres_port_assignments[postgres_item] }}"+   loop: "{{ postgres_host_role_versions | unique }}"+   loop_control:+     loop_var: "postgres_item"

+ #########################################################################+ # Title:         Saltbox: PostgreSQL Host Role                          #+ # Author(s):     salty                                                  #+ # URL:           https://github.com/saltyorg/Saltbox                    #+ # --                                                                    #+ #########################################################################+ #                   GNU General Public License v3.0                     #+ #########################################################################+ ---+ - name: Set version-specific configuration for version {{ postgres_version }}+   ansible.builtin.set_fact:+     version_users: "{{ postgres_host_role_config[postgres_version].users | default(postgres_host_role_users) }}"+     version_databases: "{{ postgres_host_role_config[postgres_version].databases | default(postgres_host_role_databases) }}"+     version_allowed_hosts: "{{ postgres_host_role_config[postgres_version].allowed_hosts | default(postgres_host_role_allowed_hosts) }}"+     version_auth_method: "{{ postgres_host_role_config[postgres_version].auth_method | default(postgres_host_role_auth_method) }}"+ + - name: Add allowed hosts to pg_hba.conf for version {{ postgres_version }}+   ansible.builtin.blockinfile:+     path: "{{ postgres_host_role_data_directory }}/{{ postgres_version }}/main/pg_hba.conf"+     marker: "### SALTBOX MANAGED BLOCK - {mark} ###"+     block: |+       {% for host in version_allowed_hosts %}+       # Allow connections from {{ host }}+       host    all             all             {{ "%-18s" | format(host) }}      {{ version_auth_method }}+       {% endfor %}+     owner: "{{ user.name }}"+     group: "{{ user.name }}"+     mode: '0640'+ + - name: Create default user database for version {{ postgres_version }}+   community.postgresql.postgresql_db:+     name: "{{ user.name }}"+     state: present+     login_port: "{{ cluster_port }}"+     login_user: "{{ user.name }}"+   become: true+   become_user: "{{ user.name }}"+ + - name: Create root superuser for version {{ postgres_version }}+   community.postgresql.postgresql_user:+     name: "{{ postgres_host_role_root_superuser_name }}"+     password: "{{ postgres_host_role_root_superuser_password }}"+     role_attr_flags: SUPERUSER,CREATEDB,CREATEROLE+     state: present+     login_port: "{{ cluster_port }}"+     login_user: "{{ user.name }}"+   become: true+   become_user: "{{ user.name }}"+   no_log: true+   when: (postgres_host_role_create_root_superuser | bool)+ + - name: Create PostgreSQL users for version {{ postgres_version }}+   community.postgresql.postgresql_user:+     name: "{{ item.name }}"+     password: "{{ item.password }}"+     state: present+     login_port: "{{ cluster_port }}"+     login_user: "{{ user.name }}"+   loop: "{{ version_users }}"+   become: true+   become_user: "{{ user.name }}"+   no_log: true+   when: (version_users | length > 0)+ + - name: Create PostgreSQL databases for version {{ postgres_version }}+   community.postgresql.postgresql_db:+     name: "{{ item.name }}"+     state: present+     login_port: "{{ cluster_port }}"+     login_user: "{{ user.name }}"+   loop: "{{ version_databases }}"+   become: true+   become_user: "{{ user.name }}"+   when: (version_databases | length > 0)+ + - name: Grant database privileges to users for version {{ postgres_version }}+   community.postgresql.postgresql_privs:+     login_db: "{{ item.0.name }}"+     roles: "{{ item.1 }}"+     privs: ALL+     type: database+     state: present+     login_port: "{{ cluster_port }}"+     login_user: "{{ user.name }}"+   loop: "{{ version_databases | subelements('users', skip_missing=True) }}"+   become: true+   become_user: "{{ user.name }}"+   when: (version_databases | length > 0)

+ ##########################################################################+ # Title:         Saltbox: pre_tasks | Default Variables                  #+ # Author(s):     salty                                                   #+ # URL:           https://github.com/saltyorg/Saltbox                     #+ # --                                                                     #+ ##########################################################################+ #                   GNU General Public License v3.0                      #+ ##########################################################################+ ---+ pre_tasks_saltbox_mod_location: "{{ server_appdata_path }}/saltbox_mod"

+ ---+ services:+   {{ traefik_template_name }}:+     container_name: {{ traefik_template_name }}+     environment: # Change this as needed for your image+       PUID: "{{ uid }}"+       PGID: "{{ gid }}"+       TZ: "{{ tz }}"+     hostname: {{ traefik_template_name }}+     image: your_image:your_tag+     labels:+ {% for key, value in docker_labels_common | dictsort %}+       {{ key }}: {{ value }}+ {% endfor %}+ {% if ((service_gluetun_enabled.user_input | lower) | bool) %}+     network_mode: {{ traefik_template_role_docker_network_mode }}+ {% else %}+     networks:+       - saltbox+ {% endif %}+     restart: unless-stopped+     volumes: # Change this as needed for your image+       - {{ server_appdata_path }}/{{ traefik_template_name }}:/config+       - /etc/localtime:/etc/localtime:ro+ + {% if not ((service_gluetun_enabled.user_input | lower) | bool) %}+ networks:+   saltbox:+     external: true+ {% endif %}

+ #!/usr/bin/env python3+ """+ Saltbox Role Defaults Linter+ Enforces Saltbox formatting rules for role defaults/main.yml files+ + Rules:+ 1. Operator Alignment: | and + operators must align with first character after "{{+    - Standard: All operators align with base position (first char after "{{ )+    - Exception: When 'else' is followed by content on a new line that continues,+      subsequent operators within that else branch align with content after 'else '+    - Context resets when if/else blocks close (marked by )) or )))+ + 2. If/Else Alignment: if and else keywords must align vertically within {{ }} brackets+ """+ + import re+ import sys+ from pathlib import Path+ from typing import List+ + + class LintError:+     """Represents a single linting error"""+ +     def __init__(self, file: str, line: int, message: str, repo_url: str = None, commit_sha: str = None):+         self.file = file+         self.line = line+         self.message = message+         self.repo_url = repo_url+         self.commit_sha = commit_sha+ +     def to_github_annotation(self) -> str:+         """+         Format error as GitHub Actions annotation+ +         Includes a clickable link to the file at the specific commit in the message,+         since GitHub's default annotation links only point to the commit page+         (which doesn't show the file if it wasn't modified in that commit).+         """+         # Build GitHub blob URL if we have repo and commit info+         if self.repo_url and self.commit_sha:+             # Format: https://github.com/owner/repo/blob/commit_sha/path/to/file.yml#L123+             github_link = f"{self.repo_url}/blob/{self.commit_sha}/{self.file}#L{self.line}"+             message_with_link = f"{self.message} - {github_link}"+         else:+             message_with_link = self.message+ +         return f"::error file={self.file},line={self.line}::{message_with_link}"+ +     def __str__(self) -> str:+         return f"{self.file}:{self.line} - {self.message}"+ + + class DefaultsLinter:+     """Lints a single defaults/main.yml file"""+ +     def __init__(self, file_path: Path, repo_url: str = None, commit_sha: str = None):+         self.file_path = file_path+         self.repo_url = repo_url+         self.commit_sha = commit_sha+         self.lines = file_path.read_text().splitlines()+         self.errors: List[LintError] = []+ +     def check_operator_alignment(self):+         """+         Rule 1: Check | and + operators align with first character after '{{ '+ +         Standard alignment - all operators at base position:+             sonarr_role_docker_envs: "{{ lookup('role_var', '_docker_envs_default', role='sonarr')+                                          | combine(lookup('role_var', '_docker_envs_custom', role='sonarr')) }}"+                                          ^ Aligns with 'l' in lookup (position after "{{ )+ +         Multiple operators - all at same base position:+             wikijs_role_docker_networks: "{{ docker_networks_common+                                              + lookup('role_var', '_docker_networks_default', role='wikijs')+                                              + lookup('role_var', '_docker_networks_custom', role='wikijs') }}"+                                              ^ All + align with 'd' in docker_networks_common+ +         Exception - else with continuing content creates new context:+             dozzle_role_docker_commands: "{{ lookup('role_var', '_docker_commands_agent', role='dozzle')+                                              + lookup('role_var', '_docker_commands_default', role='dozzle')+                                           if lookup('role_var', '_agent_mode', role='dozzle')+                                           else lookup('role_var', '_docker_commands_default', role='dozzle')+                                                + lookup('role_var', '_docker_commands_custom', role='dozzle') }}"+                                                ^ This + aligns with 'l' in lookup after 'else ', not with base+ +         Inline if/else (no context change):+             traefik_role_docker_labels: "{{ docker_labels_saltbox+                                             | combine((lookup('role_var', '_docker_labels_http', role='traefik')+                                                       if traefik_http+                                                       else lookup('role_var', '_docker_labels_dns', role='traefik')))+                                             | combine(lookup('role_var', '_docker_labels_custom', role='traefik')) }}"+                                             ^ All | remain at base position - inline if/else doesn't change context+         """+         i = 0+         while i < len(self.lines):+             curr_line = self.lines[i]+ +             # Match variable definitions starting multi-line Jinja expressions+             # Pattern: variable_name: "{{ <content>+             match = re.match(r'^([a-z_]+): "{{ (.+)', curr_line)+ +             # Only process if:+             # 1. Line matches pattern+             # 2. Line doesn't end with }} (multi-line expression)+             if match and '}}' not in curr_line:+                 var_name = match.group(1)+ +                 # This is the start of a multi-line expression+                 # Track the expected alignment position for continuation lines+                 expected_alignment = len(curr_line.split('"{{')[0] + '"{{ ')+ +                 # Now check all continuation lines until we hit }}+                 j = i + 1+                 # Track alignment context - changes when we encounter 'else' with content+                 # and resets when if/else blocks close+                 current_alignment = expected_alignment+                 in_else_context = False+ +                 while j < len(self.lines):+                     continuation_line = self.lines[j]+ +                     # Check if this line closes an if/else block (ends with )) or }))+                     # This resets alignment context back to base+                     if in_else_context and re.search(r'\)\)(?:\)|$)', continuation_line.rstrip()):+                         current_alignment = expected_alignment+                         in_else_context = False+ +                     # Check if this line starts with 'else' followed by content that continues+                     # This creates a new alignment context for subsequent operators+                     # Pattern: else followed by lookup/variable (not just closing like '])')+                     # BUT: only if the else block doesn't close on the same line+                     else_match = re.match(r'^(\s+)else (lookup|[a-z_]+)', continuation_line)+                     if else_match:+                         # Check if this line also closes the if/else block (contains )))+                         # If so, don't set a persistent context+                         closes_immediately = re.search(r'\)\)\)', continuation_line)+ +                         if not closes_immediately:+                             # New alignment context: content after 'else '+                             # Only persists if the line doesn't close the block+                             current_alignment = len(else_match.group(1)) + len('else ')+                             in_else_context = True+ +                     # Check if this line has an operator+                     op_match = re.match(r'^(\s+)([|+]) ', continuation_line)+ +                     if op_match:+                         actual_spaces = len(op_match.group(1))+                         operator = op_match.group(2)+ +                         # Use current alignment context (changes after 'else', resets after closing parens)+                         expected_spaces = current_alignment+ +                         if actual_spaces != expected_spaces:+                             diff = actual_spaces - expected_spaces+ +                             # Get relative path for GitHub annotation+                             try:+                                 relative_path = str(self.file_path.relative_to(Path.cwd()))+                             except ValueError:+                                 relative_path = str(self.file_path)+ +                             self.errors.append(LintError(+                                 file=relative_path,+                                 line=j + 1,  # Convert to 1-indexed+                                 message=f"[operator-alignment] Variable '{var_name}': Operator '{operator}' at column {actual_spaces}, expected {expected_spaces} (off by {diff:+d})",+                                 repo_url=self.repo_url,+                                 commit_sha=self.commit_sha+                             ))+ +                     # Stop if we've reached the end of the Jinja block+                     if '}}' in continuation_line:+                         break+ +                     j += 1+ +                 # Skip ahead past the multi-line block we just processed+                 i = j+ +             i += 1+ +     def check_ifelse_alignment(self):+         """+         Rule 2: Check if/else keywords align within same {{ }} brackets+ +         Example:+             variable: "{{ value+                        if condition+                        else other_value }}"+                        ^ if and else must align vertically+         """+         in_multiline_jinja = False+         jinja_lines = []+         jinja_start_line = 0+ +         for i, line in enumerate(self.lines, 1):+             # Detect start of multi-line Jinja expression+             if '"{{' in line and '}}' not in line:+                 in_multiline_jinja = True+                 jinja_lines = [line]+                 jinja_start_line = i+ +             elif in_multiline_jinja:+                 jinja_lines.append(line)+ +                 # Check if we've reached the end of the Jinja block+                 if '}}' in line:+                     # Find lines containing 'if' and 'else'+                     if_lines = [l for l in jinja_lines if ' if ' in l or l.strip().startswith('if ')]+                     else_lines = [l for l in jinja_lines if ' else ' in l or l.strip().startswith('else ')]+ +                     # Only check if both if and else exist in the same block+                     if if_lines and else_lines:+                         # Find indentation of 'if' and 'else' keywords+                         if_indent = None+                         else_indent = None+ +                         for l in jinja_lines:+                             if ' if ' in l:+                                 # Calculate column position where 'if' appears+                                 if_indent = len(l) - len(l.lstrip())+                             if ' else ' in l or l.strip().startswith('else '):+                                 else_indent = len(l) - len(l.lstrip())+ +                         # Check if if and else align+                         if if_indent is not None and else_indent is not None:+                             if if_indent != else_indent:+                                 diff = else_indent - if_indent+                                 # Get relative path for GitHub annotation+                                 try:+                                     relative_path = str(self.file_path.relative_to(Path.cwd()))+                                 except ValueError:+                                     relative_path = str(self.file_path)+ +                                 self.errors.append(LintError(+                                     file=relative_path,+                                     line=jinja_start_line,+                                     message=f"[ifelse-alignment] 'if' at column {if_indent} doesn't align with 'else' at column {else_indent} (off by {diff:+d})",+                                     repo_url=self.repo_url,+                                     commit_sha=self.commit_sha+                                 ))+ +                     # Reset state+                     in_multiline_jinja = False+                     jinja_lines = []+ +     def lint(self) -> List[LintError]:+         """Run all lint checks and return list of errors"""+         self.check_operator_alignment()+         self.check_ifelse_alignment()+         return self.errors+ + + def main():+     """Main entry point for the linter"""+     import os+ +     if len(sys.argv) < 2:+         print("Usage: python3 saltbox-defaults-linter.py <roles_directory>")+         print("\nExample:")+         print("  python3 saltbox-defaults-linter.py roles/")+         sys.exit(1)+ +     roles_dir = Path(sys.argv[1])+ +     if not roles_dir.exists():+         print(f"Error: Directory '{roles_dir}' does not exist")+         sys.exit(1)+ +     if not roles_dir.is_dir():+         print(f"Error: '{roles_dir}' is not a directory")+         sys.exit(1)+ +     # Get GitHub repo and commit info from environment variables (set by GitHub Actions)+     # GITHUB_REPOSITORY format: "owner/repo"+     # GITHUB_SHA: commit SHA that triggered the workflow+     github_repo = os.environ.get('GITHUB_REPOSITORY')+     github_sha = os.environ.get('GITHUB_SHA')+ +     # Build full repo URL if we have the repository name+     repo_url = f"https://github.com/{github_repo}" if github_repo else None+ +     all_errors = []+     files_checked = 0+ +     # Find and lint all defaults/main.yml files+     for defaults_file in sorted(roles_dir.glob("*/defaults/main.yml")):+         linter = DefaultsLinter(defaults_file, repo_url=repo_url, commit_sha=github_sha)+         errors = linter.lint()+         all_errors.extend(errors)+         files_checked += 1+ +     # Output results+     if all_errors:+         print(f"❌ Found {len(all_errors)} formatting error(s) in {files_checked} file(s):\n")+         for error in all_errors:+             print(error.to_github_annotation())+         print(f"\nTotal: {len(all_errors)} error(s)")+         sys.exit(1)+     else:+         print(f"✅ All {files_checked} role defaults files pass formatting checks")+         sys.exit(0)+ + + if __name__ == "__main__":+     main()

- import argparse- import cloudflare- from cloudflare import Cloudflare- import json- import sys- import datetime- from typing import List, cast- - - class CustomJSONEncoder(json.JSONEncoder):-     def default(self, obj):-         if isinstance(obj, datetime.datetime):-             return obj.strftime('%Y-%m-%dT%H:%M:%S.%fZ')-         return json.JSONEncoder.default(self, obj)- - - def fetch_dns_records(client: Cloudflare, zone_id: str, record_name: str) -> list:-     try:-         records = client.dns.records.list(zone_id=zone_id, name=record_name).to_dict()-         results = cast(List[dict], records["result"])-         return results-     except cloudflare.APIConnectionError as e:-         print(f'Error fetching DNS records: {e}', file=sys.stderr)-         raise-     except Exception as e:-         print(f'Unexpected error: {e}', file=sys.stderr)-         raise- - - def get_zone_id(client: Cloudflare, zone_name: str) -> str:-     try:-         zone = client.zones.list(name=zone_name)-         if len(zone.result) == 0:-             raise ValueError(f'Specified zone: {zone_name} was not found')-         return zone.result[0].id-     except cloudflare.APIConnectionError as e:-         print(f'Error fetching zone ID: {e}', file=sys.stderr)-         raise-     except Exception as e:-         print(f'Unexpected error: {e}', file=sys.stderr)-         raise- - - def main():-     parser = argparse.ArgumentParser(-         prog='Saltbox Cloudflare Helper',-         description='Parses Cloudflare Zone Records',-         epilog='')- -     parser.add_argument('--auth_key', required=True, help='API key for Cloudflare')-     parser.add_argument('--auth_email', required=True, help='Email associated with Cloudflare account')-     parser.add_argument('--zone_name', required=True, help='Name of the Cloudflare zone')-     parser.add_argument('--record', required=True, help='DNS record to fetch')- -     args = parser.parse_args()- -     cf = Cloudflare(api_email=args.auth_email, api_key=args.auth_key)- -     try:-         zone_id = get_zone_id(cf, args.zone_name)-         print(json.dumps(fetch_dns_records(cf, zone_id, args.record), cls=CustomJSONEncoder))-     except ValueError as e:-         print(f'Error: {e}', file=sys.stderr)-         exit(1)-     except Exception as e:-         print(f'Failed to fetch DNS records: {e}', file=sys.stderr)-         exit(1)- -     exit(0)- - - if __name__ == '__main__':-     main()

- requests==2.32.5- cloudflare==4.3.1

- #########################################################################- # Title:         Saltbox: DNS | Cloudflare | Checksum                   #- # Author(s):     salty                                                  #- # URL:           https://github.com/saltyorg/Saltbox                    #- # --                                                                    #- #########################################################################- #                   GNU General Public License v3.0                     #- #########################################################################- ---- - name: Cloudflare | Checksum | Get 'fetch_cloudflare_records.py' checksum-   ansible.builtin.stat:-     path: "{{ resources_path }}/roles/dns/files/fetch_cloudflare_records.py"-     checksum_algorithm: sha256-   register: repo_fetch_cloudflare_records_py_checksum- - - name: Cloudflare | Checksum | Get 'requirements.txt' checksum-   ansible.builtin.stat:-     path: "{{ resources_path }}/roles/dns/files/requirements.txt"-     checksum_algorithm: sha256-   register: repo_requirements_txt_checksum- - - name: Cloudflare | Checksum | Get installed 'fetch_cloudflare_records.py' checksum-   ansible.builtin.stat:-     path: "{{ cloudflare_path }}/fetch_cloudflare_records.py"-     checksum_algorithm: sha256-   register: installed_fetch_cloudflare_records_py_checksum- - - name: Cloudflare | Checksum | Get installed 'requirements.txt' checksum-   ansible.builtin.stat:-     path: "{{ cloudflare_path }}/requirements.txt"-     checksum_algorithm: sha256-   register: installed_requirements_txt_checksum- - - name: Cloudflare | Checksum | Check for updates-   ansible.builtin.set_fact:-     cloudflare_reinstall: true-   when: (not installed_fetch_cloudflare_records_py_checksum.stat.exists) or-         (not installed_requirements_txt_checksum.stat.exists) or-         (repo_fetch_cloudflare_records_py_checksum.stat.checksum != installed_fetch_cloudflare_records_py_checksum.stat.checksum) or-         (repo_requirements_txt_checksum.stat.checksum != installed_requirements_txt_checksum.stat.checksum)

- #########################################################################- # Title:         Saltbox: DNS | Cloudflare | Python                     #- # Author(s):     salty                                                  #- # URL:           https://github.com/saltyorg/Saltbox                    #- # --                                                                    #- #########################################################################- #                   GNU General Public License v3.0                     #- #########################################################################- ---- - name: "Cloudflare | Python | Verify Python {{ cloudflare_python_version }} installation"-   ansible.builtin.command: "{{ python_bin }} python find {{ cloudflare_python_version }} --managed-python"-   register: cloudflare_uv_python_path-   changed_when: false-   failed_when: false-   environment: "{{ python_environment }}"-   become: true-   become_user: "{{ user.name }}"- - - name: "Cloudflare | Python | Check if Python needs upgrading"-   ansible.builtin.set_fact:-     cloudflare_reinstall: "{{ (cloudflare_uv_python_path.rc != 0)-                               or (cloudflare_folder_symlink.stat.lnk_target is defined-                                  and (cloudflare_folder_symlink.stat.lnk_target != cloudflare_uv_python_path.stdout)) }}"

- #########################################################################- # Title:         Saltbox: DNS | Cloudflare | Setup                      #- # Author(s):     salty                                                  #- # URL:           https://github.com/saltyorg/Saltbox                    #- # --                                                                    #- #########################################################################- #                   GNU General Public License v3.0                     #- #########################################################################- ---- - name: Cloudflare | Setup | Setup venv block-   block:-     - name: Cloudflare | Setup | Cleanup folder-       ansible.builtin.file:-         path: "{{ cloudflare_path }}"-         state: absent- -     - name: Cloudflare | Setup | Create directory-       ansible.builtin.file:-         path: "{{ cloudflare_path }}"-         state: directory-         owner: "{{ user.name }}"-         group: "{{ user.name }}"-         mode: "0775"-         recurse: true- -     - name: Cloudflare | Setup | Import Cloudflare files-       ansible.builtin.copy:-         src: "{{ item }}"-         force: true-         dest: "{{ cloudflare_path }}/{{ item | basename }}"-         owner: "{{ user.name }}"-         group: "{{ user.name }}"-         mode: "0664"-       with_items: "{{ cloudflare_files }}"- -     - name: Cloudflare | Setup | Execute Python role-       ansible.builtin.include_role:-         name: "python"-       vars:-         python_version: "{{ cloudflare_python_version }}"- -     - name: "Cloudflare | Setup | Lookup Python {{ cloudflare_python_version }} installation"-       ansible.builtin.command: "{{ python_bin }} python find {{ cloudflare_python_version }} --managed-python"-       register: cloudflare_python_install_path_lookup-       changed_when: false-       environment: "{{ python_environment }}"-       become: true-       become_user: "{{ user.name }}"- -     - name: Cloudflare | Setup | Set Python version-       ansible.builtin.set_fact:-         cloudflare_python_install_path: "{{ cloudflare_python_install_path_lookup.stdout }}"- -     - name: Cloudflare | Setup | Delete venv folder-       ansible.builtin.file:-         path: "{{ cloudflare_venv_path }}"-         state: absent- -     - name: Cloudflare | Create venv-       ansible.builtin.command:-         cmd: "{{ cloudflare_python_install_path }} -m venv {{ cloudflare_venv_path }}"-       args:-         creates: "{{ cloudflare_venv_path }}"-       become: true-       become_user: "{{ user.name }}"- -     - name: Cloudflare | Install pip requirements-       ansible.builtin.pip:-         requirements: "{{ cloudflare_requirements_path }}"-         virtualenv: "{{ cloudflare_venv_path }}"-         virtualenv_command: "{{ cloudflare_venv_path }}/bin/python3 -m pip"-       become: true-       become_user: "{{ user.name }}"- -   rescue:-     - name: Cloudflare | Setup | Delete venv folder-       ansible.builtin.file:-         path: "{{ cloudflare_venv_path }}"-         state: absent- -     - name: Cloudflare | Setup | Print Failure-       ansible.builtin.fail:-         msg:-           - "Setting up the Cloudflare venv failed for some reason."-           - "This usually means issues with apt. Make sure 'sudo apt update' and 'sudo apt upgrade' works before retrying."

- ############################################################################- # Title:         Saltbox: Resources | Tasks | Instances | Get Readarr Info #- # Author(s):     salty                                                     #- # URL:           https://github.com/saltyorg/Saltbox                       #- # --                                                                       #- ############################################################################- #                   GNU General Public License v3.0                        #- ############################################################################- ---- - name: Resources | Tasks | Instances | Get Info | Check if Readarr exists-   ansible.builtin.stat:-     path: "{{ readarr_paths_config_location }}"-   register: readarr_paths_config_location_stat- - - name: Resources | Tasks | Instances | Get Info | Readarr API Key tasks-   when: readarr_paths_config_location_stat.stat.exists-   block:-     - name: Resources | Tasks | Instances | Get Info | Fetch Readarr API Key-       community.general.xml:-         path: "{{ readarr_paths_config_location }}"-         xpath: /Config/ApiKey-         content: text-       register: xmlresp- -     - name: Resources | Tasks | Instances | Get Info | Set 'readarr_info' variable-       ansible.builtin.set_fact:-         readarr_info: "{{ readarr_info | default({}) | combine({readarr_name: {'name': readarr_name, 'url': readarr_web_url, 'api_key': xmlresp.matches[0].ApiKey}}) }}"- - - name: Resources | Tasks | Instances | Get Info | Set 'readarr_info' variable-   ansible.builtin.set_fact:-     readarr_info: "{{ readarr_info | default({}) | combine({readarr_name: {'name': readarr_name, 'url': readarr_web_url, 'api_key': 'not installed'}}) }}"-   when: (not readarr_paths_config_location_stat.stat.exists)

- # config.toml- - # Hostname / IP- #- # Default: "localhost"- #- host = "0.0.0.0"- - # Port- #- # Default: 7474- #- port = 7474- - # Base url- # Set custom baseUrl eg /autobrr/ to serve in subdirectory.- # Not needed for subdomain, or by accessing with the :port directly.- #- # Optional- #- #baseUrl = "/autobrr/"- - # autobrr logs file- # If not defined, logs to stdout- #- # Optional- #- logPath = "log/autobrr.log"- - # Log level- #- # Default: "DEBUG"- #- # Options: "ERROR", "DEBUG", "INFO", "WARN", "TRACE"- #- logLevel = "INFO"- - # Session secret- # Can be generated by running: head /dev/urandom | tr -dc A-Za-z0-9 | head -c16- sessionSecret = "{{ autobrr_secret.stdout }}"

- #########################################################################- # Title:         Saltbox: Cloudplow | Disable Task                      #- # Author(s):     salty                                                  #- # URL:           https://github.com/saltyorg/Saltbox                    #- # --                                                                    #- #########################################################################- #                   GNU General Public License v3.0                     #- #########################################################################- ---- - name: Delete Service-   ansible.builtin.include_tasks: "{{ resources_tasks_path }}/systemd/delete_service.yml"-   vars:-     _service_name: "{{ cloudplow_service_name }}"

- import argparse- import cloudflare- from cloudflare import Cloudflare- - - def get_zone_id(client: Cloudflare, zone_name: str) -> str:-     try:-         zone = client.zones.list(name=zone_name)-         if len(zone.result) == 0:-             raise ValueError(f'Specified zone: {zone_name} was not found')-         return zone.result[0].id-     except cloudflare.APIConnectionError as e:-         exit(f'Error fetching zone ID: {e}')-     except Exception as e:-         exit(f'Unexpected error: {e}')- - - def get_ssl_tls_mode(auth_email, auth_key, zone_name):-     cf = Cloudflare(api_email=auth_email, api_key=auth_key)- -     zone_id = get_zone_id(cf, zone_name)- -     # Get the SSL/TLS settings for the zone-     try:-         ssl_settings = cf.zones.settings.get(setting_id='ssl', zone_id=zone_id).to_dict()-         ssl_mode = ssl_settings['value']-         print(f"{ssl_mode}")-     except cloudflare.APIConnectionError as e:-         exit(f'/zones/settings/ssl.get - {e} - API call failed')-     except Exception as e:-         exit(f'/zones/settings/ssl.get - {e} - API call failed')- - - def main():-     parser = argparse.ArgumentParser(-         prog='SSL/TLS Mode Checker',-         description='Retrieves Cloudflare SSL/TLS Encryption Mode for a Zone',-         epilog='')- -     parser.add_argument('--auth_key', required=True, help='Cloudflare API key')-     parser.add_argument('--auth_email', required=True, help='Cloudflare account email')-     parser.add_argument('--zone_name', required=True, help='Name of the Cloudflare zone')- -     args = parser.parse_args()- -     get_ssl_tls_mode(args.auth_email, args.auth_key, args.zone_name)- - - if __name__ == '__main__':-     main()

- ##########################################################################- # Title:         Saltbox: Jaeger | Default Variables                     #- # Author(s):     salty                                                   #- # URL:           https://github.com/saltyorg/Saltbox                     #- # --                                                                     #- ##########################################################################- #                   GNU General Public License v3.0                      #- ##########################################################################- ---- ################################- # Basics- ################################- - jaeger_name: jaeger- - ################################- # Paths- ################################- - jaeger_paths_folder: "{{ jaeger_name }}"- jaeger_paths_location: "{{ server_appdata_path }}/{{ jaeger_paths_folder }}"- jaeger_paths_folders_list:-   - "{{ jaeger_paths_location }}"- - ################################- # Web- ################################- - jaeger_web_subdomain: "{{ jaeger_name }}"- jaeger_web_domain: "{{ user.domain }}"- jaeger_web_port: "16686"- jaeger_web_url: "{{ 'https://' + (jaeger_web_subdomain + '.' + jaeger_web_domain-                  if (jaeger_web_subdomain | length > 0)-                  else jaeger_web_domain) }}"- - ################################- # DNS- ################################- - jaeger_dns_record: "{{ jaeger_web_subdomain }}"- jaeger_dns_zone: "{{ jaeger_web_domain }}"- jaeger_dns_proxy: "{{ dns.proxied }}"- - ################################- # Traefik- ################################- - jaeger_traefik_sso_middleware: "{{ traefik_default_sso_middleware }}"- jaeger_traefik_middleware_default: "{{ traefik_default_middleware }}"- jaeger_traefik_middleware_custom: ""- jaeger_traefik_certresolver: "{{ traefik_default_certresolver }}"- jaeger_traefik_enabled: true- jaeger_traefik_api_enabled: false- jaeger_traefik_api_endpoint: ""- - ################################- # Docker- ################################- - # Container- jaeger_docker_container: "{{ jaeger_name }}"- - # Image- jaeger_docker_image_pull: true- jaeger_docker_image_tag: "latest"- jaeger_docker_image: "jaegertracing/all-in-one:{{ jaeger_docker_image_tag }}"- - # Ports- jaeger_docker_ports_defaults: []- jaeger_docker_ports_custom: []- jaeger_docker_ports: "{{ jaeger_docker_ports_defaults-                          + jaeger_docker_ports_custom }}"- - # Envs- jaeger_docker_envs_default:-   TZ: "{{ tz }}"-   COLLECTOR_ZIPKIN_HTTP_PORT: "9411"- jaeger_docker_envs_custom: {}- jaeger_docker_envs: "{{ jaeger_docker_envs_default-                         | combine(jaeger_docker_envs_custom) }}"- - # Commands- jaeger_docker_commands_default: []- jaeger_docker_commands_custom: []- jaeger_docker_commands: "{{ jaeger_docker_commands_default-                             + jaeger_docker_commands_custom }}"- - # Volumes- jaeger_docker_volumes_default: []- jaeger_docker_volumes_custom: []- jaeger_docker_volumes: "{{ jaeger_docker_volumes_default-                            + jaeger_docker_volumes_custom }}"- - # Devices- jaeger_docker_devices_default: []- jaeger_docker_devices_custom: []- jaeger_docker_devices: "{{ jaeger_docker_devices_default-                            + jaeger_docker_devices_custom }}"- - # Hosts- jaeger_docker_hosts_default: {}- jaeger_docker_hosts_custom: {}- jaeger_docker_hosts: "{{ docker_hosts_common-                          | combine(jaeger_docker_hosts_default)-                          | combine(jaeger_docker_hosts_custom) }}"- - # Labels- jaeger_docker_labels_default: {}- jaeger_docker_labels_custom: {}- jaeger_docker_labels: "{{ docker_labels_common-                           | combine(jaeger_docker_labels_default)-                           | combine(jaeger_docker_labels_custom) }}"- - # Hostname- jaeger_docker_hostname: "{{ jaeger_name }}"- - # Networks- jaeger_docker_networks_alias: "{{ jaeger_name }}"- jaeger_docker_networks_default: []- jaeger_docker_networks_custom: []- jaeger_docker_networks: "{{ docker_networks_common-                             + jaeger_docker_networks_default-                             + jaeger_docker_networks_custom }}"- - # Capabilities- jaeger_docker_capabilities_default: []- jaeger_docker_capabilities_custom: []- jaeger_docker_capabilities: "{{ jaeger_docker_capabilities_default-                                 + jaeger_docker_capabilities_custom }}"- - # Security Opts- jaeger_docker_security_opts_default: []- jaeger_docker_security_opts_custom: []- jaeger_docker_security_opts: "{{ jaeger_docker_security_opts_default-                                  + jaeger_docker_security_opts_custom }}"- - # Restart Policy- jaeger_docker_restart_policy: unless-stopped- - # State- jaeger_docker_state: started

- #########################################################################- # Title:         Saltbox: Jaeger Role                                   #- # Author(s):     salty                                                  #- # URL:           https://github.com/saltyorg/Saltbox                    #- # --                                                                    #- #########################################################################- #                   GNU General Public License v3.0                     #- #########################################################################- ---- - name: Add DNS record-   ansible.builtin.include_tasks: "{{ resources_tasks_path }}/dns/tasker.yml"-   vars:-     dns_record: "{{ lookup('vars', role_name + '_dns_record') }}"-     dns_zone: "{{ lookup('vars', role_name + '_dns_zone') }}"-     dns_proxy: "{{ lookup('vars', role_name + '_dns_proxy') }}"- - - name: Remove existing Docker container-   ansible.builtin.include_tasks: "{{ resources_tasks_path }}/docker/remove_docker_container.yml"- - - name: Create directories-   ansible.builtin.include_tasks: "{{ resources_tasks_path }}/directories/create_directories.yml"- - - name: Create Docker container-   ansible.builtin.include_tasks: "{{ resources_tasks_path }}/docker/create_docker_container.yml"

- ##########################################################################- # Title:         Saltbox: Readarr | Default Variables                    #- # Author(s):     salty                                                   #- # URL:           https://github.com/saltyorg/Saltbox                     #- # --                                                                     #- ##########################################################################- #                   GNU General Public License v3.0                      #- ##########################################################################- ---- ################################- # Basics- ################################- - readarr_instances: ["readarr"]- - ################################- # Settings- ################################- - readarr_external_auth: true- - ################################- # Paths- ################################- - readarr_paths_folder: "{{ readarr_name }}"- readarr_paths_location: "{{ server_appdata_path }}/{{ readarr_paths_folder }}"- readarr_paths_folders_list:-   - "{{ readarr_paths_location }}"-   - "/mnt/local/Media/Books"- readarr_paths_config_location: "{{ readarr_paths_location }}/config.xml"- - ################################- # Web- ################################- - readarr_web_subdomain: "{{ readarr_name }}"- readarr_web_domain: "{{ user.domain }}"- readarr_web_port: "8787"- readarr_web_url: "{{ 'https://' + (lookup('vars', readarr_name + '_web_subdomain', default=readarr_web_subdomain) + '.' + lookup('vars', readarr_name + '_web_domain', default=readarr_web_domain)-                   if (lookup('vars', readarr_name + '_web_subdomain', default=readarr_web_subdomain) | length > 0)-                   else lookup('vars', readarr_name + '_web_domain', default=readarr_web_domain)) }}"- - ################################- # DNS- ################################- - readarr_dns_record: "{{ lookup('vars', readarr_name + '_web_subdomain', default=readarr_web_subdomain) }}"- readarr_dns_zone: "{{ lookup('vars', readarr_name + '_web_domain', default=readarr_web_domain) }}"- readarr_dns_proxy: "{{ dns.proxied }}"- - ################################- # Traefik- ################################- - readarr_traefik_sso_middleware: "{{ traefik_default_sso_middleware }}"- readarr_traefik_middleware_default: "{{ traefik_default_middleware-                                         + (',themepark-' + lookup('vars', readarr_name + '_name', default=readarr_name)-                                           if (readarr_themepark_enabled and global_themepark_plugin_enabled)-                                           else '') }}"- readarr_traefik_middleware_custom: ""- readarr_traefik_certresolver: "{{ traefik_default_certresolver }}"- readarr_traefik_enabled: true- readarr_traefik_api_enabled: true- readarr_traefik_api_endpoint: "PathPrefix(`/api`) || PathPrefix(`/feed`) || PathPrefix(`/ping`)"- - ################################- # API- ################################- - # default to blank- readarr_api_key:- - ################################- # THEME- ################################- - # Options can be found at https://github.com/themepark-dev/theme.park- readarr_themepark_enabled: false- readarr_themepark_app: "readarr"- readarr_themepark_theme: "{{ global_themepark_theme }}"- readarr_themepark_domain: "{{ global_themepark_domain }}"- readarr_themepark_addons: []- - ################################- # Docker- ################################- - # Container- readarr_docker_container: "{{ readarr_name }}"- - # Image- readarr_docker_image_pull: true- readarr_docker_image_repo: "ghcr.io/hotio/readarr"- readarr_docker_image_tag: "latest"- readarr_docker_image: "{{ lookup('vars', readarr_name + '_docker_image_repo', default=readarr_docker_image_repo)-                           + ':' + lookup('vars', readarr_name + '_docker_image_tag', default=readarr_docker_image_tag) }}"- - # Ports- readarr_docker_ports_defaults: []- readarr_docker_ports_custom: []- readarr_docker_ports: "{{ lookup('vars', readarr_name + '_docker_ports_defaults', default=readarr_docker_ports_defaults)-                           + lookup('vars', readarr_name + '_docker_ports_custom', default=readarr_docker_ports_custom) }}"- - # Envs- readarr_docker_envs_default:-   PUID: "{{ uid }}"-   PGID: "{{ gid }}"-   UMASK: "002"-   TZ: "{{ tz }}"- readarr_docker_envs_custom: {}- readarr_docker_envs: "{{ lookup('vars', readarr_name + '_docker_envs_default', default=readarr_docker_envs_default)-                          | combine(lookup('vars', readarr_name + '_docker_envs_custom', default=readarr_docker_envs_custom)) }}"- - # Commands- readarr_docker_commands_default: []- readarr_docker_commands_custom: []- readarr_docker_commands: "{{ lookup('vars', readarr_name + '_docker_commands_default', default=readarr_docker_commands_default)-                              + lookup('vars', readarr_name + '_docker_commands_custom', default=readarr_docker_commands_custom) }}"- - # Volumes- readarr_docker_volumes_default:-   - "{{ readarr_paths_location }}:/config"-   - "{{ server_appdata_path }}/scripts:/scripts"- readarr_docker_volumes_custom: []- readarr_docker_volumes: "{{ lookup('vars', readarr_name + '_docker_volumes_default', default=readarr_docker_volumes_default)-                             + lookup('vars', readarr_name + '_docker_volumes_custom', default=readarr_docker_volumes_custom) }}"- - # Devices- readarr_docker_devices_default: []- readarr_docker_devices_custom: []- readarr_docker_devices: "{{ lookup('vars', readarr_name + '_docker_devices_default', default=readarr_docker_devices_default)-                             + lookup('vars', readarr_name + '_docker_devices_custom', default=readarr_docker_devices_custom) }}"- - # Hosts- readarr_docker_hosts_default: {}- readarr_docker_hosts_custom: {}- readarr_docker_hosts: "{{ docker_hosts_common-                           | combine(lookup('vars', readarr_name + '_docker_hosts_default', default=readarr_docker_hosts_default))-                           | combine(lookup('vars', readarr_name + '_docker_hosts_custom', default=readarr_docker_hosts_custom)) }}"- - # Labels- readarr_docker_labels_default: {}- readarr_docker_labels_custom: {}- readarr_docker_labels: "{{ docker_labels_common-                            | combine(lookup('vars', readarr_name + '_docker_labels_default', default=readarr_docker_labels_default))-                            | combine((traefik_themepark_labels-                                      if (readarr_themepark_enabled and global_themepark_plugin_enabled)-                                      else {}),-                                      lookup('vars', readarr_name + '_docker_labels_custom', default=readarr_docker_labels_custom)) }}"- - # Hostname- readarr_docker_hostname: "{{ readarr_name }}"- - # Network Mode- readarr_docker_network_mode_default: "{{ docker_networks_name_common }}"- readarr_docker_network_mode: "{{ lookup('vars', readarr_name + '_docker_network_mode_default', default=readarr_docker_network_mode_default) }}"- - # Networks- readarr_docker_networks_alias: "{{ readarr_name }}"- readarr_docker_networks_default: []- readarr_docker_networks_custom: []- readarr_docker_networks: "{{ docker_networks_common-                              + lookup('vars', readarr_name + '_docker_networks_default', default=readarr_docker_networks_default)-                              + lookup('vars', readarr_name + '_docker_networks_custom', default=readarr_docker_networks_custom) }}"- - # Capabilities- readarr_docker_capabilities_default: []- readarr_docker_capabilities_custom: []- readarr_docker_capabilities: "{{ lookup('vars', readarr_name + '_docker_capabilities_default', default=readarr_docker_capabilities_default)-                                  + lookup('vars', readarr_name + '_docker_capabilities_custom', default=readarr_docker_capabilities_custom) }}"- - # Security Opts- readarr_docker_security_opts_default: []- readarr_docker_security_opts_custom: []- readarr_docker_security_opts: "{{ lookup('vars', readarr_name + '_docker_security_opts_default', default=readarr_docker_security_opts_default)-                                   + lookup('vars', readarr_name + '_docker_security_opts_custom', default=readarr_docker_security_opts_custom) }}"- - # Restart Policy- readarr_docker_restart_policy: unless-stopped- - # State- readarr_docker_state: started

- #########################################################################- # Title:         Saltbox: Readarr Role                                  #- # Author(s):     salty                                                  #- # URL:           https://github.com/saltyorg/Saltbox                    #- # --                                                                    #- #########################################################################- #                   GNU General Public License v3.0                     #- #########################################################################- ---- - name: "Execute Readarr roles"-   ansible.builtin.include_tasks: main2.yml-   vars:-     readarr_name: "{{ instance }}"-   with_items: "{{ readarr_instances }}"-   loop_control:-     loop_var: instance

- #########################################################################- # Title:         Saltbox: Readarr                                       #- # Author(s):     salty                                                  #- # URL:           https://github.com/saltyorg/Saltbox                    #- # --                                                                    #- #########################################################################- #                   GNU General Public License v3.0                     #- #########################################################################- ---- - name: Add DNS record-   ansible.builtin.include_tasks: "{{ resources_tasks_path }}/dns/tasker.yml"-   vars:-     dns_record: "{{ lookup('vars', role_name + '_dns_record') }}"-     dns_zone: "{{ lookup('vars', role_name + '_dns_zone') }}"-     dns_proxy: "{{ lookup('vars', role_name + '_dns_proxy') }}"- - - name: Remove existing Docker container-   ansible.builtin.include_tasks: "{{ resources_tasks_path }}/docker/remove_docker_container.yml"- - - name: Create directories-   ansible.builtin.include_tasks: "{{ resources_tasks_path }}/directories/create_directories.yml"- - - name: Create Docker container-   ansible.builtin.include_tasks: "{{ resources_tasks_path }}/docker/create_docker_container.yml"- - - name: "Tweak Settings when SSO is enabled"-   ansible.builtin.import_tasks: "subtasks/auth.yml"-   when: (lookup('vars', readarr_name + '_traefik_sso_middleware', default=readarr_traefik_sso_middleware) | length > 0) and lookup('vars', readarr_name + '_external_auth', default=readarr_external_auth)

- #########################################################################- # Title:         Saltbox: Readarr | Auth Tasks                          #- # Author(s):     salty                                                  #- # URL:           https://github.com/saltyorg/Saltbox                    #- # --                                                                    #- #########################################################################- #                   GNU General Public License v3.0                     #- #########################################################################- ---- - name: Auth | Wait for 'config.xml' to be created-   ansible.builtin.wait_for:-     path: "/opt/{{ readarr_name }}/config.xml"-     state: present- - - name: Auth | Wait for 10 seconds-   ansible.builtin.wait_for:-     timeout: 10- - - name: Auth | Lookup AuthenticationMethod value-   community.general.xml:-     path: "/opt/{{ readarr_name }}/config.xml"-     xpath: "/Config/AuthenticationMethod"-     content: "text"-   register: xmlresp- - - name: Auth | Toggle AuthenticationMethod to External-   when: ((xmlresp.matches[0].AuthenticationMethod is defined) and (xmlresp.matches[0].AuthenticationMethod != 'External'))-   block:-     - name: Auth | Change the 'AuthenticationMethod' attribute to 'External'-       community.general.xml:-         path: "/opt/{{ readarr_name }}/config.xml"-         xpath: "/Config/AuthenticationMethod"-         value: "External"- -     - name: Auth | Restart Docker container-       ansible.builtin.include_tasks: "{{ resources_tasks_path }}/docker/restart_docker_container.yml"

- #!/usr/bin/env bash- #########################################################################- # Title:         Plex Autoscan URL Script                               #- # Author(s):     desimaniac                                             #- # URL:           https://github.com/saltyorg/Saltbox                    #- # Description:   Prints out the Plex Autoscan URL.                      #- # --                                                                    #- #########################################################################- #                   GNU General Public License v3.0                     #- #########################################################################- - ################################- # Constants- ################################- - # Regular colors- readonly NORMAL="\033[0;39m"- readonly GREEN="\033[32m"- - # Bold colors- readonly BRED="\033[1;31m"- readonly BWHITE="\033[1;37m"- readonly BBLUE="\033[1;34m"- - # Config files- readonly SB_ANSIBLE="/srv/git/saltbox/ansible.cfg"- readonly SB_ACCOUNTS="/srv/git/saltbox/accounts.yml"- readonly PAS_CONFIG="/opt/plex_autoscan/config/config.json"- - # Boolean vars- readonly TRUE=1- readonly FALSE=0- - ################################- # Functions- ################################- - function banner1() {-     if [ -x "$(command -v toilet)" ]; then-         echo ""-         toilet 'Plex Autoscan URL' -f standard --filter metal --filter border:metal --width 86-     fi- }- - function banner2() {- echo -e "- ${GREEN}┌───────────────────────────────────────────────────────────────────────────────────┐- ${GREEN}│ Title:             Plex Autoscan URL Script                                       │- ${GREEN}│ Author(s):         desimaniac                                                     │- ${GREEN}│ URL:               https://github.com/saltyorg/Saltbox                            │- ${GREEN}│ Description:       Prints out the Plex Autoscan URL.                              │- ${GREEN}├───────────────────────────────────────────────────────────────────────────────────┤- ${GREEN}│                        GNU General Public License v3.0                            │- ${GREEN}└───────────────────────────────────────────────────────────────────────────────────┘- ${NORMAL}"- }- - function sanity_check() {-     # Sanity checks-     if ! [[ -x "$(command -v jq)" ]]; then-         echo -e ${BRED}" Error: "${NORMAL}"'"${BWHITE}"jq"${NORMAL}"' is not installed."\-         ${NORMAL}"Run '"${BWHITE}"sudo apt-get install jq"${NORMAL}"' to install." >&2-         echo ""-         exit 1-     elif ! [[ -x "$(command -v yyq)" ]]; then-         echo -e ${BRED}" Error: "${NORMAL}"'"${BWHITE}"yyq"${NORMAL}"' is not installed."\-         ${NORMAL}"Run '"${BWHITE}"sb install yyq"${NORMAL}"' to install." >&2-         echo ""-         exit 1-     elif [[ ! -f ${PAS_CONFIG} ]]; then-         echo -e ${BRED}" Error: "${NORMAL}"File '"${BWHITE}${PAS_CONFIG}${NORMAL}"' is not found." >&2-         echo ""-         exit 1-     elif [[ ! -f ${SB_ACCOUNTS} ]]; then-         echo -e ${BRED}" Error: "${NORMAL}"File '"${BWHITE}${SB_ACCOUNTS}${NORMAL}"' is not found." >&2-         echo ""-         exit 1-     fi- -     # Validate JSON file-     cat ${PAS_CONFIG} | jq -e . >/dev/null 2>&1-     rc=$?-     if [[ $rc != 0 ]]; then-         echo -e ${BRED}" Error: "${NORMAL}"Invalid JSON format in '"${BWHITE}${PAS_CONFIG}${NORMAL}"'."  >&2-         echo ""-         echo -e " See 'JSON Format Errors' on the Wiki FAQ page."  >&2-         echo ""-         exit 1-     fi- }- - function build_url() {-     # Get variables from Plex Autoscan config-     SERVER_IP=$(cat ${PAS_CONFIG} | jq -r .SERVER_IP)-     SERVER_PORT=$(cat ${PAS_CONFIG} | jq -r .SERVER_PORT)-     SERVER_PASS=$(cat ${PAS_CONFIG} | jq -r .SERVER_PASS)- -     # Get variables from Saltbox account settings-     DOMAIN=$(yyq '.user.domain' ${SB_ACCOUNTS} )- -     # If SERVER_IP is 0.0.0.0, assign public IP address to REAL_IP.-     if [[ ${SERVER_IP} = 0.0.0.0 ]]; then-         REAL_IP="$(dig -4 TXT +short o-o.myaddr.l.google.com @ns1.google.com | awk -F'\"' '{ print $2}')"-     else-         REAL_IP=${SERVER_IP}-     fi- -     # Declare Subdomains Array-     declare -a SUBDOMAINS=(-         "plex.${DOMAIN}"-         "mediabox.${DOMAIN}"-         "saltbox.${DOMAIN}"-         "${REAL_IP}"-     )- -     # Get length of the subdomains array-     SUBDOMAIN_LEN=${#SUBDOMAINS[@]}- -     # Declare variables for while loop-     declare -i COUNT=0-     SUBDOMAIN_IP=""- -     # Determine which subdomain points to the actual host IP address (vs a CDN one, for example)-     while [[ ((${REAL_IP} != ${SUBDOMAIN_IP}) && (${COUNT} < ${SUBDOMAIN_LEN})) ]]; do-         SUBDOMAIN=${SUBDOMAINS[$COUNT]}-         SUBDOMAIN_IP=$(dig -4 +short ${SUBDOMAIN} @8.8.8.8)-         COUNT+=1-     done- }- - # Print Plex Autoscan URL- function print_url() {- -     if (( SIMPLE - 1 )); then-         echo -e ${BWHITE}"Your Plex Autoscan URL:"-         echo -e ${BBLUE}"http://${SUBDOMAIN}:${SERVER_PORT}/${SERVER_PASS}"${NORMAL}-         echo ""-     else-         echo http://${SUBDOMAIN}:${SERVER_PORT}/${SERVER_PASS}-     fi- - }- - ################################- # Argument Parser- ################################- - ## https://stackoverflow.com/a/39398359- SIMPLE=${FALSE}- # As long as there is at least one more argument, keep looping- while [[ $# -gt 0 ]]; do-     key="$1"-     case "$key" in-         # This flag type option will catch either -s or --simple-         -s|--simple)-         SIMPLE=${TRUE}-         ;;-         *)-         # Exit when unknown argument is passed-         echo "Unknown option '$key'"-         exit 10-         ;;-     esac-     shift- done- - ################################- # Main- ################################- - function main ()- {-     if [[ ${SIMPLE} == ${FALSE} ]]; then-         banner1-         banner2-     fi-         sanity_check-         build_url-         print_url- }- - main "$@"

- #!/bin/bash- # if script name is plexsql.sh then- # usage is - ./plexsql.sh "select something from some_table where something = something_else"- # - mkdir -p /opt/plexsql- sqlplex="/opt/plexsql/Plex SQLite"- docker stop plex- docker cp plex:/usr/lib/plexmediaserver/. /opt/plexsql- cd "/opt/plex/Library/Application Support/Plex Media Server/Plug-in Support/Databases"- cp com.plexapp.plugins.library.db com.plexapp.plugins.library.db.original- "$sqlplex" com.plexapp.plugins.library.db "$1"- - #and if you want to do something other than select statements use this instead- #cp com.plexapp.plugins.library.db com.plexapp.plugins.library.db.original- #"$sqlplex" com.plexapp.plugins.library.db "DROP index 'index_title_sort_naturalsort'"- #"$sqlplex" com.plexapp.plugins.library.db "DELETE from schema_migrations where version='20180501000000'"- #"$sqlplex" com.plexapp.plugins.library.db "$1"

- #!/bin/bash- #########################################################################- # Title:         Restart Running Containers Script                      #- # Author(s):     desimaniac                                             #- # URL:           https://github.com/saltyorg/Saltbox                    #- # Description:   Stop running containers and start them back up.        #- # --                                                                    #- #########################################################################- #                   GNU General Public License v3.0                     #- #########################################################################- - - # Regular color(s)- NORMAL="\033[0;39m"- GREEN="\033[32m"- - echo -e "- $GREEN-  ┌───────────────────────────────────────────────────────────────────────────────────┐-  │ Title:             Restart Running Containers Script                              │-  │ Author(s):         desimaniac, salty                                              │-  │ URL:               https://github.com/saltyorg/Saltbox                            │-  │ Description:       Stop running containers and start them back up.                │-  ├───────────────────────────────────────────────────────────────────────────────────┤-  │                        GNU General Public License v3.0                            │-  └───────────────────────────────────────────────────────────────────────────────────┘- $NORMAL- "- - containers=$(docker ps -q)- echo Stopping $containers- docker=$(docker stop $containers)- - sleep 3- - echo Starting $containers- docker=$(docker start $containers)

- #!/srv/ansible/venv/bin/python3- """- -     #########################################################################-     # Title:         Settings Updater Script                                #-     # Author(s):     l3uddz, chazlarson, salty                              #-     # URL:           https://github.com/saltyorg/Saltbox                    #-     # Description:   Adds variables to settings.yml.                        #-     # --                                                                    #-     #########################################################################-     #                   GNU General Public License v3.0                     #-     #########################################################################- - """- import logging- import os- import sys- from logging.handlers import RotatingFileHandler- - from ruamel.yaml import YAML- from ruamel.yaml.comments import CommentedMap- - ############################################################- # INIT- ############################################################- - - log = None- - - def init_logging(playbook_path):-     # log settings-     log_format = '%(asctime)s - %(levelname)-10s - %(name)-35s - %(funcName)-35s - %(message)s'-     log_file_path = os.path.join(playbook_path, "settings-updater.log")-     log_level = logging.DEBUG- -     # init root_logger-     log_formatter = logging.Formatter(log_format)-     root_logger = logging.getLogger()-     root_logger.setLevel(log_level)- -     # init console_logger-     console_handler = logging.StreamHandler(sys.stdout)-     console_handler.setFormatter(log_formatter)-     root_logger.addHandler(console_handler)- -     # init file_logger-     file_handler = RotatingFileHandler(-         log_file_path,-         maxBytes=1024 * 1024 * 5,-         backupCount=5-     )-     file_handler.setFormatter(log_formatter)-     root_logger.addHandler(file_handler)- -     # Set chosen logging level-     root_logger.setLevel(log_level)- -     # Get logger-     return root_logger.getChild("settings-updater")- - - ############################################################- # UPDATER- ############################################################- - def load_settings(file_to_load):-     yaml_instance = YAML()-     yaml_instance.preserve_quotes = True- -     settings = None-     try:-         with open(file_to_load, "r") as f:-             settings = yaml_instance.load(f)-     except Exception:-         log.exception("Exception loading %s: ", file_to_load)-     return settings- - def dump_settings(settings, file_to_dump):-     dumped = False-     try:-         yaml_instance = YAML()-         yaml_instance.preserve_quotes = True-         with open(file_to_dump, 'w') as fp:-             yaml_instance.dump(settings, fp)-         dumped = True-     except Exception:-         log.exception("Exception dumping upgraded %s: ", file_to_dump)-     return dumped- - def is_remote_entry(thing):-     ret_val = False-     if type(thing) == CommentedMap:-         rem_set = {'port', 'remote', 'template', 'cache'}-         for k in thing.keys():-             ret_val = ret_val or (k in rem_set)-     return ret_val- - def _inner_upgrade(settings1, settings2, key=None, overwrite=False):-     sub_upgraded = False-     merged = settings2.copy()- -     if isinstance(settings1, dict):-         for k, v in settings1.items():-             # missing k-             if k not in settings2:-                 merged[k] = v-                 sub_upgraded = True-                 if not key:-                     log.info("Added %r setting: %s", str(k), str(v))-                 else:-                     log.info("Added %r to setting %r: %s", str(k), str(key), str(v))-                 continue- -             # iterate children-             if isinstance(v, dict) or isinstance(v, list):-                 merged[k], did_upgrade = _inner_upgrade(settings1[k], settings2[k], key=k,-                                                                 overwrite=overwrite)-                 sub_upgraded = did_upgrade if did_upgrade else sub_upgraded-             elif settings1[k] != settings2[k] and overwrite:-                 merged = settings1-                 sub_upgraded = True-     elif isinstance(settings1, list) and key:-         for v in settings1:-             is_remote = is_remote_entry(v)-             might_not_want_it = len(settings2) > 0-             if v not in settings2 and not is_remote and not might_not_want_it:-                 merged.append(v)-                 sub_upgraded = True-                 log.info("Added to setting %r: %s", str(key), str(v))-                 continue- -     return merged, sub_upgraded- - def upgrade_settings(defaults, currents):-     upgraded_settings, upgraded = _inner_upgrade(defaults, currents)-     return upgraded, upgraded_settings- - ############################################################- # MAIN- ############################################################- - if __name__ == "__main__":-     # get playbook dir-     if not len(sys.argv) >= 4:-         print("3 arguments must be supplied, playbook_dir default_settings current_settings")-         sys.exit(1)-     playbook_dir = sys.argv[1]-     default_file = sys.argv[2]-     current_file = sys.argv[3]- -     # init logging-     log = init_logging(playbook_dir)- -     # load settings-     default_settings = load_settings(os.path.join(playbook_dir, default_file))-     if not default_settings:-         log.error("Failed loading \'%s\'. Aborting...", default_file)-         sys.exit(1)- -     current_settings = load_settings(os.path.join(playbook_dir, current_file))-     if not current_settings:-         log.error("Failed loading \'%s\'. Aborting...", current_file)-         sys.exit(1)- -     # compare/upgrade settings-     did_upgrade, upgraded_settings = upgrade_settings(default_settings, current_settings)-     if not did_upgrade:-         log.info("There were no settings changes to apply.")-         sys.exit(0)-     else:-         if not dump_settings(upgraded_settings, os.path.join(playbook_dir, current_file)):-             log.error("Failed dumping updated \'%s\'.", current_file)-             sys.exit(1)-         log.info("Successfully upgraded: \'%s\'.", current_file)-         sys.exit(2)

- #########################################################################- # Title:         Saltbox: Settings Role                                 #- # Author(s):     desimaniac                                             #- # URL:           https://github.com/saltyorg/Saltbox                    #- # --                                                                    #- #########################################################################- #                   GNU General Public License v3.0                     #- #########################################################################- ---- - name: "Settings | Start"-   ansible.builtin.include_tasks: "subtasks/start.yml"- - - name: "Settings | Main 2"-   ansible.builtin.include_tasks: "main2.yml"-   loop: "{{ config_files }}"-   loop_control:-     loop_var: outer_item- - - name: "Settings | Finish"-   ansible.builtin.include_tasks: "subtasks/finish.yml"

- #########################################################################- # Title:         Saltbox: Settings | Main 2                             #- # Author(s):     desimaniac                                             #- # URL:           https://github.com/saltyorg/Saltbox                    #- # --                                                                    #- #########################################################################- #                   GNU General Public License v3.0                     #- #########################################################################- ---- - name: "Settings | Copy"-   ansible.builtin.include_tasks: "subtasks/copy.yml"-   vars:-     file: "{{ outer_item }}"- - - name: "Settings | Migrator"-   ansible.builtin.include_tasks: "subtasks/migrator.yml"-   vars:-     file: "{{ outer_item }}"- - - name: "Settings | Updater"-   ansible.builtin.include_tasks: "subtasks/updater.yml"-   vars:-     file: "{{ outer_item }}"

- #########################################################################- # Title:         Saltbox: Settings | Copy                               #- # Author(s):     desimaniac                                             #- # URL:           https://github.com/saltyorg/Saltbox                    #- # --                                                                    #- #########################################################################- #                   GNU General Public License v3.0                     #- #########################################################################- ---- # Check for config files and import they are missing- - name: "Copy | Check if '{{ file }}' exists"-   ansible.builtin.stat:-     path: "{{ playbook_dir }}/{{ file }}"-   register: file0- - - name: "Copy | Copy '{{ file }}.default' to '{{ file }}'"-   ansible.builtin.copy:-     src: "{{ playbook_dir }}/defaults/{{ file }}.default"-     dest: "{{ playbook_dir }}/{{ file }}"-     owner: "{{ saltbox_yml.stat.uid }}"-     group: "{{ saltbox_yml.stat.gid }}"-     mode: "0664"-   when: (not file0.stat.exists)

- #########################################################################- # Title:         Saltbox: Settings | Finish                             #- # Author(s):     desimaniac                                             #- # URL:           https://github.com/saltyorg/Saltbox                    #- # --                                                                    #- #########################################################################- #                   GNU General Public License v3.0                     #- #########################################################################- ---- - name: "Finish | Check 'settings-updater.py' for new settings"-   ansible.builtin.debug: # noqa jinja[invalid]-     msg:-       - "The 'settings_updater.py' script updated the following-           file{{ 's' if (files_updated_successfully | length > 1) else '' }}: '{{ files_updated_successfully | join(', ') | trim }}'"-       - "Please check {{ 'these files' if (files_updated_successfully | length > 1) else 'this file' }} for the newly added settings"-       - "You can also review the log file: 'settings-updater.log'"-   when: (files_updated_successfully | length > 0)- - - name: Traefik 3.0 Migration block-   when: traefik3_migration-   block:-     - name: Provide link to migration docs # Update to main docs page when docs are updated-       ansible.builtin.pause:-         prompt: "Make sure you read the migration docs (press enter to continue): https://docs.saltbox.dev/saltbox/upgrade/traefik3/"- - # Make sure accounts.yml has been filled in by user- - name: "Finish | Get stats on 'accounts.yml' for hash check"-   ansible.builtin.stat:-     path: "{{ playbook_dir }}/accounts.yml"-   register: accounts_yml- - - name: "Finish | Get stats on 'accounts.yml.default' for hash check"-   ansible.builtin.stat:-     path: "{{ playbook_dir }}/defaults/accounts.yml.default"-   register: accounts_yml_default- - # Sanity Checks- - name: "Finish | Ensure that 'accounts.yml' is configured"-   ansible.builtin.assert:-     that:-       - accounts_yml.stat.exists-       - accounts_yml.stat.checksum != accounts_yml_default.stat.checksum-       - user.domain != "testsaltbox.ml"-     msg: "You must configure 'accounts.yml' before running the Saltbox installer"- - # Exit playbook When necessary- - name: Finish | Exit Tasks-   when: exit_is_necessary-   block:-     - name: "Finish | Check 'settings-updater.py' run status for errors"-       ansible.builtin.debug:-         msg:-           - "The 'settings_updater.py' script exited with an error when updating the following-               file{{ 's' if (files_updated_unsuccessfully | length > 1) else '' }}: '{{ files_updated_unsuccessfully | join(', ') | trim }}'"-           - "Please check 'settings-updater.log' for details"-       when: (files_updated_unsuccessfully | length > 0)- -     - name: "Finish | Exit so that user can check updated config files"-       ansible.builtin.debug:-         msg: "Saltbox Installer will now exit."- -     - name: "Finish | Exit"-       ansible.builtin.meta: end_play

- #########################################################################- # Title:         Saltbox: Settings | Migrator                           #- # Author(s):     desimaniac, salty                                      #- # URL:           https://github.com/saltyorg/Saltbox                    #- # --                                                                    #- #########################################################################- #                   GNU General Public License v3.0                     #- #########################################################################- ---- - name: Migrator | Migrations for all config files-   block:-     - name: Migrator | All | Migration 01-       ansible.builtin.include_tasks: "migrator/all/migration_01.yml"-       when: (file != "backup_config.yml")- - - name: Migrator | Migrations for 'accounts.yml'-   when: (file == "accounts.yml")-   block:-     - name: Migrator | 'accounts.yml' | Migration 01-       ansible.builtin.include_tasks: "migrator/accounts_yml/migration_01.yml"- - - name: Migrator | Migrations for 'adv_settings.yml'-   when: (file == "adv_settings.yml")-   block:-     - name: Migrator | 'adv_settings.yml' | Migration 01-       ansible.builtin.include_tasks: "migrator/adv_settings_yml/migration_01.yml"- - - name: Migrator | Migrations for 'backup_config.yml'-   when: (file == "backup_config.yml")-   block:-     - name: Migrator | 'backup_config.yml' | Migration 01-       ansible.builtin.include_tasks: "migrator/backup_config_yml/migration_01.yml"- - - name: Migrator | Migrations for 'providers.yml'-   when: (file == "providers.yml")-   block:-     - name: Migrator | 'providers.yml' | Migration 01-       ansible.builtin.include_tasks: "migrator/providers_yml/migration_01.yml"- - - name: Migrator | Migrations for 'settings.yml'-   when: (file == "settings.yml")-   block:-     - name: Migrator | 'settings.yml' | Migration 01-       ansible.builtin.include_tasks: "migrator/settings_yml/migration_01.yml"

- ########################################################################################- # Title:         Saltbox: Settings | Migrator | 'accounts.yml' | Migration 01          #- # Author(s):     desimaniac                                                            #- # URL:           https://github.com/saltyorg/Saltbox                                   #- # --                                                                                   #- ########################################################################################- #                            GNU General Public License v3.0                           #- ########################################################################################- ---- - name: "Migrator | 'accounts.yml' | Migration 01 | Set variables"-   ansible.builtin.set_fact:-     plex_settings: "{{ not ((plex is undefined)-                             or-                             (plex is none)-                             or-                             (plex | trim | length == 0)) }}"- - - name: Migrator | 'adv_settings.yml' | Migration 01 | Delete 'plex' dict-   ansible.builtin.shell: |-     yyq -i 'del(.plex)' {{ playbook_dir }}/{{ file }}-   become: true-   become_user: "{{ saltbox_yml.stat.pw_name }}"-   when: plex_settings- - - name: Migrator | 'accounts.yml' | Migration 01 | Remove 'null' values-   ansible.builtin.replace:-     path: "{{ playbook_dir }}/{{ file }}"-     regexp: '(?<=: )\bnull\s*$'-     replace: ''-     owner: "{{ saltbox_yml.stat.uid }}"-     group: "{{ saltbox_yml.stat.gid }}"-     mode: "0664"- - - name: Migrator | 'accounts.yml' | Migration 01 | Re-import Variables-   ansible.builtin.include_vars: "{{ playbook_dir }}/{{ file }}"

- ########################################################################################- # Title:         Saltbox: Settings | Migrator | 'adv_settings.yml' | Migration 01      #- # Author(s):     desimaniac, salty                                                     #- # URL:           https://github.com/saltyorg/Saltbox                                   #- # --                                                                                   #- ########################################################################################- #                            GNU General Public License v3.0                           #- ########################################################################################- - ---- - name: "Migrator | 'adv_settings.yml' | Migration 01 | Set variables"-   ansible.builtin.set_fact:-     old_traefik_tls_settings: "{{ not ((traefik is undefined)-                                   or-                                   (traefik is none)-                                   or-                                   (traefik | trim | length == 0)-                                   or-                                   (traefik.tls is undefined)-                                   or-                                   (traefik.tls is none)-                                   or-                                   (traefik.tls | trim | length == 0)) }}"-     old_traefik_http_settings: "{{ not ((traefik is undefined)-                                    or-                                    (traefik is none)-                                    or-                                    (traefik | trim | length == 0)-                                    or-                                    (traefik.http is undefined)-                                    or-                                    (traefik.http is none)-                                    or-                                    (traefik.http | trim | length == 0)) }}"-     old_zerossl_settings: "{{ not ((dns is undefined)-                               or-                               (dns is none)-                               or-                               (dns | trim | length == 0)-                               or-                               (dns.zerossl is undefined)-                               or-                               (dns.zerossl is none)-                               or-                               (dns.zerossl | trim | length == 0)) }}"-     traefik_metrics_settings: "{{ not ((traefik is undefined)-                                   or-                                   (traefik is none)-                                   or-                                   (traefik | trim | length == 0)-                                   or-                                   (traefik.metrics is undefined)-                                   or-                                   (traefik.metrics is none)-                                   or-                                   (traefik.metrics | trim | length == 0)) }}"-     old_dockerhub: "{{ not ((dockerhub is undefined)-                        or-                        (dockerhub is none)-                        or-                        (dockerhub | trim | length == 0)) }}"-     old_dns_enabled: "{{ not ((dns.enabled is undefined)-                          or-                          (dns.enabled is none)-                          or-                          (dns.enabled | trim | length == 0)) }}"-     old_feeder_mount: "{{ not ((mounts.feeder is undefined)-                           or-                           (mounts.feeder is none)-                           or-                           (mounts.feeder | trim | length == 0)) }}"-     old_remote_mount: "{{ not ((mounts.remote is undefined)-                           or-                           (mounts.remote is none)-                           or-                           (mounts.remote | trim | length == 0)) }}"- - - name: Migrator | 'adv_settings.yml' | Migration 01 | Delete 'traefik.tls' dict-   ansible.builtin.shell: |-     yyq -i 'del(.traefik.tls)' {{ playbook_dir }}/{{ file }}-   become: true-   become_user: "{{ saltbox_yml.stat.pw_name }}"-   when: old_traefik_tls_settings- - - name: Migrator | 'adv_settings.yml' | Migration 01 | Rebuild 'traefik.cert.http_validation' dict-   ansible.builtin.shell: |-     yyq -i '.traefik.cert.http_validation = "{{ 'yes' if (traefik.http | default(false)) else 'no' }}"' {{ playbook_dir }}/{{ file }}-   become: true-   become_user: "{{ saltbox_yml.stat.pw_name }}"-   when: old_traefik_http_settings- - - name: Migrator | 'adv_settings.yml' | Migration 01 | Delete 'traefik.http' dict-   ansible.builtin.shell: |-     yyq -i 'del(.traefik.http)' {{ playbook_dir }}/{{ file }}-   become: true-   become_user: "{{ saltbox_yml.stat.pw_name }}"-   when: old_traefik_http_settings- - - name: Migrator | 'adv_settings.yml' | Migration 01 | Rebuild 'traefik.cert.zerossl' dict-   ansible.builtin.shell: |-     yyq -i '.traefik.cert.zerossl = "{{ 'yes' if (dns.zerossl | default(false)) else 'no' }}"' {{ playbook_dir }}/{{ file }}-   become: true-   become_user: "{{ saltbox_yml.stat.pw_name }}"-   when: old_zerossl_settings- - - name: Migrator | 'adv_settings.yml' | Migration 01 | Delete 'dns.zerossl' dict-   ansible.builtin.shell: |-     yyq -i 'del(.dns.zerossl)' {{ playbook_dir }}/{{ file }}-   become: true-   become_user: "{{ saltbox_yml.stat.pw_name }}"-   when: old_zerossl_settings- - - name: Migrator | 'adv_settings.yml' | Migration 01 | Rebuild 'traefik.metrics' dict-   ansible.builtin.shell: |-     yyq -i '.traefik.metrics = "no"' {{ playbook_dir }}/{{ file }}-   become: true-   become_user: "{{ saltbox_yml.stat.pw_name }}"-   when: (not traefik_metrics_settings)- - - name: Migrator | 'adv_settings.yml' | Migration 01 | Delete 'dockerhub' dict-   ansible.builtin.shell: |-     yyq -i 'del(.dockerhub)' {{ playbook_dir }}/{{ file }}-   become: true-   become_user: "{{ saltbox_yml.stat.pw_name }}"-   when: old_dockerhub- - - name: Migrator | 'adv_settings.yml' | Migration 01 | Delete 'dns.enabled' key-pair-   ansible.builtin.shell: |-     yyq -i 'del(.dns.enabled)' {{ playbook_dir }}/{{ file }}-   become: true-   become_user: "{{ saltbox_yml.stat.pw_name }}"-   when: old_dns_enabled- - - name: Migrator | 'adv_settings.yml' | Migration 01 | Delete 'mounts.feeder' dict-   ansible.builtin.shell: |-     yyq -i 'del(.mounts.feeder)' {{ playbook_dir }}/{{ file }}-   become: true-   become_user: "{{ saltbox_yml.stat.pw_name }}"-   when: old_feeder_mount- - - name: Migrator | 'adv_settings.yml' | Migration 01 | Delete 'mounts.remote' dict-   ansible.builtin.shell: |-     yyq -i 'del(.mounts.remote)' {{ playbook_dir }}/{{ file }}-   become: true-   become_user: "{{ saltbox_yml.stat.pw_name }}"-   when: old_remote_mount- - - name: Migrator | 'adv_settings.yml' | Migration 01 | Delete 'gpu.nvidia' dict-   ansible.builtin.shell: |-     yyq -i 'del(.gpu.nvidia)' {{ playbook_dir }}/{{ file }}-   become: true-   become_user: "{{ saltbox_yml.stat.pw_name }}"-   when: gpu is defined and gpu.nvidia is defined- - - name: Migrator | 'adv_settings.yml' | Migration 01 | Delete 'traefik.tracing' dict-   ansible.builtin.shell: |-     yyq -i 'del(.traefik.tracing)' {{ playbook_dir }}/{{ file }}-   become: true-   become_user: "{{ saltbox_yml.stat.pw_name }}"-   when: traefik is defined and traefik.tracing is defined- - - name: Migrator | 'adv_settings.yml' | Migration 01 | Delete 'traefik.subdomains.jaeger' dict-   ansible.builtin.shell: |-     yyq -i 'del(.traefik.subdomains.jaeger)' {{ playbook_dir }}/{{ file }}-   become: true-   become_user: "{{ saltbox_yml.stat.pw_name }}"-   when: traefik is defined and traefik.subdomains is defined and traefik.subdomains.jaeger is defined- - - name: Migrator | 'adv_settings.yml' | Migration 01 | Remove 'null' values-   ansible.builtin.replace:-     path: "{{ playbook_dir }}/{{ file }}"-     regexp: '(?<=: )\bnull\s*$'-     replace: ''-     owner: "{{ saltbox_yml.stat.uid }}"-     group: "{{ saltbox_yml.stat.gid }}"-     mode: "0664"- - - name: Migrator | 'adv_settings.yml' | Migration 01 | Re-import Variables-   ansible.builtin.include_vars: "{{ playbook_dir }}/{{ file }}"

- ########################################################################################- # Title:         Saltbox: Settings | Migrator | All | Migration 01                     #- # Author(s):     desimaniac, salty                                                     #- # URL:           https://github.com/saltyorg/Saltbox                                   #- # --                                                                                   #- ########################################################################################- #                            GNU General Public License v3.0                           #- ########################################################################################- ---- - name: Migrator | All | '{{ file }}' | Migration 01 | Add single space after colon (if needed)-   ansible.builtin.replace:-     path: "{{ playbook_dir }}/{{ file }}"-     regexp: '(:)[ \t]*(.*)'-     replace: '\1 \2'-     owner: "{{ saltbox_yml.stat.uid }}"-     group: "{{ saltbox_yml.stat.gid }}"-     mode: "0664"- - - name: Migrator | All | '{{ file }}' | Migration 01 | Re-import Variables-   ansible.builtin.include_vars: "{{ playbook_dir }}/{{ file }}"

- ########################################################################################- # Title:         Saltbox: Settings | Migrator | 'backup_config.yml' | Migration 01     #- # Author(s):     desimaniac, salty                                                     #- # URL:           https://github.com/saltyorg/Saltbox                                   #- # --                                                                                   #- ########################################################################################- #                            GNU General Public License v3.0                           #- ########################################################################################- ---- - name: "Migrator | 'backup_config.yml' | Migration 01 | Set variables"-   ansible.builtin.set_fact:-     old_settings: "{{ (backup.cron.enable is defined)-                       or-                       (backup.cron.cron_state is defined) }}"- - - name: Migrator | 'backup_config.yml' | Migration 01 | Rebuild 'backup.cron' dict-   ansible.builtin.shell: |-     yyq -i 'del(.backup.cron.cron_state)' {{ playbook_dir }}/{{ file }}-     yyq -i 'del(.backup.cron.enable)' {{ playbook_dir }}/{{ file }}-   become: true-   become_user: "{{ saltbox_yml.stat.pw_name }}"-   when: old_settings- - - name: Migrator | 'backup_config.yml' | Migration 01 | Remove 'null' values-   ansible.builtin.replace:-     path: "{{ playbook_dir }}/{{ file }}"-     regexp: '(?<=: )\bnull\s*$'-     replace: ''-     owner: "{{ saltbox_yml.stat.uid }}"-     group: "{{ saltbox_yml.stat.gid }}"-     mode: "0664"- - - name: Migrator | 'backup_config.yml' | Migration 01 | Re-import Variables-   ansible.builtin.include_vars: "{{ playbook_dir }}/{{ file }}"

- ########################################################################################- # Title:         Saltbox: Settings | Migrator | 'providers.yml' | Migration 01         #- # Author(s):     salty                                                                 #- # URL:           https://github.com/saltyorg/Saltbox                                   #- # --                                                                                   #- ########################################################################################- #                            GNU General Public License v3.0                           #- ########################################################################################- ---- - name: "Migrator | 'backup_config.yml' | Migration 01 | Set variables"-   ansible.builtin.set_fact:-     old_godaddy: "{{ (goddady is defined) }}"-     old_godaddy_filled: "{{ (goddady is defined) and-                             (goddady is not none) and-                             (goddady | trim | length > 0) and-                             (goddady.api_key is defined) and-                             (goddady.api_key is not none) and-                             (goddady.api_key | length > 0) and-                             (goddady.api_secret is defined) and-                             (goddady.api_secret is not none) and-                             (goddady.api_secret | length > 0) }}"- - - name: Migrator | 'backup_config.yml' | Migration 01 | Delete 'goddady' dict-   ansible.builtin.shell: |-     yyq -i 'del(.goddady)' {{ playbook_dir }}/{{ file }}-   become: true-   become_user: "{{ saltbox_yml.stat.pw_name }}"-   when: old_godaddy- - - name: Migrator | 'backup_config.yml' | Migration 01 | Rebuild 'godaddy' dict-   ansible.builtin.shell: |-     yyq -i '.godaddy.api_key = "{{ goddady.api_key }}"' {{ playbook_dir }}/{{ file }}-     yyq -i '.godaddy.api_secret = "{{ goddady.api_secret }}"' {{ playbook_dir }}/{{ file }}-   become: true-   become_user: "{{ saltbox_yml.stat.pw_name }}"-   when: old_godaddy_filled- - - name: Migrator | 'backup_config.yml' | Migration 01 | Remove 'null' values-   ansible.builtin.replace:-     path: "{{ playbook_dir }}/{{ file }}"-     regexp: '(?<=: )\bnull\s*$'-     replace: ''-     owner: "{{ saltbox_yml.stat.uid }}"-     group: "{{ saltbox_yml.stat.gid }}"-     mode: "0664"- - - name: Migrator | 'backup_config.yml' | Migration 01 | Re-import Variables-   ansible.builtin.include_vars: "{{ playbook_dir }}/{{ file }}"

- ########################################################################################- # Title:         Saltbox: Settings | Migrator | 'settings.yml' | Migration 01          #- # Author(s):     salty                                                                 #- # URL:           https://github.com/saltyorg/Saltbox                                   #- # --                                                                                   #- ########################################################################################- #                            GNU General Public License v3.0                           #- ########################################################################################- - ---- - name: "Migrator | 'settings.yml' | Migration 01 | Set variables"-   ansible.builtin.set_fact:-     old_download: "{{ not-                       ((downloads.nzbs is undefined)-                       or-                       (downloads.torrents is undefined)) }}"-     old_feeder_mount: "{{ (not ((mounts.feeder is undefined)-                           or-                           (mounts.feeder is none)-                           or-                           (mounts.feeder | trim | length == 0)))-                           and mounts.feeder }}"- - - name: Migrator | 'settings.yml' | Migration 01 | Rebuild 'downloads' dict-   ansible.builtin.shell: |-     yyq -i 'del(.downloads)' {{ playbook_dir }}/{{ file }}-     yyq -i '.downloads = "/mnt/unionfs/downloads"' {{ playbook_dir }}/{{ file }}-   become: true-   become_user: "{{ saltbox_yml.stat.pw_name }}"-   when: old_download- - - name: Migrator | 'settings.yml' | Migration 01 | Delete 'rclone.remote' dict-   ansible.builtin.shell: |-     yyq -i 'del(.rclone.remote)' {{ playbook_dir }}/{{ file }}-   become: true-   become_user: "{{ saltbox_yml.stat.pw_name }}"-   when: rclone.remote is defined- - - name: Migrator | 'settings.yml' | Migration 01 | Create 'rclone.remotes' dict-   ansible.builtin.shell: |-     yyq -i '.rclone.remotes += [{"remote": "{{ rclone.remote }}", "settings": {"mount": true, "template": "google", "union": true, "upload": true, "upload_from": "/mnt/local/Media", "vfs_cache": {"enabled": false, "size": "50G", "max_age": "504h"}}}]' {{ playbook_dir }}/{{ file }}-   become: true-   become_user: "{{ saltbox_yml.stat.pw_name }}"-   when: (rclone.remotes is undefined) and rclone_old_remote_is_defined- - - name: Migrator | 'settings.yml' | Migration 01 | Create 'rclone.remotes' dict-   ansible.builtin.shell: |-     yyq -i '.rclone.remotes += [{"remote": "google", "settings": {"mount": true, "template": "google", "union": true, "upload": true, "upload_from": "/mnt/local/Media", "vfs_cache": {"enabled": false, "size": "50G", "max_age": "504h"}}}]' {{ playbook_dir }}/{{ file }}-   become: true-   become_user: "{{ saltbox_yml.stat.pw_name }}"-   when: (rclone.remotes is undefined) and not rclone_old_remote_is_defined- - - name: Migrator | 'settings.yml' | Migration 01 | Add feeder to remotes-   ansible.builtin.shell: |-     yyq -i '.rclone.remotes += [{"remote": "feeder", "settings": {"mount": true, "template": "sftp", "union": true, "upload": false, "upload_from": "/mnt/local/Media", "vfs_cache": {"enabled": false, "size": "50G", "max_age": "504h"}}}]' {{ playbook_dir }}/{{ file }}-   become: true-   become_user: "{{ saltbox_yml.stat.pw_name }}"-   when: old_feeder_mount- - - name: Migrator | 'settings.yml' | Migration 01 | Create 'rclone.enabled' dict-   ansible.builtin.shell: |-     yyq -i '.rclone.enabled = {{ "true" if (rclone_old_remote_is_defined or rclone_remote_is_defined) else "false" }}' {{ playbook_dir }}/{{ file }}-   become: true-   become_user: "{{ saltbox_yml.stat.pw_name }}"-   when: (rclone.enabled is undefined)- - - name: Migrator | 'settings.yml' | Migration 01 | Upgrade to new settings format-   when: (rclone.remotes is defined) and (rclone.remotes is not none) and (rclone.remotes | length > 0)-   block:-     - name: Migrator | 'settings.yml' | Migration 01 | Read current config file-       ansible.builtin.slurp:-         src: /srv/git/saltbox/settings.yml-       register: settings_config_content- -     - name: Migrator | 'settings.yml' | Migration 01 | Parse the configuration-       ansible.builtin.set_fact:-         settings_config: "{{ settings_config_content['content'] | b64decode | from_yaml }}"- -     - name: Migrator | 'settings.yml' | Migration 01 | Transform the data structure-       ansible.builtin.set_fact:-         new_remotes: "{{ new_remotes | default([]) + [{'remote': item.remote, 'settings': {'mount': true, 'template': (item.template | default('google')), 'union': true, 'upload': (item.upload | default(false)), 'upload_from': (item.upload_from | default('/mnt/local/Media')), 'vfs_cache': {'enabled': (item.vfs_cache.enabled | default(false)), 'max_age': (item.vfs_cache.max_age | default('504h')), 'size': (item.vfs_cache.size | default('50G'))}}}] }}"-       loop: "{{ settings_config.rclone.remotes }}"-       when: item.template is defined- -     - name: Migrator | 'settings.yml' | Migration 01 | Combine new structure with original config-       ansible.builtin.set_fact:-         new_config: "{{ (settings_config | combine({'rclone': {'remotes': new_remotes}}, recursive=True)) }}"-       when: new_remotes is defined- -     - name: Migrator | 'settings.yml' | Migration 01 | Write the new configuration file-       ansible.builtin.copy:-         dest: /srv/git/saltbox/settings.yml-         content: "{{ new_config | to_nice_yaml }}"-         owner: "{{ saltbox_yml.stat.uid }}"-         group: "{{ saltbox_yml.stat.gid }}"-         mode: "0664"-       when: new_remotes is defined- - - name: Migrator | 'settings.yml' | Migration 01 | Ensure enable_refresh is set correctly for each remote-   when: (settings_config.rclone.remotes is defined) and (settings_config.rclone.remotes is not none) and (settings_config.rclone.remotes | length > 0)-   block:-     - name: Migrator | 'settings.yml' | Migration 01 | Read current config file-       ansible.builtin.slurp:-         src: /srv/git/saltbox/settings.yml-       register: settings_config_content- -     - name: Migrator | 'settings.yml' | Migration 01 | Parse the configuration-       ansible.builtin.set_fact:-         settings_config: "{{ settings_config_content['content'] | b64decode | from_yaml }}"- -     - name: Migrator | 'settings.yml' | Migration 01 | Process each remote-       ansible.builtin.set_fact:-         updated_remotes: "{{ updated_remotes | default([]) + [item | combine({'settings': item.settings | combine({'enable_refresh': (item.settings.template != 'sftp')}, recursive=True)}, recursive=True)-                                                              if 'enable_refresh' not in item.settings-                                                              else item] }}"-       loop: "{{ settings_config.rclone.remotes }}"-       loop_control:-         loop_var: item- -     - name: Migrator | 'settings.yml' | Migration 01 | Update configuration with new remotes-       ansible.builtin.set_fact:-         updated_config: "{{ settings_config | combine({'rclone': {'remotes': updated_remotes}}, recursive=True) }}"- -     - name: Migrator | 'settings.yml' | Migration 01 | Write updated configuration to file-       ansible.builtin.copy:-         dest: /srv/git/saltbox/settings.yml-         content: "{{ updated_config | to_nice_yaml }}"-         owner: "{{ saltbox_yml.stat.uid }}"-         group: "{{ saltbox_yml.stat.gid }}"-         mode: "0664"- - - name: Migrator | 'settings.yml' | Migration 01 | Convert 'true' to 'yes'-   ansible.builtin.command: >-     yyq '-       (.. | select(tag == "!!bool" and . == true)) |= "yes"-     ' /srv/git/saltbox/settings.yml -i- - - name: Migrator | 'settings.yml' | Migration 01 | Convert 'false' to 'no'-   ansible.builtin.command: >-     yyq '-       (.. | select(tag == "!!bool" and . == false)) |= "no"-     ' /srv/git/saltbox/settings.yml -i- - - name: Migrator | 'settings.yml' | Migration 01 | Remove 'null' values-   ansible.builtin.replace:-     path: "{{ playbook_dir }}/{{ file }}"-     regexp: '(?<=: )\bnull\s*$'-     replace: ''-     owner: "{{ saltbox_yml.stat.uid }}"-     group: "{{ saltbox_yml.stat.gid }}"-     mode: "0664"- - - name: Migrator | 'settings.yml' | Migration 01 | Re-import Variables-   ansible.builtin.include_vars: "{{ playbook_dir }}/{{ file }}"

- #########################################################################- # Title:         Saltbox: Settings | Start                              #- # Author(s):     desimaniac                                             #- # URL:           https://github.com/saltyorg/Saltbox                    #- # --                                                                    #- #########################################################################- #                   GNU General Public License v3.0                     #- #########################################################################- ---- - name: "Start | Install yyq"-   ansible.builtin.include_role:-     name: yyq- - - name: "Start | Get 'saltbox.yml' info"-   ansible.builtin.stat:-     path: "{{ playbook_dir }}/saltbox.yml"-   register: saltbox_yml- - - name: "Start | Create list of config files"-   ansible.builtin.set_fact:-     config_files:-       - "accounts.yml"-       - "settings.yml"-       - "adv_settings.yml"-       - "backup_config.yml"-       - "providers.yml"-       - "hetzner_vlan.yml"-     traefik3_migration: "{{ true if (rclone.remotes is undefined) else false }}"- - - name: Start | Initialize vars with empty lists-   ansible.builtin.set_fact:-     files_updated_successfully: []-     files_updated_unsuccessfully: []-     exit_is_necessary: false- - - name: "Start | Check if 'settings-updater.log' exists"-   ansible.builtin.stat:-     path: "{{ playbook_dir }}/settings-updater.log"-   register: settings_updater_log- - - name: "Start | Reset ownership of 'settings-updater.log'"-   ansible.builtin.file:-     path: "{{ playbook_dir }}/settings-updater.log"-     state: file-     owner: "{{ saltbox_yml.stat.uid }}"-     group: "{{ saltbox_yml.stat.gid }}"-     mode: "0664"-   when: settings_updater_log.stat.exists

- #########################################################################- # Title:         Saltbox: Settings | Updater                            #- # Author(s):     desimaniac, l3uddz                                     #- # URL:           https://github.com/saltyorg/Saltbox                    #- # --                                                                    #- #########################################################################- #                   GNU General Public License v3.0                     #- #########################################################################- ---- - name: "Updater | Run 'settings-updater.py' for '{{ file }}'"-   ansible.builtin.script: "'roles/settings/files/settings-updater.py' '{{ playbook_dir }}' 'defaults/{{ file }}.default' '{{ file }}'"-   become: true-   become_user: "{{ saltbox_yml.stat.pw_name }}"-   register: settings_updater-   ignore_errors: true-   changed_when: false-   failed_when: (settings_updater.rc == 1)- - - name: Updater | Build 'files_updated_successfully' list-   ansible.builtin.set_fact:-     files_updated_successfully: "{{ files_updated_successfully + [file] }}"-   when: (settings_updater.rc == 2)- - - name: Updater | Build 'files_updated_unsuccessfully' list-   ansible.builtin.set_fact:-     files_updated_unsuccessfully: "{{ files_updated_unsuccessfully + [file] }}"-   when: (settings_updater.rc == 1)- - - name: Updater | Set 'exit_is_necessary' variable-   ansible.builtin.set_fact:-     exit_is_necessary: true-   when: (settings_updater.rc == 2)- - - name: Updater | Sort Keys-   ansible.builtin.shell: yyq -i 'sort_keys(..)' {{ playbook_dir }}/{{ file }}

- ##########################################################################- # Title:         Saltbox: Plex Plugins / Sub-Zero | Default Variables    #- # Author(s):     desimaniac                                              #- # URL:           https://github.com/saltyorg/Saltbox                     #- # --                                                                     #- ##########################################################################- #                   GNU General Public License v3.0                      #- ##########################################################################- ---- ################################- # Paths- ################################- - plex_plugin_subzero_paths_location: "{{ plex_paths_plugins_location }}/Sub-Zero.bundle"- - plex_plugin_subzero_paths_info_plist_location: "{{ plex_plugin_subzero_paths_location }}/Contents/Info.plist"- - ################################- # Repository- ################################- - plex_plugin_subzero_release_url: "{{ svm }}https://api.github.com/repos/pannal/Sub-Zero.bundle/releases/latest"- - plex_plugin_subzero_download_url_backup: https://github.com/pannal/Sub-Zero.bundle/releases/download/2.6.5.3152/Sub-Zero.bundle-2.6.5.3152.zip

- #########################################################################- # Title:         Saltbox: Plex Plugins / Sub-Zero                       #- # Author(s):     desimaniac                                             #- # URL:           https://github.com/saltyorg/Saltbox                    #- # --                                                                    #- #########################################################################- #                   GNU General Public License v3.0                     #- #########################################################################- ---- - name: Check if Plex instance is defined-   ansible.builtin.set_fact:-     plex_name: "{{ plex_name | default(plex_instances[0]) }}"- - - name: Check for previously installed Sub-Zero Plugin-   ansible.builtin.stat:-     path: "{{ plex_plugin_subzero_paths_info_plist_location }}"-   register: plex_plugin_subzero_bundle_status- - - name: Tasks for previously installed Sub-Zero Plugin-   when: plex_plugin_subzero_bundle_status.stat.exists-   block:-     - name: Set default value for 'plex_plugin_subzero_is_outdated' variable-       ansible.builtin.set_fact:-         plex_plugin_subzero_is_outdated: false- -     # https://stackoverflow.com/a/51109708/10975859-     - name: Check version of previously installed Sub-Zero-       community.general.xml:-         path: "{{ plex_plugin_subzero_paths_info_plist_location }}"-         xpath: /plist/dict/key[.='CFBundleVersion']/following-sibling::*[1]-         content: 'text'-       register: plex_plugin_subzero_info_plist_xmlresp_1- -     - name: Set 'plex_plugin_subzero_previously_installed_version' variable-       ansible.builtin.set_fact:-         plex_plugin_subzero_previously_installed_version: "{{ plex_plugin_subzero_info_plist_xmlresp_1.matches[0].string }}"- -     - name: Check latest available version for Sub-Zero-       ansible.builtin.shell: curl -s {{ plex_plugin_subzero_release_url }} | jq -r .tag_name-       register: plex_plugin_subzero_latest_version-       ignore_errors: true-       changed_when: false- -     - name: Compare installed Sub-Zero Plugin version with latest one-       ansible.builtin.set_fact:-         plex_plugin_subzero_is_outdated: "{{-             (plex_plugin_subzero_latest_version is failed) or-               ((plex_plugin_subzero_latest_version is success) and-               (plex_plugin_subzero_previously_installed_version is version(plex_plugin_subzero_latest_version.stdout, '<'))) }}"- - - name: Install Sub-Zero Plugin-   when: (not plex_plugin_subzero_bundle_status.stat.exists) or-         (plex_plugin_subzero_bundle_status.stat.exists and plex_plugin_subzero_is_outdated) or-         ('plex-plugin-sub-zero-reinstall' in ansible_run_tags) or ('plex-plugin-sub-zero' in ansible_run_tags)-   block:-     - name: Check to see if {{ plex_name | title }} is running-       when: ('plex-plugin-sub-zero' in ansible_run_tags) or ('plex-plugin-sub-zero-reinstall' in ansible_run_tags)-       block:-         - name: Gather list of running Docker containers-           ansible.builtin.shell: "docker ps --format '{{ '{{' }} .Names{{ '}}' }}' | xargs echo -n"-           register: docker_running_containers_list- -         - name: Set 'docker_running_containers_list' variable-           ansible.builtin.set_fact:-             docker_running_containers_list: "{{ (docker_running_containers_list.stdout).split() }}"- -         - name: "Stop {{ plex_name | title }} container"-           ansible.builtin.include_tasks: "{{ resources_tasks_path }}/docker/stop_docker_container.yml"-           vars:-             var_prefix: "plex"-           when: (plex_docker_container in docker_running_containers_list)- -     - name: Remove outdated Sub-Zero Plugin-       ansible.builtin.file:-         path: "{{ plex_plugin_subzero_paths_location }}"-         state: absent- -     - name: Get latest Sub-Zero Plugin URL-       ansible.builtin.shell: |-         curl -s {{ plex_plugin_subzero_release_url }} \-           | jq -r ".assets[] | select(.name | test(\"Sub-Zero.bundle\")) | .browser_download_url"-       register: plex_plugin_subzero_download_url-       ignore_errors: true-       changed_when: false- -     - name: Set 'plex_plugin_subzero_download_url' variable-       ansible.builtin.set_fact:-         plex_plugin_subzero_download_url: "{{ plex_plugin_subzero_download_url.stdout | default(plex_plugin_subzero_download_url_backup, true) }}"- -     - name: "Create {{ plex_name | title }} 'plug-ins' directory"-       ansible.builtin.file:-         path: "{{ item }}"-         state: directory-         owner: "{{ user.name }}"-         group: "{{ user.name }}"-         mode: "0775"-         recurse: true-       with_items:-         - "{{ plex_paths_plugins_location }}"- -     - name: Install Sub-Zero Plugin-       ansible.builtin.unarchive:-         src: "{{ plex_plugin_subzero_download_url }}"-         dest: "{{ plex_paths_plugins_location }}"-         copy: false-         owner: "{{ user.name }}"-         group: "{{ user.name }}"-         mode: "0775"-         validate_certs: false-       register: plex_plugin_subzero_download_status-       ignore_errors: true- -     - name: Post-Successfull Sub-Zero Plugin Download-       when: (plex_plugin_subzero_download_status is success)-       block:-         - name: Check for newly installed Sub-Zero Plugin-           ansible.builtin.stat:-             path: "{{ plex_plugin_subzero_paths_info_plist_location }}"-           register: plex_plugin_subzero_info_plist_status- -         - name: Post-Successfull Sub-Zero Plugin Install-           when: plex_plugin_subzero_info_plist_status.stat.exists-           block:-             - name: Check version of newly installed Sub-Zero Plugin-               community.general.xml:-                 path: "{{ plex_plugin_subzero_paths_info_plist_location }}"-                 xpath: /plist/dict/key[.='CFBundleVersion']/following-sibling::*[1]-                 content: 'text'-               register: plex_plugin_subzero_info_plist_xmlresp_2- -             - name: Set 'subzero_newly_installed_version' variable-               ansible.builtin.set_fact:-                 plex_plugin_subzero_newly_installed_version: "{{ plex_plugin_subzero_info_plist_xmlresp_2.matches[0].string }}"- -             - name: Display Sub-Zero Plugin version-               ansible.builtin.debug:-                 msg: "Sub-Zero Plugin version {{ plex_plugin_subzero_newly_installed_version }} installed."- -     - name: Sub-Zero Plugin install failed-       ansible.builtin.debug:-         msg: "Sub-Zero Plugin install failed."-       when: (plex_plugin_subzero_download_status is failed) or-             ((plex_plugin_subzero_download_status is success) and (not plex_plugin_subzero_info_plist_status.stat.exists))- -     - name: "Start {{ plex_name | title }} container"-       ansible.builtin.include_tasks: "{{ resources_tasks_path }}/docker/start_docker_container.yml"-       vars:-         var_prefix: "plex"-       when: ('plex-plugin-sub-zero' in ansible_run_tags) or-             ('plex-plugin-sub-zero-reinstall' in ansible_run_tags) or-             (plex_docker_container in docker_running_containers_list)- - - name: Sub-Zero Plugin was not updated-   ansible.builtin.debug:-     msg: "Sub-Zero is already the latest version."-   when:-     - plex_plugin_subzero_bundle_status.stat.exists-     - (not plex_plugin_subzero_is_outdated)-     - ('plex-plugin-sub-zero-reinstall' not in ansible_run_tags)

- ##########################################################################- # Title:         Saltbox: Plex Plugins / WebTools | Default Variables    #- # Author(s):     desimaniac                                              #- # URL:           https://github.com/saltyorg/Saltbox                     #- # --                                                                     #- ##########################################################################- #                   GNU General Public License v3.0                      #- ##########################################################################- ---- ################################- # Paths- ################################- - plex_plugin_webtools_paths_location: "{{ plex_paths_plugins_location }}/WebTools.bundle"- - plex_plugin_webtools_paths_version_location: "{{ plex_plugin_webtools_paths_location }}/VERSION"- - plex_plugin_webtools_paths_preferences_location: "{{ plex_paths_plugin_support_location }}/Preferences/com.plexapp.plugins.WebTools.xml"- - ################################- # Repository- ################################- - plex_plugin_webtools_release_url: "{{ svm }}https://api.github.com/repos/ukdtom/WebTools.bundle/releases/latest"- - plex_plugin_webtools_download_url_backup: https://github.com/ukdtom/WebTools.bundle/releases/download/3.0.0/WebTools.bundle.zip

- #########################################################################- # Title:         Saltbox: Plex Plugins / WebTools                       #- # Author(s):     desimaniac                                             #- # URL:           https://github.com/saltyorg/Saltbox                    #- # --                                                                    #- #########################################################################- #                   GNU General Public License v3.0                     #- #########################################################################- ---- - name: Check if Plex instance is defined-   ansible.builtin.set_fact:-     plex_name: "{{ plex_name | default(plex_instances[0]) }}"- - - name: Check for previously installed WebTools Plugin-   ansible.builtin.stat:-     path: "{{ plex_plugin_webtools_paths_version_location }}"-   register: plex_plugin_webtools_bundle_status- - - name: Tasks for previously installed WebTools Plugin-   when: plex_plugin_webtools_bundle_status.stat.exists-   block:-     - name: Set default value for 'plex_plugin_webtools_is_outdated' variable-       ansible.builtin.set_fact:-         plex_plugin_webtools_is_outdated: false- -     - name: Check version of previously installed WebTools Plugin-       ansible.builtin.shell: cat '{{ plex_plugin_webtools_paths_version_location }}' |  head -n 1 | awk '{ print }'-       register: plex_plugin_webtools_previously_installed_version-       changed_when: false- -     - name: Set 'plex_plugin_webtools_previously_installed_version' variable-       ansible.builtin.set_fact:-         plex_plugin_webtools_previously_installed_version: "{{ plex_plugin_webtools_previously_installed_version.stdout }}"- -     - name: Check latest available version for WebTools-       ansible.builtin.shell: curl -s {{ plex_plugin_webtools_release_url }} | jq -r .tag_name-       register: plex_plugin_webtools_latest_version-       ignore_errors: true-       changed_when: false- -     - name: Compare installed WebTools Plugin version with latest one-       ansible.builtin.set_fact:-         plex_plugin_webtools_is_outdated: "{{-             (plex_plugin_webtools_latest_version is failed) or-               ((plex_plugin_webtools_latest_version is success) and-               (plex_plugin_webtools_previously_installed_version is version(plex_plugin_webtools_latest_version.stdout, '<', strict=True))) }}"- - - name: Install WebTools Plugin-   when: (not plex_plugin_webtools_bundle_status.stat.exists) or-         (plex_plugin_webtools_bundle_status.stat.exists and plex_plugin_webtools_is_outdated) or-         ('plex-plugin-webtools-reinstall' in ansible_run_tags)-   block:-     - name: Check to see if {{ plex_name | title }} is running-       when: ('plex-plugin-webtools' in ansible_run_tags) or ('plex-plugin-webtools-reinstall' in ansible_run_tags)-       block:-         - name: Gather list of running Docker containers-           ansible.builtin.shell: "docker ps --format '{{ '{{' }} .Names{{ '}}' }}' | xargs echo -n"-           register: docker_running_containers_list-           changed_when: false- -         - name: Set 'docker_running_containers_list' variable-           ansible.builtin.set_fact:-             docker_running_containers_list: "{{ (docker_running_containers_list.stdout).split() }}"- -         - name: Stop {{ plex_name | title }} container-           ansible.builtin.include_tasks: "{{ resources_tasks_path }}/docker/stop_docker_container.yml"-           vars:-             var_prefix: "plex"- -           when: (plex_docker_container in docker_running_containers_list)- -     - name: Remove outdated WebTools Plugin-       ansible.builtin.file:-         path: "{{ plex_plugin_webtools_paths_location }}"-         state: absent- -     - name: Get latest WebTools Plugin URL-       ansible.builtin.shell: |-         curl -s {{ plex_plugin_webtools_release_url }} \-           | jq -r ".assets[] | select(.name | test(\"WebTools.bundle.zip\")) | .browser_download_url"-       register: plex_plugin_webtools_download_url-       ignore_errors: true-       changed_when: false- -     - name: Set 'plex_plugin_webtools_download_url' variable-       ansible.builtin.set_fact:-         plex_plugin_webtools_download_url: "{{ plex_plugin_webtools_download_url.stdout | default(plex_plugin_webtools_download_url_backup, true) }}"- -     - name: "Create {{ plex_name | title }} 'plug-ins' directory"-       ansible.builtin.file:-         path: "{{ item }}"-         state: directory-         owner: "{{ user.name }}"-         group: "{{ user.name }}"-         mode: "0775"-         recurse: true-       with_items:-         - "{{ plex_paths_plugins_location }}"- -     - name: Install WebTools Plugin-       ansible.builtin.unarchive:-         src: "{{ plex_plugin_webtools_download_url }}"-         dest: "{{ plex_paths_plugins_location }}"-         copy: false-         owner: "{{ user.name }}"-         group: "{{ user.name }}"-         mode: "0775"-         validate_certs: false-       register: plex_plugin_webtools_download_status-       ignore_errors: true- -     - name: Post-Successfull WebTools Plugin Download-       when: (plex_plugin_webtools_download_status is success)-       block:-         - name: Check for newly installed WebTools Plugin-           ansible.builtin.stat:-             path: "{{ plex_plugin_webtools_paths_version_location }}"-           register: plex_plugin_webtools_version_status- -         - name: Post-Successfull WebTools Plugin Install-           when: plex_plugin_webtools_version_status.stat.exists-           block:-             - name: Check version of newly installed WebTools Plugin-               ansible.builtin.shell: cat '{{ plex_plugin_webtools_paths_version_location }}' |  head -n 1 | awk '{ print }'-               register: plex_plugin_webtools_newly_installed_version-               changed_when: false- -             - name: Set 'plex_plugin_webtools_previously_installed_version' variable-               ansible.builtin.set_fact:-                 plex_plugin_webtools_newly_installed_version: "{{ plex_plugin_webtools_newly_installed_version.stdout }}"- -             - name: Display WebTools Plugin version-               ansible.builtin.debug:-                 msg: "WebTools Plugin version {{ plex_plugin_webtools_newly_installed_version }} installed."- -     - name: WebTools Plugin install failed-       ansible.builtin.debug:-         msg: "WebTools Plugin install failed."-       when: (plex_plugin_webtools_download_status is failed) or-             ((plex_plugin_webtools_download_status is success) and (not plex_plugin_webtools_version_status.stat.exists))- -     - name: Start {{ plex_name | title }} container-       ansible.builtin.include_tasks: "{{ resources_tasks_path }}/docker/start_docker_container.yml"-       vars:-         var_prefix: "plex"-       when:-         - ('plex-plugin-webtools' in ansible_run_tags) or ('plex-plugin-webtools-reinstall' in ansible_run_tags)-         - (plex_docker_container in docker_running_containers_list)- - - name: WebTools Plugin was not updated-   ansible.builtin.debug:-     msg: "WebTools is already the latest version."-   when:-     - plex_plugin_webtools_bundle_status.stat.exists-     - (not plex_plugin_webtools_is_outdated)-     - ('plex-plugin-webtools-reinstall' not in ansible_run_tags)

- import os- import sys- - def lint_ansible_defaults(content, file_path):-     errors = []-     lines = content.split('\n')-     -     multi_line_jinja_start = None-     within_multi_line_jinja = False- -     for line_no, line in enumerate(lines, start=1):-         stripped_line = line.strip()- -         if stripped_line == '---':-             continue- -         if '{{' in stripped_line and not within_multi_line_jinja:-             multi_line_jinja_start = line.find('{{')-             within_multi_line_jinja = '}}' not in stripped_line- -         elif within_multi_line_jinja:-             if 'if' in stripped_line or 'else' in stripped_line:-                 if line.find('if') < multi_line_jinja_start and line.find('else') < multi_line_jinja_start:-                     message = f"'if/else' within Jinja expression should align with the start."-                     errors.append((line_no, message))- -             if '}}' in stripped_line:-                 within_multi_line_jinja = False- -         if '}}' in stripped_line and within_multi_line_jinja:-             within_multi_line_jinja = False- -     for error in errors:-         line_no, message = error-         print(f"::warning file={file_path},line={line_no},endLine={line_no},title=Salty Lint Error::{message}")- -     return len(errors) > 0- - def crawl_and_lint_ansible_roles(roles_dir):-     errors_found = False- -     if not os.path.exists(roles_dir):-         print("Roles directory does not exist.")-         return- -     for role_name in os.listdir(roles_dir):-         defaults_main_path = os.path.join(roles_dir, role_name, "defaults", "main.yml")-         if os.path.isfile(defaults_main_path):-             with open(defaults_main_path, 'r') as file:-                 content = file.read()-                 if lint_ansible_defaults(content, defaults_main_path):-                     errors_found = True- -     sys.exit(1 if errors_found else 0)- - if len(sys.argv) < 2:-     print("Usage: python script.py /path/to/your/ansible/roles")-     sys.exit(1)- - roles_directory_path = sys.argv[1]- crawl_and_lint_ansible_roles(roles_directory_path)

@@ -12,20 +12,17 @@ offline: false  skip_list:-  - braces-  - git-latest-  - no-changed-when-  - ignore-errors-  - risky-shell-pipe-  - package-latest-  - no-handler   - command-instead-of-module   - command-instead-of-shell-  - deprecated-command-syntax-  - yaml[line-length]-  - yaml[truthy]-  - schema[tasks]+  - ignore-errors+  - latest[git]   - name[casing]   - name[template]+  - no-changed-when+  - no-handler+  - package-latest+  - risky-shell-pipe+  - schema[playbook]+  - schema[tasks]   - var-naming[no-role-prefix]-  - schema[playbook]+  - yaml[line-length]

@@ -30,13 +30,30 @@             echo "attempt_allowed=false" >> $GITHUB_OUTPUT           fi +      - name: Check for lint failures+        id: check_lint+        if: steps.check_attempts.outputs.attempt_allowed == 'true'+        env:+          GH_TOKEN: ${{ github.token }}+          GH_REPO: ${{ github.repository }}+        run: |+          failed_jobs=$(gh run view ${{ github.event.workflow_run.id }} --json jobs -q '.jobs[] | select(.conclusion == "failure") | .name')++          if echo "$failed_jobs" | grep -qE '^(ansible-lint|defaults-lint)$'; then+            echo "Lint job failed - skipping retry"+            echo "skip_retry=true" >> $GITHUB_OUTPUT+          else+            echo "No lint failures detected"+            echo "skip_retry=false" >> $GITHUB_OUTPUT+          fi+       - name: Sleep for 60 seconds-        if: steps.check_attempts.outputs.attempt_allowed == 'true'+        if: steps.check_attempts.outputs.attempt_allowed == 'true' && steps.check_lint.outputs.skip_retry != 'true'         run: sleep 60s         shell: bash        - name: rerun ${{ github.event.workflow_run.id }}-        if: steps.check_attempts.outputs.attempt_allowed == 'true'+        if: steps.check_attempts.outputs.attempt_allowed == 'true' && steps.check_lint.outputs.skip_retry != 'true'         env:           GH_REPO: ${{ github.repository }}           GH_TOKEN: ${{ github.token }}

@@ -23,6 +23,19 @@         working-directory: ${{ github.workspace }}         run: ansible-lint +  defaults-lint:+    if: github.event_name == 'pull_request' || !(github.event_name == 'push' && github.actor == 'renovate[bot]')+    runs-on: ubuntu-24.04+    steps:+      - uses: actions/checkout@v5++      - uses: actions/setup-python@v6+        with:+          python-version: '3.13'++      - name: Run Defaults Linter+        run: python3 scripts/saltbox-defaults-linter.py roles/+   find-roles:     if: github.event_name == 'pull_request' || !(github.event_name == 'push' && github.actor == 'renovate[bot]')     runs-on: ubuntu-24.04@@ -32,51 +45,52 @@       - uses: actions/checkout@v5       - id: set-matrix         run: |-          ROLES=$(awk '/# Core/{flag=1;next}/# Apps End/{flag=0}flag' saltbox.yml | awk '!/#/' | awk -F'[][]' '{print $2}' | tr '\n' ',' | sed 's/,*$//' | awk -F',' '{ for( i=1; i<=NF; i++ ) print $i }' | awk '{ gsub(/ /,""); print }'| sort -u | awk -vORS=, '{ print $1 }' | sed 's/,$/\n/' | sed "s/.\(roles\|common\|hetzner\|kernel\|motd\|mounts\|nvidia\|nvidia-purge\|preinstall\|rclone\|scripts\|shell\|system\|traefik\|traefik-reset-certs\|user\|cloudflare\|plex-db\|arr-db\|ddns\|cloudplow\|cloudplow-reset\|btrfsmaintenance\|download-clients\|download-indexers\|media-server\|python\|yyq\|crowdsec\).,//g")-          echo "matrix={\"roles\":[$ROLES],\"os\":[\"20.04\",\"22.04\",\"24.04\"]}" >> $GITHUB_OUTPUT+          ROLES=$(awk '/# Core/{flag=1;next}/# Apps End/{flag=0}flag' saltbox.yml | awk '!/#/' | awk -F'[][]' '{print $2}' | tr '\n' ',' | sed 's/,*$//' | awk -F',' '{ for( i=1; i<=NF; i++ ) print $i }' | awk '{ gsub(/ /,""); print }'| sort -u | awk -vORS=, '{ print $1 }' | sed 's/,$/\n/' | sed "s/.\(roles\|common\|hetzner\|kernel\|motd\|mounts\|nvidia\|nvidia-purge\|preinstall\|rclone\|scripts\|shell\|system\|traefik\|traefik-reset-certs\|user\|cloudflare\|plex-db\|arr-db\|ddns\|cloudplow\|cloudplow-reset\|btrfsmaintenance\|download-clients\|download-indexers\|media-server\|python\|yyq\|crowdsec\|postgres-host\).,//g")+          echo "matrix={\"roles\":[$ROLES],\"os\":[\"22.04\",\"24.04\"]}" >> $GITHUB_OUTPUT    install:     name: '${{ matrix.roles }}-${{ matrix.os }}'     runs-on: ubuntu-${{ matrix.os }}-    needs: [ansible-lint, find-roles]+    needs: [ansible-lint, defaults-lint, find-roles]     strategy:       matrix: ${{ fromJson(needs.find-roles.outputs.matrix) }}       fail-fast: false     steps:       - uses: actions/checkout@v5 +      - name: Tune GitHub-hosted runner network+        run: sudo ethtool -K eth0 tx off rx off++      - name: Print pip dependencies+        run: cat ./requirements/requirements-saltbox.txt++      - name: Install sb binary+        uses: jaxxstorm/action-install-gh-release@v2.1.0+        with:+          repo: saltyorg/sb-go+          tag: latest+          extension-matching: disable+          platform: linux+          arch: amd64+          rename-to: sb+          chmod: "0755"++      - name: Check sb version+        run: |+          sudo mv /opt/hostedtoolcache/saltyorg/sb-go/latest/linux-amd64/sb /usr/local/bin/sb+          /usr/local/bin/sb version+       - name: Create Directories-        run: sudo mkdir -p /srv/ansible /srv/git/sb--      - name: Copy requirements.txt-        run: sudo cp ./requirements/requirements-saltbox.txt /srv/git/sb/requirements-saltbox.txt+        run: sudo mkdir -p /srv/git        - name: Chown /srv/git         run: sudo chown -R runner:runner /srv/git -      - name: Tune GitHub-hosted runner network-        run: sudo ethtool -K eth0 tx off rx off--      - name: Print pip dependencies-        run: cat /srv/git/sb/requirements-saltbox.txt+      - name: Symlink cloned repository to /srv/git/saltbox+        run: ln -s $GITHUB_WORKSPACE /srv/git/saltbox        - name: Install Dependencies-        run: curl https://raw.githubusercontent.com/saltyorg/sb/master/sb_dep.sh --output sb_dep.sh && sudo bash sb_dep.sh -v && /srv/ansible/venv/bin/ansible --version--      - name: Symlink cloned repository to /srv/git/saltbox-        run: sudo ln -s $GITHUB_WORKSPACE /srv/git/saltbox--      - name: Install saltbox.fact-        run: |-          mkdir -p $GITHUB_WORKSPACE/ansible_facts.d-          curl -fsSL https://github.com/saltyorg/ansible-facts/releases/latest/download/saltbox-facts -o $GITHUB_WORKSPACE/ansible_facts.d/saltbox.fact-          chmod +x $GITHUB_WORKSPACE/ansible_facts.d/saltbox.fact--      - name: Chown /srv/git-        run: sudo chown -R runner:runner /srv/git--      - name: Import default configuration-        run: for i in defaults/*; do cp -n $i "$(basename "${i%.*}")"; done+        run: /usr/local/bin/sb gha && /srv/ansible/venv/bin/ansible --version        - name: Edit accounts.yml         run: sed -i 's/seed/runner/g' accounts.yml@@ -90,6 +104,8 @@       - name: Create basic vars file         run: |           echo "continuous_integration: true" > vars.yml+          echo "server_appdata_path: /opt2" >> vars.yml+          sudo mkdir -p /opt2        - name: Add Docker Hub info to vars file         if: github.repository == 'saltyorg/Saltbox' && github.event.repository.fork == false@@ -98,9 +114,59 @@           echo "  token: ${{ secrets.DOCKERHUB_TOKEN }}" >> vars.yml           echo "  user: ${{ secrets.DOCKERHUB_USERNAME }}" >> vars.yml +      - name: Install Saltbox Preinstall+        run: sudo /srv/ansible/venv/bin/ansible-playbook saltbox.yml --tags "preinstall" --skip-tags "settings" --extra-vars "@vars.yml"++      - name: Run saltbox.fact+        run: /srv/git/saltbox/ansible_facts.d/saltbox.fact+       - name: Install Saltbox Core         run: sudo /srv/ansible/venv/bin/ansible-playbook saltbox.yml --tags "core" --skip-tags "settings" --extra-vars "@vars.yml"         if: ${{ !(contains(matrix.roles, 'saltbox') || contains(matrix.roles, 'feederbox') || contains(matrix.roles, 'mediabox') || contains(matrix.roles, 'core')) }}        - name: Install ${{ matrix.roles }}         run: sudo /srv/ansible/venv/bin/ansible-playbook saltbox.yml --tags "${{ matrix.roles }}" --skip-tags "settings" --extra-vars "@vars.yml"++      - name: Run Tree on app data folder+        run: sudo tree -aug /opt2++      - name: Inspect all Docker containers+        run: |+          echo "=== Inspecting all Docker containers ==="++          # Get list of all containers (running and stopped)+          ALL_CONTAINERS=$(docker ps -a -q)++          if [ -z "$ALL_CONTAINERS" ]; then+            echo "No containers found on this system"+            exit 0+          fi++          echo "Found containers: $ALL_CONTAINERS"+          echo ""++          # Loop through each container and inspect it+          for container_id in $ALL_CONTAINERS; do+            echo "========================================="+            echo "Inspecting container: $container_id"+            echo "========================================="++            # Get container name and status for better readability+            CONTAINER_NAME=$(docker inspect --format='{{.Name}}' $container_id | sed 's/^\///')+            CONTAINER_STATUS=$(docker inspect --format='{{.State.Status}}' $container_id)++            echo "Container Name: $CONTAINER_NAME"+            echo "Container Status: $CONTAINER_STATUS"+            echo ""+            echo "Full inspection details:"+            echo "----------------------------------------"++            # Print full inspection details+            docker inspect $container_id++            echo ""+            echo "========================================="+            echo ""+          done++          echo "=== Container inspection completed ==="

@@ -55,6 +55,19 @@         working-directory: ${{ github.workspace }}         run: ansible-lint +  defaults-lint:+    if: github.event_name == 'pull_request' || !(github.event_name == 'push' && github.actor == 'renovate[bot]')+    runs-on: ubuntu-24.04+    steps:+      - uses: actions/checkout@v5++      - uses: actions/setup-python@v6+        with:+          python-version: '3.13'++      - name: Run Defaults Linter+        run: python3 scripts/saltbox-defaults-linter.py roles/+   find-roles:     if: github.event_name == 'pull_request' || !(github.event_name == 'push' && github.actor == 'renovate[bot]')     runs-on: ubuntu-24.04@@ -63,50 +76,51 @@     steps:       - uses: actions/checkout@v5       - id: set-matrix-        run: echo "matrix={\"roles\":[$(awk '/# Core/{flag=1;next}/# Apps End/{flag=0}flag' saltbox.yml | awk '!/#/' | awk -F'[][]' '{print $2}' | tr '\n' ',' | sed 's/,*$//' | awk -F',' '{ for( i=1; i<=NF; i++ ) print $i }' | awk '{ gsub(/ /,""); print }'| sort -u | awk -vORS=, '{ print $1 }' | sed 's/,$/\n/' | sed "s/.\(roles\|common\|hetzner\|kernel\|motd\|motd-generate-config\|mounts\|nvidia\|nvidia-purge\|preinstall\|rclone\|scripts\|shell\|system\|traefik\|traefik-reset-certs\|user\|cloudflare\|plex-db\|arr-db\|ddns\|cloudplow\|cloudplow-reset\|btrfsmaintenance\|download-clients\|download-indexers\|media-server\|python\|yyq\|crowdsec\).,//g")]}" >> $GITHUB_OUTPUT+        run: echo "matrix={\"roles\":[$(awk '/# Core/{flag=1;next}/# Apps End/{flag=0}flag' saltbox.yml | awk '!/#/' | awk -F'[][]' '{print $2}' | tr '\n' ',' | sed 's/,*$//' | awk -F',' '{ for( i=1; i<=NF; i++ ) print $i }' | awk '{ gsub(/ /,""); print }'| sort -u | awk -vORS=, '{ print $1 }' | sed 's/,$/\n/' | sed "s/.\(roles\|common\|docker\|hetzner\|kernel\|motd\|motd-generate-config\|mounts\|nvidia\|nvidia-purge\|preinstall\|rclone\|scripts\|shell\|system\|traefik\|traefik-reset-certs\|user\|cloudflare\|plex-db\|arr-db\|ddns\|cloudplow\|cloudplow-reset\|btrfsmaintenance\|download-clients\|download-indexers\|media-server\|python\|yyq\|crowdsec\|postgres-host\).,//g")]}" >> $GITHUB_OUTPUT    install:     name: '${{ matrix.roles }}'     runs-on: ubuntu-24.04-    needs: [ansible-lint, find-roles]+    needs: [ansible-lint, defaults-lint, find-roles]     strategy:       matrix: ${{ fromJson(needs.find-roles.outputs.matrix) }}       fail-fast: false     steps:       - uses: actions/checkout@v5 +      - name: Tune GitHub-hosted runner network+        run: sudo ethtool -K eth0 tx off rx off++      - name: Print pip dependencies+        run: cat ./requirements/requirements-saltbox.txt++      - name: Install sb binary+        uses: jaxxstorm/action-install-gh-release@v2.1.0+        with:+          repo: saltyorg/sb-go+          tag: latest+          extension-matching: disable+          platform: linux+          arch: amd64+          rename-to: sb+          chmod: "0755"++      - name: Check sb version+        run: |+          sudo mv /opt/hostedtoolcache/saltyorg/sb-go/latest/linux-amd64/sb /usr/local/bin/sb+          /usr/local/bin/sb version+       - name: Create Directories-        run: sudo mkdir -p /srv/ansible /srv/git/sb--      - name: Copy requirements.txt-        run: sudo cp ./requirements/requirements-saltbox.txt /srv/git/sb/requirements-saltbox.txt+        run: sudo mkdir -p /srv/git        - name: Chown /srv/git         run: sudo chown -R runner:runner /srv/git -      - name: Tune GitHub-hosted runner network-        run: sudo ethtool -K eth0 tx off rx off--      - name: Print pip dependencies-        run: cat /srv/git/sb/requirements-saltbox.txt+      - name: Symlink cloned repository to /srv/git/saltbox+        run: ln -s $GITHUB_WORKSPACE /srv/git/saltbox        - name: Install Dependencies-        run: curl https://raw.githubusercontent.com/saltyorg/sb/master/sb_dep.sh --output sb_dep.sh && sudo bash sb_dep.sh -v && /srv/ansible/venv/bin/ansible --version--      - name: Symlink cloned repository to /srv/git/saltbox-        run: sudo ln -s $GITHUB_WORKSPACE /srv/git/saltbox--      - name: Install saltbox.fact-        run: |-          mkdir -p $GITHUB_WORKSPACE/ansible_facts.d-          curl -fsSL https://github.com/saltyorg/ansible-facts/releases/latest/download/saltbox-facts -o $GITHUB_WORKSPACE/ansible_facts.d/saltbox.fact-          chmod +x $GITHUB_WORKSPACE/ansible_facts.d/saltbox.fact--      - name: Chown /srv/git-        run: sudo chown -R runner:runner /srv/git--      - name: Import default configuration-        run: for i in defaults/*; do cp -n $i "$(basename "${i%.*}")"; done+        run: /usr/local/bin/sb gha && /srv/ansible/venv/bin/ansible --version        - name: Edit accounts.yml         run: sed -i 's/seed/runner/g' accounts.yml@@ -120,6 +134,8 @@       - name: Create basic vars file         run: |           echo "continuous_integration: true" > vars.yml+          echo "server_appdata_path: /opt2" >> vars.yml+          sudo mkdir -p /opt2        - name: Add Docker Hub info to vars file         if: github.repository == 'saltyorg/Saltbox' && github.event.repository.fork == false@@ -128,9 +144,59 @@           echo "  token: ${{ secrets.DOCKERHUB_TOKEN }}" >> vars.yml           echo "  user: ${{ secrets.DOCKERHUB_USERNAME }}" >> vars.yml +      - name: Install Saltbox Preinstall+        run: sudo /srv/ansible/venv/bin/ansible-playbook saltbox.yml --tags "preinstall" --skip-tags "settings" --extra-vars "@vars.yml"++      - name: Run saltbox.fact+        run: /srv/git/saltbox/ansible_facts.d/saltbox.fact+       - name: Install Saltbox Core         run: sudo /srv/ansible/venv/bin/ansible-playbook saltbox.yml --tags "core" --skip-tags "settings" --extra-vars "@vars.yml"         if: ${{ !(contains(matrix.roles, 'saltbox') || contains(matrix.roles, 'feederbox') || contains(matrix.roles, 'mediabox') || contains(matrix.roles, 'core')) }}        - name: Install ${{ matrix.roles }}         run: sudo /srv/ansible/venv/bin/ansible-playbook saltbox.yml --tags "${{ matrix.roles }}" --skip-tags "settings" --extra-vars "@vars.yml"++      - name: Run Tree on app data folder+        run: sudo tree -aug /opt2++      - name: Inspect all Docker containers+        run: |+          echo "=== Inspecting all Docker containers ==="++          # Get list of all containers (running and stopped)+          ALL_CONTAINERS=$(docker ps -a -q)++          if [ -z "$ALL_CONTAINERS" ]; then+            echo "No containers found on this system"+            exit 0+          fi++          echo "Found containers: $ALL_CONTAINERS"+          echo ""++          # Loop through each container and inspect it+          for container_id in $ALL_CONTAINERS; do+            echo "========================================="+            echo "Inspecting container: $container_id"+            echo "========================================="++            # Get container name and status for better readability+            CONTAINER_NAME=$(docker inspect --format='{{.Name}}' $container_id | sed 's/^\///')+            CONTAINER_STATUS=$(docker inspect --format='{{.State.Status}}' $container_id)++            echo "Container Name: $CONTAINER_NAME"+            echo "Container Status: $CONTAINER_STATUS"+            echo ""+            echo "Full inspection details:"+            echo "----------------------------------------"++            # Print full inspection details+            docker inspect $container_id++            echo ""+            echo "========================================="+            echo ""+          done++          echo "=== Container inspection completed ==="

@@ -3,6 +3,13 @@  ### Python ### *.pyc+*.py[cod]+*$py.class+/__pycache__/+/library/__pycache__/+/scripts/__pycache__/+/lookup_plugins/__pycache__/+/filter_plugins/__pycache__/  ### Ansible ### /backup.lock@@ -34,4 +41,5 @@ /.idea /*.log /*.log.*-.vscode/settings.json+.vscode/+.claude/

@@ -101,19 +101,63 @@         </a>     </td>     <td align="center" style="word-wrap: break-word; width: 150.0; height: 150.0">+        <a href=https://github.com/jonathanfinley>+            <img src=https://avatars.githubusercontent.com/u/23283167?v=4 width="100;"  alt=jonathanfinley/>+            <br />+            <sub style="font-size:14px"><b>jonathanfinley</b></sub>+        </a>+    </td>+</tr>+<tr>+    <td align="center" style="word-wrap: break-word; width: 150.0; height: 150.0">         <a href=https://github.com/chazlarson>             <img src=https://avatars.githubusercontent.com/u/3865541?v=4 width="100;"  alt=Chaz Larson/>             <br />             <sub style="font-size:14px"><b>Chaz Larson</b></sub>         </a>     </td>-</tr>-<tr>-    <td align="center" style="word-wrap: break-word; width: 150.0; height: 150.0">-        <a href=https://github.com/jonathanfinley>-            <img src=https://avatars.githubusercontent.com/u/23283167?v=4 width="100;"  alt=jonathanfinley/>-            <br />-            <sub style="font-size:14px"><b>jonathanfinley</b></sub>+    <td align="center" style="word-wrap: break-word; width: 150.0; height: 150.0">+        <a href=https://github.com/RXWatcher>+            <img src=https://avatars.githubusercontent.com/u/14085001?v=4 width="100;"  alt=RXWatcher/>+            <br />+            <sub style="font-size:14px"><b>RXWatcher</b></sub>+        </a>+    </td>+    <td align="center" style="word-wrap: break-word; width: 150.0; height: 150.0">+        <a href=https://github.com/JigSawFr>+            <img src=https://avatars.githubusercontent.com/u/5781907?v=4 width="100;"  alt=JigSaw/>+            <br />+            <sub style="font-size:14px"><b>JigSaw</b></sub>+        </a>+    </td>+    <td align="center" style="word-wrap: break-word; width: 150.0; height: 150.0">+        <a href=https://github.com/andrewkhunn>+            <img src=https://avatars.githubusercontent.com/u/116436?v=4 width="100;"  alt=Andrew Hunn/>+            <br />+            <sub style="font-size:14px"><b>Andrew Hunn</b></sub>+        </a>+    </td>+    <td align="center" style="word-wrap: break-word; width: 150.0; height: 150.0">+        <a href=https://github.com/BeansIsFat>+            <img src=https://avatars.githubusercontent.com/u/24848012?v=4 width="100;"  alt=Beans Baxter/>+            <br />+            <sub style="font-size:14px"><b>Beans Baxter</b></sub>+        </a>+    </td>+    <td align="center" style="word-wrap: break-word; width: 150.0; height: 150.0">+        <a href=https://github.com/maximuskowalski>+            <img src=https://avatars.githubusercontent.com/u/13492750?v=4 width="100;"  alt=Max Kowalski/>+            <br />+            <sub style="font-size:14px"><b>Max Kowalski</b></sub>+        </a>+    </td>+</tr>+<tr>+    <td align="center" style="word-wrap: break-word; width: 150.0; height: 150.0">+        <a href=https://github.com/TABLE272>+            <img src=https://avatars.githubusercontent.com/u/11992630?v=4 width="100;"  alt=TABLE272/>+            <br />+            <sub style="font-size:14px"><b>TABLE272</b></sub>         </a>     </td>     <td align="center" style="word-wrap: break-word; width: 150.0; height: 150.0">@@ -124,54 +168,17 @@         </a>     </td>     <td align="center" style="word-wrap: break-word; width: 150.0; height: 150.0">-        <a href=https://github.com/kbgvirus>-            <img src=https://avatars.githubusercontent.com/u/20810766?v=4 width="100;"  alt=Alon Nitzan/>-            <br />-            <sub style="font-size:14px"><b>Alon Nitzan</b></sub>-        </a>-    </td>-    <td align="center" style="word-wrap: break-word; width: 150.0; height: 150.0">-        <a href=https://github.com/RXWatcher>-            <img src=https://avatars.githubusercontent.com/u/14085001?v=4 width="100;"  alt=RXWatcher/>-            <br />-            <sub style="font-size:14px"><b>RXWatcher</b></sub>-        </a>-    </td>-    <td align="center" style="word-wrap: break-word; width: 150.0; height: 150.0">-        <a href=https://github.com/JigSawFr>-            <img src=https://avatars.githubusercontent.com/u/5781907?v=4 width="100;"  alt=JigSaw/>-            <br />-            <sub style="font-size:14px"><b>JigSaw</b></sub>-        </a>-    </td>-    <td align="center" style="word-wrap: break-word; width: 150.0; height: 150.0">-        <a href=https://github.com/TABLE272>-            <img src=https://avatars.githubusercontent.com/u/11992630?v=4 width="100;"  alt=TABLE272/>-            <br />-            <sub style="font-size:14px"><b>TABLE272</b></sub>-        </a>-    </td>-</tr>-<tr>-    <td align="center" style="word-wrap: break-word; width: 150.0; height: 150.0">-        <a href=https://github.com/maximuskowalski>-            <img src=https://avatars.githubusercontent.com/u/13492750?v=4 width="100;"  alt=Max Kowalski/>-            <br />-            <sub style="font-size:14px"><b>Max Kowalski</b></sub>-        </a>-    </td>-    <td align="center" style="word-wrap: break-word; width: 150.0; height: 150.0">-        <a href=https://github.com/BeansIsFat>-            <img src=https://avatars.githubusercontent.com/u/24848012?v=4 width="100;"  alt=Beans Baxter/>-            <br />-            <sub style="font-size:14px"><b>Beans Baxter</b></sub>-        </a>-    </td>-    <td align="center" style="word-wrap: break-word; width: 150.0; height: 150.0">-        <a href=https://github.com/andrewkhunn>-            <img src=https://avatars.githubusercontent.com/u/116436?v=4 width="100;"  alt=Andrew Hunn/>-            <br />-            <sub style="font-size:14px"><b>Andrew Hunn</b></sub>+        <a href=https://github.com/lonix>+            <img src=https://avatars.githubusercontent.com/u/2330355?v=4 width="100;"  alt=Stian Buch Larsen/>+            <br />+            <sub style="font-size:14px"><b>Stian Buch Larsen</b></sub>+        </a>+    </td>+    <td align="center" style="word-wrap: break-word; width: 150.0; height: 150.0">+        <a href=https://github.com/Migz93>+            <img src=https://avatars.githubusercontent.com/u/33037112?v=4 width="100;"  alt=Migz93/>+            <br />+            <sub style="font-size:14px"><b>Migz93</b></sub>         </a>     </td>     <td align="center" style="word-wrap: break-word; width: 150.0; height: 150.0">@@ -182,28 +189,14 @@         </a>     </td>     <td align="center" style="word-wrap: break-word; width: 150.0; height: 150.0">-        <a href=https://github.com/Migz93>-            <img src=https://avatars.githubusercontent.com/u/33037112?v=4 width="100;"  alt=Migz93/>-            <br />-            <sub style="font-size:14px"><b>Migz93</b></sub>-        </a>-    </td>-    <td align="center" style="word-wrap: break-word; width: 150.0; height: 150.0">-        <a href=https://github.com/lonix>-            <img src=https://avatars.githubusercontent.com/u/2330355?v=4 width="100;"  alt=Stian Buch Larsen/>-            <br />-            <sub style="font-size:14px"><b>Stian Buch Larsen</b></sub>-        </a>-    </td>-</tr>-<tr>-    <td align="center" style="word-wrap: break-word; width: 150.0; height: 150.0">         <a href=https://github.com/Aethenn>             <img src=https://avatars.githubusercontent.com/u/58144688?v=4 width="100;"  alt=Aethenn/>             <br />             <sub style="font-size:14px"><b>Aethenn</b></sub>         </a>     </td>+</tr>+<tr>     <td align="center" style="word-wrap: break-word; width: 150.0; height: 150.0">         <a href=https://github.com/horjulf>             <img src=https://avatars.githubusercontent.com/u/6215635?v=4 width="100;"  alt=Filipe/>@@ -239,8 +232,6 @@             <sub style="font-size:14px"><b>Patrick Sindelka</b></sub>         </a>     </td>-</tr>-<tr>     <td align="center" style="word-wrap: break-word; width: 150.0; height: 150.0">         <a href=https://github.com/bandwith>             <img src=https://avatars.githubusercontent.com/u/62576?v=4 width="100;"  alt=bandwith/>@@ -248,6 +239,8 @@             <sub style="font-size:14px"><b>bandwith</b></sub>         </a>     </td>+</tr>+<tr>     <td align="center" style="word-wrap: break-word; width: 150.0; height: 150.0">         <a href=https://github.com/powerdude>             <img src=https://avatars.githubusercontent.com/u/780882?v=4 width="100;"  alt=powerdude/>

@@ -2,6 +2,7 @@ inventory = ./inventories/local roles_path = roles:resources/roles filter_plugins = ./filter_plugins+lookup_plugins = ./lookup_plugins library = ./library log_path = ./saltbox.log callbacks_enabled = profile_tasks

@@ -1,4 +1,6 @@ def filter_rclone_remote_name(item):+    # 'name' is an optional field in settings.yml, only used when template is 'nfs'.+    # If not provided, falls back to extracting the name from the remote string.     if 'settings' in item and 'name' in item['settings'] and item['settings']['template'] == 'nfs':         return item['settings']['name']     else:

@@ -43,7 +43,7 @@  cloudflare_records_enabled: "{{ cloudflare_is_enabled }}" -plex_account_lookup: "{{ '/opt/saltbox/plex.ini' | check_plex_ini(plex_instances[0]) }}"+plex_account_lookup: "{{ (server_appdata_path + '/saltbox/plex.ini') | check_plex_ini(plex_instances[0]) }}"  plex_account_is_enabled: "{{ plex_account_lookup.exists and                              (plex_account_lookup.identifier | length > 0) and@@ -83,12 +83,12 @@                                   (rclone.remote is not none) and                                   (rclone.remote | trim | length > 0) }}" +rclone_mounts_ipv4_only: "{{ mounts.ipv4_only | bool }}"+ use_cloudplow: "{{ rclone_remote_is_defined and use_remote }}"- use_remote: "{{ (rclone.enabled | bool) and not continuous_integration }}"- use_motd: "{{ motd_install | bool }}"-+use_intel: "{{ gpu.intel | bool }}" use_nvidia: "{{ nvidia_enabled | bool }}"  ################################@@ -96,8 +96,8 @@ ################################  server_root_path: "/"- server_appdata_path: "{{ server_root_path | regex_replace('\\/$', '') + '/opt' }}"+server_local_folder_path: "/mnt/local"  ################################ # Paths@@ -119,20 +119,24 @@ # User ################################ -uid: "{{ ansible_local.saltbox.users[user.name].uid }}"-gid: "{{ ansible_local.saltbox.users[user.name].gid }}"-vgid: "{{ ansible_local.saltbox.groups.video.gid }}"-rgid: "{{ ansible_local.saltbox.groups.render.gid }}"-dockergid: "{{ ansible_local.saltbox.groups.docker.gid }}"+uid: "{{ ansible_facts['ansible_local']['saltbox']['users'][user.name]['uid'] }}"+gid: "{{ ansible_facts['ansible_local']['saltbox']['users'][user.name]['gid'] }}"+vgid: "{{ ansible_facts['ansible_local']['saltbox']['groups']['video']['gid'] }}"+rgid: "{{ ansible_facts['ansible_local']['saltbox']['groups']['render']['gid'] }}"+dockergid: "{{ ansible_facts['ansible_local']['saltbox']['groups']['docker']['gid'] }}"  ################################ # Timezone ################################  tz: "{{ system.timezone-     if system is defined and system.timezone is defined and 'auto' not in system.timezone | lower-     else ansible_local.saltbox.timezone.timezone-          if ansible_local is defined and ansible_local.saltbox.timezone is defined and ansible_local.saltbox.timezone.timezone is defined and ansible_local.saltbox.timezone.timezone | trim | length > 0+     if (system is defined) and (system.timezone is defined) and ('auto' not in system.timezone | lower)+     else ansible_facts['ansible_local']['saltbox']['timezone']['timezone']+          if (ansible_facts['ansible_local'])+             and (ansible_facts['ansible_local']['saltbox'] is defined)+             and (ansible_facts['ansible_local']['saltbox']['timezone'] is defined)+             and (ansible_facts['ansible_local']['saltbox']['timezone']['timezone'] is defined)+             and (ansible_facts['ansible_local']['saltbox']['timezone']['timezone'] | trim | length > 0)           else 'Etc/UTC' }}"  ################################@@ -141,12 +145,16 @@  ip_address_host: "0.0.0.0" ip_address_localhost: "127.0.0.1"-ip_address_public: "{{ ansible_local.saltbox.ip.public_ip }}"-ip_address_public_is_valid: "{{ false if ansible_local.saltbox.ip.failed_ipv4 else true }}"-ip_address_public_error: "{{ ansible_local.saltbox.ip.error_ipv4 }}"-ipv6_address_public: "{{ ansible_local.saltbox.ip.public_ipv6 }}"-ipv6_address_public_is_valid: "{{ false if ansible_local.saltbox.ip.failed_ipv6 else true }}"-ipv6_address_public_error: "{{ ansible_local.saltbox.ip.error_ipv6 }}"+ip_address_public: "{{ ansible_facts['ansible_local']['saltbox']['ip']['public_ip'] }}"+ip_address_public_is_valid: "{{ false+                             if ansible_facts['ansible_local']['saltbox']['ip']['failed_ipv4']+                             else true }}"+ip_address_public_error: "{{ ansible_facts['ansible_local']['saltbox']['ip']['error_ipv4'] }}"+ipv6_address_public: "{{ ansible_facts['ansible_local']['saltbox']['ip']['public_ipv6'] }}"+ipv6_address_public_is_valid: "{{ false+                               if ansible_facts['ansible_local']['saltbox']['ip']['failed_ipv6']+                               else true }}"+ipv6_address_public_error: "{{ ansible_facts['ansible_local']['saltbox']['ip']['error_ipv6'] }}"  ################################ # Theme@@ -191,37 +199,39 @@ traefik_default_certresolver: "{{ traefik_default_certprovider                                if (not (traefik_http | bool))                                else (traefik_default_resolver if not zerossl_is_enabled else traefik_default_zerossl_resolver) }}"+traefik_role_wildcard_enabled: "{{ lookup('role_var', '_traefik_wildcard_enabled', default=(not traefik_http)) | bool }}"+  traefik_error_pages_enabled: "{{ traefik.error_pages | bool }}"-traefik_error_pages_role_enabled: "{{ lookup('vars', traefik_role_var + '_traefik_error_pages_enabled', default=lookup('vars', role_name + '_traefik_error_pages_enabled', default=false)) | bool }}"-traefik_error_pages_middleware: "{{ 'error-pages-middleware@docker,'-                                 if traefik_error_pages_enabled and traefik_error_pages_role_enabled+traefik_error_pages_role_enabled: "{{ lookup('role_var', '_traefik_error_pages_enabled', default=false) | bool }}"+traefik_error_pages_middleware: "{{ 'error-pages-middleware@docker'+                                 if (traefik_error_pages_enabled and traefik_error_pages_role_enabled)                                  else '' }}"  traefik_default_robot: true traefik_default_gzip: false traefik_default_autodetect: false-traefik_default_cloudflarewarp: "{{ lookup('vars', traefik_role_var + '_dns_proxy', default=lookup('vars', role_name + '_dns_proxy', default=dns.proxied)) and cloudflare_is_enabled and traefik_plugin_cloudflarewarp_enabled }}"+traefik_default_cloudflarewarp: "{{ lookup('role_var', '_dns_proxy', default=dns_proxied) and cloudflare_is_enabled and traefik_plugin_cloudflarewarp_enabled }}"  traefik_default_middleware_default: "{{ traefik_error_pages_middleware                                         + 'globalHeaders@file,secureHeaders@file'                                         + (',autodetect@docker'-                                          if (lookup('vars', traefik_role_var + '_traefik_autodetect_enabled', default=lookup('vars', role_name + '_traefik_autodetect_enabled', default=traefik_default_autodetect)) | bool)+                                          if (lookup('role_var', '_traefik_autodetect_enabled', default=traefik_default_autodetect) | bool)                                           else '')                                         + (',gzip@docker'-                                          if (lookup('vars', traefik_role_var + '_traefik_gzip_enabled', default=lookup('vars', role_name + '_traefik_gzip_enabled', default=traefik_default_gzip)) | bool)+                                          if (lookup('role_var', '_traefik_gzip_enabled', default=traefik_default_gzip) | bool)                                           else '')                                         + (',robotHeaders@file'-                                          if (lookup('vars', traefik_role_var + '_traefik_robot_enabled', default=lookup('vars', role_name + '_traefik_robot_enabled', default=traefik_default_robot)) | bool)+                                          if (lookup('role_var', '_traefik_robot_enabled', default=traefik_default_robot) | bool)                                           else '')                                         + (',hsts@file'                                           if (traefik.hsts | bool)                                           else '')                                         + (',cloudflarewarp@docker'-                                          if (traefik_default_cloudflarewarp | bool)+                                          if traefik_default_cloudflarewarp                                           else '')                                         + (',crowdsec@docker'-                                          if (lookup('vars', traefik_role_var + '_traefik_crowdsec_enabled', default=lookup('vars', role_name + '_traefik_crowdsec_enabled', default=crowdsec_is_enabled)))+                                          if (lookup('role_var', '_traefik_crowdsec_enabled', default=crowdsec_is_enabled))                                           else '')                                         + (',' if (traefik_role_middleware_sso | length > 0)                                                else '')@@ -232,71 +242,80 @@                                   if (not traefik_default_middleware_custom.startswith(',') and traefik_default_middleware_custom | length > 0)                                   else traefik_default_middleware_custom) }}" -traefik_role_middleware_sso: "{{ lookup('vars', traefik_role_var + '_traefik_sso_middleware', default=lookup('vars', role_name + '_traefik_sso_middleware', default='')) }}"-traefik_role_middleware_default: "{{ lookup('vars', traefik_role_var + '_traefik_middleware_default', default=lookup('vars', role_name + '_traefik_middleware_default', default='')) }}"-traefik_role_middleware_custom: "{{ lookup('vars', traefik_role_var + '_traefik_middleware_custom', default=lookup('vars', role_name + '_traefik_middleware_custom', default='')) }}"+traefik_role_middleware_sso: "{{ lookup('role_var', '_traefik_sso_middleware', default='') }}"+traefik_role_middleware_default: "{{ lookup('role_var', '_traefik_middleware_default', default='') }}"+traefik_role_middleware_custom: "{{ lookup('role_var', '_traefik_middleware_custom', default='') }}"  traefik_middleware: "{{ traefik_role_middleware_default                         + (',' + traefik_role_middleware_custom                           if (not traefik_role_middleware_custom.startswith(',') and traefik_role_middleware_custom | length > 0)                           else traefik_role_middleware_custom) }}" -traefik_default_middleware_default_http: "{{ traefik_error_pages_middleware }}globalHeaders@file,redirect-to-https@docker"+traefik_default_middleware_default_http:+  - "{{ traefik_error_pages_middleware }}"+  - "globalHeaders@file"+  - "{{ (''+     if (lookup('role_var', '_traefik_middleware_http_insecure', default=false) | bool)+     else 'redirect-to-https@docker') }}" traefik_default_middleware_custom_http: ""-traefik_default_middleware_http: "{{ traefik_default_middleware_default_http+traefik_default_middleware_http: "{{ (traefik_default_middleware_default_http | select() | join(','))                                      + (',' + traefik_default_middleware_custom_http                                        if (not traefik_default_middleware_custom_http.startswith(',') and traefik_default_middleware_custom_http | length > 0)                                        else traefik_default_middleware_custom_http)                                      + (',autodetect@docker'-                                       if (lookup('vars', traefik_role_var + '_traefik_autodetect_enabled', default=lookup('vars', role_name + '_traefik_autodetect_enabled', default=traefik_default_autodetect)) | bool)+                                       if (lookup('role_var', '_traefik_autodetect_enabled', default=traefik_default_autodetect) | bool)                                        else '')                                      + (',gzip@docker'-                                       if (lookup('vars', traefik_role_var + '_traefik_gzip_enabled', default=lookup('vars', role_name + '_traefik_gzip_enabled', default=traefik_default_gzip)) | bool)+                                       if (lookup('role_var', '_traefik_gzip_enabled', default=traefik_default_gzip) | bool)                                        else '')                                      + (',robotHeaders@file'-                                       if (lookup('vars', traefik_role_var + '_traefik_robot_enabled', default=lookup('vars', role_name + '_traefik_robot_enabled', default=traefik_default_robot)) | bool)+                                       if (lookup('role_var', '_traefik_robot_enabled', default=traefik_default_robot) | bool)                                        else '')                                      + (',cloudflarewarp@docker'                                        if (traefik_default_cloudflarewarp | bool)                                        else '')                                      + (',crowdsec@docker'-                                       if (lookup('vars', traefik_role_var + '_traefik_crowdsec_enabled', default=lookup('vars', role_name + '_traefik_crowdsec_enabled', default=crowdsec_is_enabled)) | bool)+                                       if (lookup('role_var', '_traefik_crowdsec_enabled', default=crowdsec_is_enabled) | bool)                                        else '')                                      + (',' if (traefik_role_middleware_sso | length > 0)                                        else '')                                      + traefik_role_middleware_sso }}" -traefik_default_middleware_default_http_api: "globalHeaders@file,redirect-to-https@docker"+traefik_default_middleware_default_http_api:+  - "globalHeaders@file"+  - "{{ (''+     if (lookup('role_var', '_traefik_middleware_http_api_insecure', default=false) | bool)+     else 'redirect-to-https@docker') }}" traefik_default_middleware_custom_http_api: ""-traefik_default_middleware_http_api: "{{ traefik_default_middleware_default_http_api+traefik_default_middleware_http_api: "{{ (traefik_default_middleware_default_http_api | select() | join(','))                                          + (',' + traefik_default_middleware_custom_http_api                                            if (not traefik_default_middleware_custom_http_api.startswith(',') and traefik_default_middleware_custom_http_api | length > 0)                                            else traefik_default_middleware_custom_http_api)                                          + (',autodetect@docker'-                                           if (lookup('vars', traefik_role_var + '_traefik_autodetect_enabled', default=lookup('vars', role_name + '_traefik_autodetect_enabled', default=traefik_default_autodetect)) | bool)+                                           if (lookup('role_var', '_traefik_autodetect_enabled', default=traefik_default_autodetect) | bool)                                            else '')                                          + (',gzip@docker'-                                           if (lookup('vars', traefik_role_var + '_traefik_gzip_enabled', default=lookup('vars', role_name + '_traefik_gzip_enabled', default=traefik_default_gzip)) | bool)+                                           if (lookup('role_var', '_traefik_gzip_enabled', default=traefik_default_gzip) | bool)                                            else '')                                           + (',robotHeaders@file'-                                           if (lookup('vars', traefik_role_var + '_traefik_robot_enabled', default=lookup('vars', role_name + '_traefik_robot_enabled', default=traefik_default_robot)) | bool)+                                           if (lookup('role_var', '_traefik_robot_enabled', default=traefik_default_robot) | bool)                                            else '')                                          + (',cloudflarewarp@docker'                                            if (traefik_default_cloudflarewarp | bool)                                            else '')                                          + (',crowdsec@docker'-                                           if (lookup('vars', traefik_role_var + '_traefik_crowdsec_enabled', default=lookup('vars', role_name + '_traefik_crowdsec_enabled', default=crowdsec_is_enabled)) | bool)+                                           if (lookup('role_var', '_traefik_crowdsec_enabled', default=crowdsec_is_enabled) | bool)                                            else '') }}"  traefik_default_middleware_default_api: "{{ 'globalHeaders@file,secureHeaders@file'                                             + (',autodetect@docker'-                                              if (lookup('vars', traefik_role_var + '_traefik_autodetect_enabled', default=lookup('vars', role_name + '_traefik_autodetect_enabled', default=traefik_default_autodetect)) | bool)+                                              if (lookup('role_var', '_traefik_autodetect_enabled', default=traefik_default_autodetect) | bool)                                               else '')                                             + (',gzip@docker'-                                              if (lookup('vars', traefik_role_var + '_traefik_gzip_enabled', default=lookup('vars', role_name + '_traefik_gzip_enabled', default=traefik_default_gzip)) | bool)+                                              if (lookup('role_var', '_traefik_gzip_enabled', default=traefik_default_gzip) | bool)                                               else '')                                             + (',robotHeaders@file'-                                              if (lookup('vars', traefik_role_var + '_traefik_robot_enabled', default=lookup('vars', role_name + '_traefik_robot_enabled', default=traefik_default_robot)) | bool)+                                              if (lookup('role_var', '_traefik_robot_enabled', default=traefik_default_robot) | bool)                                               else '')                                             + (',hsts@file'                                               if (traefik.hsts | bool)@@ -305,7 +324,7 @@                                               if (traefik_default_cloudflarewarp | bool)                                               else '')                                             + (',crowdsec@docker'-                                              if (lookup('vars', traefik_role_var + '_traefik_crowdsec_enabled', default=lookup('vars', role_name + '_traefik_crowdsec_enabled', default=crowdsec_is_enabled)) | bool)+                                              if (lookup('role_var', '_traefik_crowdsec_enabled', default=crowdsec_is_enabled) | bool)                                               else '') }}" traefik_default_middleware_custom_api: "" traefik_default_middleware_api: "{{ traefik_default_middleware_default_api@@ -315,52 +334,52 @@  traefik_default_sso_middleware: "authelia@docker" -traefik_role_enabled: "{{ lookup('vars', traefik_role_var + '_traefik_enabled', default=lookup('vars', role_name + '_traefik_enabled', default=false)) | bool }}"-traefik_role_api_enabled: "{{ lookup('vars', traefik_role_var + '_traefik_api_enabled', default=lookup('vars', role_name + '_traefik_api_enabled', default=false)) | bool }}"+traefik_role_enabled: "{{ lookup('role_var', '_traefik_enabled', default=false) | bool }}"+traefik_role_api_enabled: "{{ lookup('role_var', '_traefik_api_enabled', default=false) | bool }}"  traefik_http: "{{ false                if ((traefik_challenge_provider != 'cloudflare') or cloudflare_is_enabled)                else true }}" -traefik_subdomain: "{{ lookup('vars', traefik_role_var + '_web_subdomain', default=lookup('vars', role_name + '_web_subdomain', default=omit)) }}"-traefik_domain: "{{ lookup('vars', traefik_role_var + '_web_domain', default=lookup('vars', role_name + '_web_domain', default=omit)) }}"+traefik_subdomain: "{{ lookup('role_var', '_web_subdomain', default=omit) }}"+traefik_domain: "{{ lookup('role_var', '_web_domain', default=omit) }}" traefik_router: "{{ lookup('vars', traefik_role_var + '_name', default=lookup('vars', role_name + '_name', default=omit)) }}" -traefik_loadbalancer_port: "{{ lookup('vars', traefik_role_var + '_web_port', default=lookup('vars', role_name + '_web_port', default=omit)) }}"-traefik_loadbalancer_scheme: "{{ lookup('vars', traefik_role_var + '_web_scheme', default=lookup('vars', role_name + '_web_scheme', default=omit)) }}"+traefik_loadbalancer_port: "{{ lookup('role_var', '_web_port', default=omit) }}"+traefik_loadbalancer_scheme: "{{ lookup('role_var', '_web_scheme', default=omit) }}"  traefik_host: "{{ traefik_subdomain + '.' + traefik_domain                if (traefik_subdomain | length > 0)                else traefik_domain }}" -traefik_host_override_lookup: "{{ lookup('vars', traefik_role_var + '_web_host_override', default=lookup('vars', role_name + '_web_host_override', default='')) }}"-traefik_fqdn_override_lookup: "{{ lookup('vars', traefik_role_var + '_web_fqdn_override', default=lookup('vars', role_name + '_web_fqdn_override', default='')) }}"+traefik_host_override_lookup: "{{ lookup('role_var', '_web_host_override', default='') }}"+traefik_fqdn_override_lookup: "{{ lookup('role_var', '_web_fqdn_override', default=[]) }}" traefik_host_template: "{{ traefik_host | traefik_host_rule(traefik_host_override_lookup, traefik_fqdn_override_lookup) }}" -traefik_entrypoint_web_default: "{{ 'web' if not (lookup('vars', traefik_role_var + '_traefik_tailscale_enabled', default=false) | bool) else 'tailscale-web' }}"-traefik_entrypoint_web: "{{ lookup('vars', traefik_role_var + '_traefik_entrypoint_web', default=traefik_entrypoint_web_default) }}"-traefik_entrypoint_websecure_default: "{{ 'websecure' if not (lookup('vars', traefik_role_var + '_traefik_tailscale_enabled', default=false) | bool) else 'tailscale-websecure' }}"-traefik_entrypoint_websecure: "{{ lookup('vars', traefik_role_var + '_traefik_entrypoint_websecure', default=traefik_entrypoint_websecure_default) }}"+traefik_entrypoint_tailscale_default: false+traefik_entrypoint_web_default: "{{ 'web' if not (lookup('role_var', '_traefik_tailscale_enabled', default=traefik_entrypoint_tailscale_default) | bool) else 'tailscale-web' }}"+traefik_entrypoint_web: "{{ lookup('role_var', '_traefik_entrypoint_web', default=traefik_entrypoint_web_default) }}"+traefik_entrypoint_websecure_default: "{{ 'websecure' if not (lookup('role_var', '_traefik_tailscale_enabled', default=traefik_entrypoint_tailscale_default) | bool) else 'tailscale-websecure' }}"+traefik_entrypoint_websecure: "{{ lookup('role_var', '_traefik_entrypoint_websecure', default=traefik_entrypoint_websecure_default) }}"  traefik_url: "{{ 'https://'-                 + (lookup('vars', traefik_role_var + '_web_subdomain', default=lookup('vars', role_name + '_web_subdomain', default='')) + '.'-                 + lookup('vars', traefik_role_var + '_web_domain', default=lookup('vars', role_name + '_web_domain', default=''))-              if (lookup('vars', traefik_role_var + '_web_subdomain', default=lookup('vars', role_name + '_web_subdomain', default='')) | length > 0)-              else lookup('vars', traefik_role_var + '_web_domain', default=lookup('vars', role_name + '_web_domain', default=''))) }}"--traefik_themepark_labels:-  - '{ "traefik.http.middlewares.themepark-{{ traefik_router }}.plugin.themepark.app": "{{ lookup("vars", traefik_role_var + "_themepark_app", default=role_name) }}" }'-  - '{ "traefik.http.middlewares.themepark-{{ traefik_router }}.plugin.themepark.theme": "{{ lookup("vars", traefik_role_var + "_themepark_theme", default=lookup("vars", role_name + "_themepark_theme", default="")) }}" }'-  - '{ "traefik.http.middlewares.themepark-{{ traefik_router }}.plugin.themepark.addons": "{{ (lookup("vars", traefik_role_var + "_themepark_addons", default=lookup("vars", role_name + "_themepark_addons", default="")) | join(","))-                                                                                           if lookup("vars", traefik_role_var + "_themepark_addons", default=lookup("vars", role_name + "_themepark_addons", default="")) | length > 0+                 + ((lookup('role_var', '_web_subdomain', default='') + '.'+                 + lookup('role_var', '_web_domain', default=''))+              if (lookup('role_var', '_web_subdomain', default='') | length > 0)+              else lookup('role_var', '_web_domain', default='')) }}"++traefik_themepark_labels_tmp:+  - '{ "traefik.http.middlewares.themepark-{{ traefik_router }}.plugin.themepark.app": "{{ lookup("role_var", "_themepark_app", default=role_name) }}" }'+  - '{ "traefik.http.middlewares.themepark-{{ traefik_router }}.plugin.themepark.theme": "{{ lookup("role_var", "_themepark_theme", default="") }}" }'+  - '{ "traefik.http.middlewares.themepark-{{ traefik_router }}.plugin.themepark.addons": "{{ (lookup("role_var", "_themepark_addons", default="") | join(","))+                                                                                           if lookup("role_var", "_themepark_addons", default="") | length > 0                                                                                            else omit }}" }' +traefik_themepark_labels: "{{ traefik_themepark_labels_tmp | map('from_json') | combine | dict2items | rejectattr('value', 'equalto', '') | items2dict }}"+ ################################ # Docker ################################--# Toggles pruning of dangling images after container creation.-docker_create_image_prune: true  docker_volumes_downloads_nzbs: "{{ [downloads_usenet_path + ':/downloads/nzbs']                                 if nzbs_downloads_path_is_defined@@ -378,87 +397,105 @@   - "/mnt:/mnt:rslave"  docker_volumes_common: "{{ docker_volumes_common_folders + docker_volumes_downloads_common-                        if (lookup('vars', traefik_role_var + '_docker_volumes_download', default=true) | bool)+                        if (lookup('role_var', '_docker_volumes_download', default=true) | bool)                         else docker_volumes_common_folders }}"  docker_hosts_common: {}  docker_labels_docker_depends_on_template:-  com.github.saltbox.depends_on: "{{ lookup('vars', traefik_role_var + '_depends_on', default=lookup('vars', role_name + '_depends_on', default=docker_container_network_mode_lookup))+  com.github.saltbox.depends_on: "{{ lookup('role_var', '_depends_on', default=docker_container_network_mode_lookup)                                   if docker_container_network_mode-                                  else lookup('vars', traefik_role_var + '_depends_on', default=lookup('vars', role_name + '_depends_on')) }}"+                                  else lookup('role_var', '_depends_on') }}"  docker_labels_docker_depends_on_delay_template:-  com.github.saltbox.depends_on.delay: "{{ lookup('vars', traefik_role_var + '_depends_on_delay', default=lookup('vars', role_name + '_depends_on_delay', default='0'))+  com.github.saltbox.depends_on.delay: "{{ lookup('role_var', '_depends_on_delay', default='0')                                         if docker_container_network_mode-                                        else lookup('vars', traefik_role_var + '_depends_on_delay', default=lookup('vars', role_name + '_depends_on_delay')) }}"+                                        else lookup('role_var', '_depends_on_delay') }}"  docker_labels_docker_depends_on_healthchecks_template:-  com.github.saltbox.depends_on.healthchecks: "{{ lookup('vars', traefik_role_var + '_depends_on_healthchecks', default=lookup('vars', role_name + '_depends_on_healthchecks', default='true'))+  com.github.saltbox.depends_on.healthchecks: "{{ lookup('role_var', '_depends_on_healthchecks', default='true')                                                if docker_container_network_mode-                                               else lookup('vars', traefik_role_var + '_depends_on_healthchecks', default=lookup('vars', role_name + '_depends_on_healthchecks')) }}"+                                               else lookup('role_var', '_depends_on_healthchecks') }}"++docker_labels_diun_enabled: true+docker_labels_autoheal_enabled: true+docker_labels_autoheal_timeout: "10"  docker_labels_diun_template:   diun.enable: "true"  docker_labels_autoheal_template:   autoheal: "true"-  autoheal.stop.timeout: "{{ lookup('vars', role_name + '_docker_stop_timeout', default='10') }}"+  autoheal.stop.timeout: "{{ lookup('role_var', '_docker_stop_timeout', default=docker_labels_autoheal_timeout) }}"  docker_labels_custom_common: {}  docker_labels_saltbox_tmp:   - com.github.saltbox.saltbox_managed: "true"-  - "{{ docker_labels_diun_template if (lookup('vars', role_name + '_diun_enabled', default=true) | bool) else omit }}"-  - "{{ docker_labels_autoheal_template if (lookup('vars', role_name + '_autoheal_enabled', default=true) | bool) else omit }}"-  - "{{ docker_labels_docker_depends_on_template if ((lookup('vars', role_name + '_depends_on', default='') | length > 0) or docker_container_network_mode) else omit }}"-  - "{{ docker_labels_docker_depends_on_delay_template if ((lookup('vars', role_name + '_depends_on_delay', default='') | length > 0) or docker_container_network_mode) else omit }}"-  - "{{ docker_labels_docker_depends_on_healthchecks_template if ((lookup('vars', role_name + '_depends_on_healthchecks', default='') | length > 0) or docker_container_network_mode) else omit }}"+  - com.github.saltbox.saltbox_controller: "{{ 'true' if (lookup('role_var', '_docker_controller', default=true) | bool) else 'false' }}"+  - "{{ docker_labels_diun_template if (lookup('role_var', '_diun_enabled', default=docker_labels_diun_enabled) | bool) else omit }}"+  - "{{ docker_labels_autoheal_template if (lookup('role_var', '_autoheal_enabled', default=docker_labels_autoheal_enabled) | bool) else omit }}"+  - "{{ docker_labels_docker_depends_on_template if ((lookup('role_var', '_depends_on', default='') | length > 0) or docker_container_network_mode) else omit }}"+  - "{{ docker_labels_docker_depends_on_delay_template if ((lookup('role_var', '_depends_on_delay', default='') | length > 0) or docker_container_network_mode) else omit }}"+  - "{{ docker_labels_docker_depends_on_healthchecks_template if ((lookup('role_var', '_depends_on_healthchecks', default='') | length > 0) or docker_container_network_mode) else omit }}"   - "{{ docker_labels_custom_common }}" -docker_container_network_mode: "{{ 'container:' in lookup('vars', traefik_role_var + '_docker_network_mode', default=lookup('vars', role_name + '_docker_network_mode', default=docker_networks_name_common)) }}"-docker_container_network_mode_lookup: "{{ lookup('vars', traefik_role_var + '_docker_network_mode', default=lookup('vars', role_name + '_docker_network_mode', default=docker_networks_name_common)) | split(':') | last }}"--docker_labels_saltbox: "{{ docker_labels_saltbox_tmp | reject('equalto', omit) | list }}"+docker_labels_wildcard_template:+  - '{ "traefik.http.routers.{{ traefik_router }}.tls.domains[0].main": "{{ traefik_domain }}" }'+  - '{ "traefik.http.routers.{{ traefik_router }}.tls.domains[0].sans": "{{ "*." + traefik_domain }}" }'+docker_labels_wildcard_dict: "{{ (docker_labels_wildcard_template | map('from_json') | combine) if traefik_role_wildcard_enabled else {} }}"++docker_labels_wildcard_api_template:+  - '{ "traefik.http.routers.{{ traefik_router }}-api.tls.domains[0].main": "{{ traefik_domain }}" }'+  - '{ "traefik.http.routers.{{ traefik_router }}-api.tls.domains[0].sans": "{{ "*." + traefik_domain }}" }'+docker_labels_wildcard_api_dict: "{{ (docker_labels_wildcard_api_template | map('from_json') | combine) if traefik_role_wildcard_enabled else {} }}"++docker_container_network_mode: "{{ 'container:' in lookup('role_var', '_docker_network_mode', default=docker_networks_name_common) }}"+docker_container_network_mode_lookup: "{{ lookup('role_var', '_docker_network_mode', default=docker_networks_name_common) | split(':') | last }}"++docker_labels_saltbox: "{{ docker_labels_saltbox_tmp | flatten | select('mapping') | combine }}"  docker_labels_traefik_main:-  - traefik.enable: "true"+  - '{ "traefik.enable": "true" }'   - '{ "traefik.http.routers.{{ traefik_router }}-http.entrypoints": "{{ traefik_entrypoint_web }}" }'   - '{ "traefik.http.routers.{{ traefik_router }}-http.service": "{{ traefik_router }}-http" }'   - '{ "traefik.http.routers.{{ traefik_router }}-http.rule": "{{ traefik_host_template }}" }'   - '{ "traefik.http.routers.{{ traefik_router }}-http.priority": "20" }'-  - '{ "traefik.http.routers.{{ traefik_router }}-http.middlewares": "{{ lookup("vars", traefik_role_var + "_traefik_middleware_http", default=lookup("vars", role_name + "_traefik_middleware_http", default=traefik_default_middleware_http)) }}" }'+  - '{ "traefik.http.routers.{{ traefik_router }}-http.middlewares": "{{ lookup("role_var", "_traefik_middleware_http", default=traefik_default_middleware_http) }}" }'   - '{ "traefik.http.routers.{{ traefik_router }}.entrypoints": "{{ traefik_entrypoint_websecure }}" }'   - '{ "traefik.http.routers.{{ traefik_router }}.service": "{{ traefik_router }}" }'   - '{ "traefik.http.routers.{{ traefik_router }}.rule": "{{ traefik_host_template }}" }'-  - '{ "traefik.http.routers.{{ traefik_router }}.priority": "{{ lookup("vars", traefik_role_var + "_traefik_priority", default=lookup("vars", role_name + "_traefik_priority", default="20")) }}" }'-  - '{ "traefik.http.routers.{{ traefik_router }}.tls.certresolver": "{{ lookup("vars", traefik_role_var + "_traefik_certresolver", default=lookup("vars", role_name + "_traefik_certresolver", default=traefik_default_certresolver)) }}" }'+  - '{ "traefik.http.routers.{{ traefik_router }}.priority": "{{ lookup("role_var", "_traefik_priority", default="20") }}" }'+  - '{ "traefik.http.routers.{{ traefik_router }}.tls.certresolver": "{{ lookup("role_var", "_traefik_certresolver", default=traefik_default_certresolver) }}" }'   - '{ "traefik.http.routers.{{ traefik_router }}.tls.options": "securetls@file" }'   - '{ "traefik.http.routers.{{ traefik_router }}.middlewares": "{{ traefik_middleware }}" }'-  - '{ "traefik.http.services.{{ traefik_router }}-http.loadbalancer.server.port": "{{ lookup("vars", traefik_role_var + "_web_http_port", default=lookup("vars", role_name + "_web_http_port", default=traefik_loadbalancer_port)) }}" }'-  - '{ "traefik.http.services.{{ traefik_router }}-http.loadbalancer.server.scheme": "{{ lookup("vars", traefik_role_var + "_web_http_scheme", default=lookup("vars", role_name + "_web_http_scheme", default=traefik_loadbalancer_scheme)) }}" }'-  - '{ "traefik.http.services.{{ traefik_router }}-http.loadbalancer.serverstransport": "{{ lookup("vars", traefik_role_var + "_web_http_serverstransport", default=lookup("vars", role_name + "_web_http_serverstransport", default=omit)) }}" }'+  - '{ "traefik.http.services.{{ traefik_router }}-http.loadbalancer.server.port": "{{ lookup("role_var", "_web_http_port", default=traefik_loadbalancer_port) }}" }'+  - '{ "traefik.http.services.{{ traefik_router }}-http.loadbalancer.server.scheme": "{{ lookup("role_var", "_web_http_scheme", default=traefik_loadbalancer_scheme) }}" }'+  - '{ "traefik.http.services.{{ traefik_router }}-http.loadbalancer.serverstransport": "{{ lookup("role_var", "_web_http_serverstransport", default=omit) }}" }'   - '{ "traefik.http.services.{{ traefik_router }}.loadbalancer.server.port": "{{ traefik_loadbalancer_port }}" }'   - '{ "traefik.http.services.{{ traefik_router }}.loadbalancer.server.scheme": "{{ traefik_loadbalancer_scheme }}" }'-  - '{ "traefik.http.services.{{ traefik_router }}.loadbalancer.serverstransport": "{{ lookup("vars", traefik_role_var + "_web_serverstransport", default=lookup("vars", role_name + "_web_serverstransport", default=omit)) }}" }'+  - '{ "traefik.http.services.{{ traefik_router }}.loadbalancer.serverstransport": "{{ lookup("role_var", "_web_serverstransport", default=omit) }}" }'  docker_labels_traefik_api:   - '{ "traefik.http.routers.{{ traefik_router }}-api-http.entrypoints": "{{ traefik_entrypoint_web }}" }'   - '{ "traefik.http.routers.{{ traefik_router }}-api-http.service": "{{ traefik_router }}" }'-  - '{ "traefik.http.routers.{{ traefik_router }}-api-http.rule": "{{ traefik_host_template }} && ({{ lookup("vars", traefik_role_var + "_traefik_api_endpoint", default=lookup("vars", role_name + "_traefik_api_endpoint", default=omit)) }})" }'+  - '{ "traefik.http.routers.{{ traefik_router }}-api-http.rule": "{{ traefik_host_template }} && ({{ lookup("role_var", "_traefik_api_endpoint", default=omit) }})" }'   - '{ "traefik.http.routers.{{ traefik_router }}-api-http.priority": "30" }'-  - '{ "traefik.http.routers.{{ traefik_router }}-api-http.middlewares": "{{ lookup("vars", traefik_role_var + "_traefik_api_middleware_http", default=lookup("vars", role_name + "_traefik_api_middleware_http", default=traefik_default_middleware_http_api)) }}" }'+  - '{ "traefik.http.routers.{{ traefik_router }}-api-http.middlewares": "{{ lookup("role_var", "_traefik_api_middleware_http", default=traefik_default_middleware_http_api) }}" }'   - '{ "traefik.http.routers.{{ traefik_router }}-api.entrypoints": "{{ traefik_entrypoint_websecure }}" }'   - '{ "traefik.http.routers.{{ traefik_router }}-api.service": "{{ traefik_router }}" }'-  - '{ "traefik.http.routers.{{ traefik_router }}-api.rule": "{{ traefik_host_template }} && ({{ lookup("vars", traefik_role_var + "_traefik_api_endpoint", default=lookup("vars", role_name + "_traefik_api_endpoint", default=omit)) }})" }'+  - '{ "traefik.http.routers.{{ traefik_router }}-api.rule": "{{ traefik_host_template }} && ({{ lookup("role_var", "_traefik_api_endpoint", default=omit) }})" }'   - '{ "traefik.http.routers.{{ traefik_router }}-api.priority": "30" }'-  - '{ "traefik.http.routers.{{ traefik_router }}-api.tls.certresolver": "{{ lookup("vars", traefik_role_var + "_traefik_certresolver", default=lookup("vars", role_name + "_traefik_certresolver", default=traefik_default_certresolver)) }}" }'+  - '{ "traefik.http.routers.{{ traefik_router }}-api.tls.certresolver": "{{ lookup("role_var", "_traefik_certresolver", default=traefik_default_certresolver) }}" }'   - '{ "traefik.http.routers.{{ traefik_router }}-api.tls.options": "securetls@file" }'-  - '{ "traefik.http.routers.{{ traefik_router }}-api.middlewares": "{{ lookup("vars", traefik_role_var + "_traefik_api_middleware", default=lookup("vars", role_name + "_traefik_api_middleware", default=traefik_default_middleware_api)) }}" }'--docker_labels_traefik: "{{ docker_labels_traefik_main | combine(docker_labels_traefik_api)+  - '{ "traefik.http.routers.{{ traefik_router }}-api.middlewares": "{{ lookup("role_var", "_traefik_api_middleware", default=traefik_default_middleware_api) }}" }'++docker_labels_traefik_main_dict: "{{ docker_labels_traefik_main | map('from_json') | combine | dict2items | rejectattr('value', 'equalto', '') | items2dict }}"+docker_labels_traefik_api_dict: "{{ docker_labels_traefik_api | map('from_json') | combine | dict2items | rejectattr('value', 'equalto', '') | items2dict }}"++docker_labels_traefik: "{{ (docker_labels_traefik_main_dict | combine(docker_labels_traefik_api_dict, docker_labels_wildcard_dict, docker_labels_wildcard_api_dict)                         if traefik_role_api_enabled-                        else docker_labels_traefik_main }}"+                        else docker_labels_traefik_main_dict) | combine(docker_labels_wildcard_dict) }}"  docker_labels_common: "{{ docker_labels_saltbox | combine(docker_labels_traefik)                        if traefik_role_enabled@@ -466,8 +503,8 @@  docker_networks_name_common: saltbox -docker_networks_alias_template: "{{ (lookup('vars', role_name + '_docker_networks_alias') | split(' '))-                                    + (lookup('vars', lookup('vars', role_name + '_name', default=role_name) + '_docker_networks_alias_custom', default=[])) }}"+docker_networks_alias_template: "{{ [lookup('role_var', '_docker_networks_alias')]+                                    + lookup('role_var', '_docker_networks_alias_custom', default=[]) }}"  docker_networks_common:   - name: "{{ docker_networks_name_common }}"@@ -486,14 +523,14 @@ docker_log_driver_json: "json-file"  docker_log_driver: "{{ docker_log_driver_json-                    if docker.json_driver+                    if (docker.json_driver | bool)                     else 'default' }}"  docker_log_options_json:   tag: "{% raw %}'{{.ImageName}}|{{.Name}}|{{.ImageFullID}}|{{.FullID}}'{% endraw %}" # noqa jinja[spacing]  docker_log_options: "{{ docker_log_options_json-                     if docker.json_driver+                     if (docker.json_driver | bool)                      else 'default' }}"  docker_network_container_health_delay: 5@@ -511,8 +548,11 @@ ################################  reboot_is_necessary: false-skip_dns: "{{ not (dns.ipv4 or dns.ipv6) }}"-role_dns_enabled: "{{ lookup('vars', role_name + '_dns_enabled', default=true) | bool }}"+dns_proxied: "{{ dns.proxied | bool }}"+skip_dns: "{{ not (dns_ipv4_enabled or dns_ipv6_enabled) }}"+role_dns_enabled: "{{ lookup('role_var', '_dns_enabled', default=true) | bool }}"+dns_ipv4_enabled: "{{ dns.ipv4 | bool }}"+dns_ipv6_enabled: "{{ dns.ipv6 | bool }}" docker_legacy_volume: false ansible_retry_count: "2" ansible_retry_count_ci: "5"@@ -524,15 +564,23 @@ backup_rclone_transfers: 4 backup_rclone_drive_chunk_size: 128M backup_rclone_dropbox_chunk_size: 128M+backup_local_enabled: "{{ backup.local.enable | bool }}"+backup_rclone_enabled: "{{ backup.rclone.enable | bool }}"+backup_rsync_enabled: "{{ backup.rsync.enable | bool }}"+backup_snapshot_enabled: "{{ backup.misc.snapshot | bool }}"  reverse_proxy_apps:   - traefik -torrent_apps:-  - deluge-  - delugevpn-  - qbittorrent-  - qbittorrentvpn-  - rutorrent-  - transmission-  - transmissionvpn+torrent_apps_saltbox:+  - "{{ deluge_instances | default('deluge') }}"+  - "{{ qbittorrent_instances | default('qbittorrent') }}"+  - "{{ rutorrent_name | default('rutorrent') }}"++torrent_apps_sandbox:+  - "{{ delugevpn_name | default('delugevpn') }}"+  - "{{ qbittorrentvpn_instances | default('qbittorrentvpn') }}"+  - "{{ transmission_instances | default('transmission') }}"+  - "{{ transmissionvpn_name | default('transmissionvpn') }}"++torrent_apps: "{{ (torrent_apps_saltbox + torrent_apps_sandbox) | flatten | unique | sort }}"

@@ -2,7 +2,6 @@  from ansible.module_utils.basic import AnsibleModule import subprocess-import json  DOCUMENTATION = """ ---@@ -36,6 +35,10 @@  def find_port(module, low_bound, high_bound, protocol):     try:+        if low_bound < 1:+            module.fail_json(msg="Low bound must be at least 1")+        if high_bound > 65535:+            module.fail_json(msg="High bound must be at most 65535")         if high_bound <= low_bound:             module.fail_json(msg="High bound must be higher than low bound") @@ -46,14 +49,17 @@         if protocol == 'tcp':             cmd = "ss -Htan"             awk_cmd = "awk '{print $4}'"+            state_filter = "grep LISTEN"         elif protocol == 'udp':             cmd = "ss -Huan"             awk_cmd = "awk '{print $4}'"+            state_filter = "grep UNCONN"         else:  # both             cmd = "ss -Htuan"             awk_cmd = "awk '{print $5}'"+            state_filter = "grep -E 'LISTEN|UNCONN'" -        cmd += " | grep LISTEN | " + awk_cmd + " | grep -Eo '[0-9]+$' | sort -u"+        cmd += " | " + state_filter + " | " + awk_cmd + " | grep -Eo '[0-9]+$' | sort -u"          # Run command to get ports in use         ports_in_use = subprocess.check_output(cmd, shell=True)@@ -67,10 +73,12 @@             candidate = min(available_ports)             return False, {"port": candidate}         else:-            return False, {"msg": "No available port found in the specified range"}+            return True, {"msg": "No available port found in the specified range"} -    except Exception as e:-        module.fail_json(msg=str(e))+    except subprocess.CalledProcessError as e:+        module.fail_json(msg=f"Failed to execute ss command: {e}")+    except ValueError as e:+        module.fail_json(msg=f"Failed to parse port numbers: {e}")  def main():     module = AnsibleModule(

@@ -105,12 +105,13 @@ import grp import stat import traceback+from typing import Any, Optional, Tuple  from ansible.module_utils.basic import AnsibleModule-from ansible.module_utils.pycompat24 import get_exception+  # Helper to safely get UID/GID-def get_id_info(module, owner=None, group=None):+def get_id_info(module: AnsibleModule, owner: Optional[str] = None, group: Optional[str] = None) -> Tuple[int, int]:     uid = -1     gid = -1     if owner is not None:@@ -126,21 +127,23 @@     return uid, gid  # Helper to validate and convert mode-def validate_mode(module, mode_str):+def validate_mode(module: AnsibleModule, mode_str: Optional[str]) -> Optional[int]:     if mode_str is None:         return None     try:         # Ensure it's treated as octal-        if not isinstance(mode_str, str):-             mode_str = str(mode_str)-        if not mode_str.startswith('0'):-             mode_str = '0' + mode_str # Ensure octal interpretation for int()-        return int(mode_str, 8)+        mode_value = mode_str+        if not isinstance(mode_value, str):+            mode_value = str(mode_value)+        if not mode_value.startswith('0'):+            mode_value = '0' + mode_value  # Ensure octal interpretation for int()+        return int(mode_value, 8)     except (ValueError, TypeError):         module.fail_json(msg=f"Invalid mode '{mode_str}' specified. Must be an octal number string (e.g., '0775').")---def run_module():+        return None  # This line is unreachable but satisfies type checker+++def run_module() -> None:     module_args = dict(         legacy_path=dict(type='str', required=True),         new_path=dict(type='str', required=True),@@ -150,7 +153,7 @@         recurse=dict(type='bool', required=False, default=False)     ) -    result = dict(+    result: dict[str, Any] = dict(         changed=False,         moved=False,         created=False,@@ -181,18 +184,15 @@     # Check path statuses and types     legacy_exists = os.path.lexists(legacy_path)     new_exists = os.path.lexists(new_path)-    legacy_is_dir = False-    new_is_dir = False--    if legacy_exists:-        if not os.path.isdir(legacy_path):-             module.fail_json(msg=f"Legacy path '{legacy_path}' exists but is not a directory.")-        legacy_is_dir = True--    if new_exists:-        if not os.path.isdir(new_path):-             module.fail_json(msg=f"New path '{new_path}' exists but is not a directory.")-        new_is_dir = True++    if legacy_exists and not os.path.isdir(legacy_path):+        module.fail_json(msg=f"Legacy path '{legacy_path}' exists but is not a directory.")++    if new_exists and not os.path.isdir(new_path):+        module.fail_json(msg=f"New path '{new_path}' exists but is not a directory.")++    legacy_is_dir = legacy_exists and os.path.isdir(legacy_path)+    new_is_dir = new_exists and os.path.isdir(new_path)      # --- Check Mode Early Exit ---     if module.check_mode:@@ -241,20 +241,19 @@         try:             # Ensure all parent directories exist before moving             parent_dir = os.path.dirname(new_path)-            created_dirs = []-            +             if parent_dir and not os.path.exists(parent_dir):                 # Find which directories we'll need to create                 path_to_create = parent_dir-                dirs_to_create = []-                +                dirs_to_create: list[str] = []+                 while path_to_create and path_to_create != '/' and path_to_create != '' and not os.path.exists(path_to_create):                     dirs_to_create.append(path_to_create)                     path_to_create = os.path.dirname(path_to_create)-                +                 # Create parent directories                 os.makedirs(parent_dir, exist_ok=True)-                +                 # Apply ownership and permissions only to directories we just created                 if (owner is not None or group is not None or mode_int is not None) and dirs_to_create:                     for created_dir in dirs_to_create:@@ -262,7 +261,7 @@                             try:                                 if owner is not None or group is not None:                                     current_stat = os.stat(created_dir)-                                    os.chown(created_dir, +                                    os.chown(created_dir,                                             uid if uid != -1 else current_stat.st_uid,                                             gid if gid != -1 else current_stat.st_gid)                                 if mode_int is not None:@@ -349,7 +348,7 @@     # --- Exit ---     module.exit_json(**result) -def main():+def main() -> None:     run_module()  if __name__ == '__main__':

@@ -1,40 +1,123 @@ #!/usr/bin/python-from ansible.module_utils.basic import AnsibleModule+# -*- coding: utf-8 -*-++from __future__ import absolute_import, division, print_function+__metaclass__ = type++DOCUMENTATION = r'''+---+module: qbittorrent_password_hash+short_description: Generates a password hash compatible with qBittorrent.+description:+    - Takes a plain text password and generates a salted hash using the PBKDF2-HMAC-SHA512 algorithm.+    - Uses 100,000 iterations and a 16-byte random salt, matching qBittorrent's expected format.+    - The output format is "@ByteArray(SALT_BASE64:HASH_BASE64)".+    - This module is useful for generating password hashes to be placed in qBittorrent configuration files non-interactively.+    - The input password parameter has `no_log=True` set for security.+options:+    password:+        description: The plain text password to hash.+        type: str+        required: true+        no_log: true+author:+    - Salty+'''++EXAMPLES = r'''+- name: Generate qBittorrent password hash+  qbittorrent_passwd:+    password: "supersecretpassword"+  register: qbit_hash_result++- name: Display the generated hash+  debug:+    var: qbit_hash_result.hash+'''++RETURN = r'''+hash:+    description: The generated qBittorrent-compatible password hash string.+    type: str+    returned: on success+    sample: "@ByteArray(aBcDeFgHiJkLmNoPqRsTuVw==:xYz123AbCdEfGhIjKlMnOpQrStUvWxYz12/abc+def=)"+changed:+    description: Indicates if any state was changed. Always false for this module.+    type: bool+    returned: always+    sample: false+'''+ import base64 import hashlib import os+from typing import Any+from ansible.module_utils.basic import AnsibleModule -def qbittorrent_passwd(plain_passwd):++def generate_qbittorrent_hash(plain_passwd: str) -> str:+    """+    Generates a qBittorrent compatible password hash (PBKDF2-HMAC-SHA512).+    """+    ITERATIONS = 100_000  # Standard iteration count for qBittorrent+    SALT_SIZE = 16        # Standard salt size (bytes)+     try:-        ITERATIONS = 100_000-        SALT_SIZE = 16+        salt = os.urandom(SALT_SIZE)+        # Ensure password is bytes for hashing+        password_bytes = plain_passwd.encode()+        +        # Generate the hash+        derived_key = hashlib.pbkdf2_hmac(+            hash_name='sha512',+            password=password_bytes,+            salt=salt,+            iterations=ITERATIONS+        )+        +        # Encode salt and hash in Base64+        salt_b64 = base64.b64encode(salt).decode()+        hash_b64 = base64.b64encode(derived_key).decode()+        +        # Format according to qBittorrent's expectation+        return f"@ByteArray({salt_b64}:{hash_b64})" -        salt = os.urandom(SALT_SIZE)-        h = hashlib.pbkdf2_hmac("sha512", plain_passwd.encode(), salt, ITERATIONS)-        return "@ByteArray({}:{})".format(base64.b64encode(salt).decode(), base64.b64encode(h).decode())     except Exception as e:-        raise ValueError(f"Error generating password hash: {str(e)}")+        # Wrap underlying exception for better debugging upstream+        raise ValueError(f"Error generating password hash: {str(e)}") from e -def main():++def main() -> None:     module_args = dict(         password=dict(type='str', required=True, no_log=True)     ) -    result = dict(-        changed=False,-        msg=''-    )+    result: dict[str, Any] = {+        'changed': False,+        'hash': '',+    }      module = AnsibleModule(         argument_spec=module_args,-        supports_check_mode=True+        supports_check_mode=False     ) +    plain_password: str = module.params['password']+     try:-        result['msg'] = qbittorrent_passwd(module.params['password'])+        # Generate the hash using the dedicated function+        generated_hash = generate_qbittorrent_hash(plain_password)+        result['hash'] = generated_hash+         except ValueError as err:-        module.fail_json(msg=str(err))+        # If the hashing function raised ValueError, fail the module+        module.fail_json(msg=f"Failed to generate qBittorrent hash: {str(err)}", **result)+    except Exception as e:+         # Catch any other unexpected errors during execution+         module.fail_json(msg=f"An unexpected error occurred: {str(e)}", **result) ++    # Exit successfully, returning the hash     module.exit_json(**result)  if __name__ == '__main__':

@@ -18,6 +18,7 @@         owner: user1         group: group1         mode: "0640"+        base_path: "{{ server_appdata_path }}"       register: register_var      # Save facts with overwrite (ignores existing values)@@ -28,6 +29,7 @@         keys:           key1: value1           key2: value2+        base_path: "{{ server_appdata_path }}"         overwrite: true       register: register_var @@ -41,6 +43,7 @@         keys:           key1: ""           key2: ""+        base_path: "{{ server_appdata_path }}"      # Delete entire instance     - name: Delete instance@@ -49,6 +52,7 @@         instance: instance1         method: delete         delete_type: instance+        base_path: "{{ server_appdata_path }}"      # Delete entire role (removes configuration file)     - name: Delete role@@ -57,6 +61,7 @@         instance: instance1         method: delete         delete_type: role+        base_path: "{{ server_appdata_path }}"      # Save with default owner/group (current user)     - name: Save facts with defaults@@ -65,6 +70,7 @@         instance: instance1         keys:           key1: value1+        base_path: "{{ server_appdata_path }}"       register: register_var      # Save with specific file permissions@@ -75,6 +81,7 @@         keys:           key1: value1         mode: "0600"+        base_path: "{{ server_appdata_path }}"       register: register_var  Return Values:@@ -90,22 +97,22 @@         description: Informational or error message         type: str         returned: when applicable-    warnings:-        description: List of warning messages-        type: list-        returned: when applicable """ -from ansible.module_utils.basic import AnsibleModule+from __future__ import annotations+ import configparser+import grp import os import pwd-import grp+import shutil import tempfile-import shutil from io import StringIO--def validate_instance_name(instance):+from typing import Any++from ansible.module_utils.basic import AnsibleModule++def validate_instance_name(instance: Any) -> None:     """     Validate that the instance name is a string. @@ -118,7 +125,7 @@     if not isinstance(instance, str):         raise ValueError("Instance name must be a string") -def validate_keys(keys):+def validate_keys(keys: Any) -> None:     """     Validate configuration keys and values. @@ -130,7 +137,7 @@     """     if not isinstance(keys, dict):         raise ValueError("Keys must be a dictionary")-    +     for key, value in keys.items():         if not isinstance(key, str):             raise ValueError(f"Invalid key '{key}': must be a string")@@ -139,12 +146,13 @@                 f"Invalid value type for key '{key}': must be string, number, or boolean"             ) -def get_file_path(role):+def get_file_path(role: str, base_path: str) -> str:     """     Get the configuration file path for a role.      Args:         role (str): Name of the role+        base_path (str): Base directory path      Returns:         str: Full path to the configuration file@@ -154,9 +162,9 @@     """     if not isinstance(role, str):         raise ValueError("Role name must be a string")-    return f"/opt/saltbox/{role}.ini"--def atomic_write(file_path, content, mode, owner, group):+    return f"{base_path}/saltbox/{role}.ini"++def atomic_write(file_path: str, content: str, mode: int, owner: str, group: str) -> None:     """     Write content to file atomically with proper permissions. @@ -173,24 +181,24 @@     """     directory = os.path.dirname(file_path)     os.makedirs(directory, exist_ok=True)-    +     temp_fd, temp_path = tempfile.mkstemp(dir=directory)     try:         with os.fdopen(temp_fd, 'w') as temp_file:             temp_file.write(content)-        +         os.chmod(temp_path, mode)-        os.chown(temp_path, +        os.chown(temp_path,                 pwd.getpwnam(owner).pw_uid,                 grp.getgrnam(group).gr_gid)-        +         shutil.move(temp_path, file_path)     except Exception:         if os.path.exists(temp_path):             os.unlink(temp_path)         raise -def load_existing_facts(file_path, instance):+def load_existing_facts(file_path: str, instance: str) -> dict[str, str]:     """     Load existing facts from configuration file for a specific instance. @@ -206,7 +214,7 @@     """     try:         validate_instance_name(instance)-        +         config = configparser.ConfigParser(             interpolation=None,             comment_prefixes=('#',),@@ -215,11 +223,11 @@             delimiters=('=',),             empty_lines_in_values=False         )-        -        config.optionxform = str-        -        existing_facts = {}-        ++        config.optionxform = lambda optionstr: optionstr  # Preserve case sensitivity for config keys++        existing_facts: dict[str, str] = {}+         if os.path.exists(file_path):             config.read(file_path)             if config.has_section(instance):@@ -228,15 +236,15 @@                         value = config.get(instance, key)                         if value != 'None':                             existing_facts[key] = value-                +         return existing_facts-        +     except configparser.Error as e:         raise Exception(f"Configuration parsing error: {str(e)}")     except Exception as e:         raise Exception(f"Unexpected error: {str(e)}") -def process_facts(file_path, instance, keys, owner, group, mode, overwrite=False):+def process_facts(file_path: str, instance: str, keys: dict[str, Any], owner: str, group: str, mode: int, overwrite: bool = False) -> tuple[dict[str, str], bool]:     """     Process facts by loading existing values and saving new ones as needed. @@ -258,14 +266,14 @@     try:         validate_instance_name(instance)         validate_keys(keys)-        +         # Load existing facts first         existing_facts = load_existing_facts(file_path, instance)-        +         # Determine final facts based on overwrite setting-        final_facts = {}-        keys_to_save = {}-        +        final_facts: dict[str, str] = {}+        keys_to_save: dict[str, str] = {}+         if overwrite:             # Overwrite mode: use provided keys, keep existing keys not in provided keys             final_facts.update(existing_facts)@@ -275,16 +283,16 @@             # Default mode: keep existing values, only add new keys             final_facts.update({k: str(v) for k, v in keys.items()})             final_facts.update(existing_facts)  # Existing values override new ones-            +             # Only save keys that don't exist yet             for key, value in keys.items():                 if key not in existing_facts:                     keys_to_save[key] = str(value)-        +         # If no new keys to save, return existing facts without changes         if not keys_to_save:             return final_facts, False-        +         # Save new/updated keys         config = configparser.ConfigParser(             interpolation=None,@@ -294,21 +302,21 @@             delimiters=('=',),             empty_lines_in_values=False         )-        -        config.optionxform = str-        ++        config.optionxform = lambda optionstr: optionstr  # Preserve case sensitivity for config keys+         if os.path.exists(file_path):             config.read(file_path)          changed = False-        +         if not config.has_section(instance):             config.add_section(instance)             changed = True          for key, value in keys_to_save.items():-            if (not config.has_section(instance) or -                not config.has_option(instance, key) or +            if (not config.has_section(instance) or+                not config.has_option(instance, key) or                 config.get(instance, key) != str(value)):                 config.set(instance, key, str(value))                 changed = True@@ -317,11 +325,11 @@             with StringIO() as string_buffer:                 config.write(string_buffer)                 config_str = string_buffer.getvalue()-            +             atomic_write(file_path, config_str, mode, owner, group)          return final_facts, changed-        +     except (OSError, IOError) as e:         raise Exception(f"File operation error: {str(e)}")     except configparser.Error as e:@@ -329,7 +337,7 @@     except Exception as e:         raise Exception(f"Unexpected error: {str(e)}") -def delete_facts(file_path, delete_type, instance, keys):+def delete_facts(file_path: str, delete_type: str, instance: str, keys: dict[str, Any]) -> bool:     """     Delete facts from configuration file. @@ -356,7 +364,7 @@             return False          config = configparser.ConfigParser(interpolation=None)-        config.optionxform = str+        config.optionxform = lambda optionstr: optionstr  # Preserve case sensitivity for config keys         config.read(file_path)         changed = False @@ -374,14 +382,14 @@             with StringIO() as string_buffer:                 config.write(string_buffer)                 config_str = string_buffer.getvalue()-            +             stat = os.stat(file_path)-            atomic_write(file_path, config_str, stat.st_mode, +            atomic_write(file_path, config_str, stat.st_mode,                         pwd.getpwuid(stat.st_uid).pw_name,                         grp.getgrgid(stat.st_gid).gr_name)          return changed-        +     except (OSError, IOError) as e:         raise Exception(f"File operation error: {str(e)}")     except configparser.Error as e:@@ -389,7 +397,7 @@     except Exception as e:         raise Exception(f"Unexpected error: {str(e)}") -def parse_mode(mode):+def parse_mode(mode: Any) -> int:     """     Parse and validate file mode. @@ -413,7 +421,7 @@     else:         raise ValueError("Mode must be a quoted octal number starting with '0' (e.g., '0640').") -def get_current_user():+def get_current_user() -> str:     """     Get current user name. @@ -422,7 +430,7 @@     """     return pwd.getpwuid(os.getuid()).pw_name -def run_module():+def run_module() -> None:     """     Main module execution. @@ -440,6 +448,7 @@     - group (str): File group (default: current user)     - mode (str): File mode in octal string format (default: '0640')     - overwrite (bool): If True, overwrite existing values; if False, keep existing (default: False)+    - base_path (str): Base directory path for storing configuration files (required)     """     module_args = dict(         role=dict(type='str', required=True),@@ -450,14 +459,14 @@         owner=dict(type='str', required=False),         group=dict(type='str', required=False),         mode=dict(type='str', required=False, default='0640'),-        overwrite=dict(type='bool', required=False, default=False)+        overwrite=dict(type='bool', required=False, default=False),+        base_path=dict(type='str', required=True)     )      result = dict(         changed=False,         message='',-        facts={},-        warnings=[]+        facts={}     )      module = AnsibleModule(@@ -466,19 +475,20 @@     )      try:-        role = module.params['role']-        instance = module.params['instance']-        method = module.params.get('method')-        keys = module.params['keys']-        delete_type = module.params.get('delete_type')-        overwrite = module.params['overwrite']-        +        role: str = module.params['role']+        instance: str = module.params['instance']+        method: str | None = module.params.get('method')+        keys: dict[str, Any] = module.params['keys']+        delete_type: str | None = module.params.get('delete_type')+        overwrite: bool = module.params['overwrite']+        base_path: str = module.params['base_path']+         current_user = get_current_user()-        owner = module.params.get('owner') or current_user-        group = module.params.get('group') or current_user+        owner: str = module.params.get('owner') or current_user+        group: str = module.params.get('group') or current_user          mode = parse_mode(module.params['mode'])-        file_path = get_file_path(role)+        file_path = get_file_path(role, base_path)          if method == 'delete':             if not delete_type:@@ -495,7 +505,7 @@     except Exception as e:         module.fail_json(msg=str(e)) -def main():+def main() -> None:     """     Module entry point.     """

@@ -1,8 +1,10 @@-ansible==11.11.0-ansible-lint==25.9.2+aiohttp==3.13.2+ansible==13.0.0+ansible-lint==25.11.0 apprise==1.9.5 argon2_cffi==25.1.0 certbot==5.1.0+cloudflare==4.3.1 dnspython==2.8.0 docker==7.1.0 jinja2==3.1.6@@ -12,9 +14,10 @@ netaddr==1.3.0 passlib==1.7.4 pexpect==4.9.0+psycopg[binary]==3.2.12 PyMySQL==1.1.2 pyOpenSSL==25.3.0 requests==2.32.5 ruamel.yaml==0.18.16 tld==0.13.1-uv==0.9.6+uv==0.9.10

@@ -8,12 +8,3 @@ ######################################################################### --- cloudflare_allow_nested_proxy: false-cloudflare_reinstall: false-cloudflare_path: "/srv/cloudflare-helper"-cloudflare_venv_path: "{{ cloudflare_path }}/venv"-cloudflare_python_version: "3.10"-cloudflare_script_path: "{{ cloudflare_path }}/fetch_cloudflare_records.py"-cloudflare_requirements_path: "{{ cloudflare_path }}/requirements.txt"-cloudflare_files:-  - "fetch_cloudflare_records.py"-  - "requirements.txt"

@@ -7,39 +7,26 @@ #                   GNU General Public License v3.0                     # ######################################################################### ----- name: Cloudflare | Cleanup legacy folder+- name: Cloudflare | Cleanup legacy folders   ansible.builtin.file:-    path: "/srv/cloudflare"+    path: "{{ item }}"     state: absent+  loop:+    - "/srv/cloudflare"+    - "/srv/cloudflare-helper" -- name: Cloudflare | Check if '{{ cloudflare_path }}' folder exists-  ansible.builtin.stat:-    path: "{{ cloudflare_path }}"-  register: cloudflare_folder--- name: Cloudflare | Check if Python symlink exists-  ansible.builtin.stat:-    path: "{{ cloudflare_path }}/venv/bin/python{{ cloudflare_python_version }}"-  register: cloudflare_folder_symlink--- name: Cloudflare | Python Migration-  ansible.builtin.include_tasks: "subtasks/python.yml"-  when: cloudflare_folder_symlink.stat.exists--- name: Cloudflare | Checksum-  ansible.builtin.include_tasks: "subtasks/checksum.yml"--- name: Cloudflare | Setup-  ansible.builtin.include_tasks: "subtasks/setup.yml"-  when: (not cloudflare_folder.stat.exists) or (not cloudflare_folder_symlink.stat.exists) or (cloudflare_reinstall | bool)+- name: Set IP variables+  ansible.builtin.set_fact:+    ipv4_address_public_template: "{{ lookup('vars', ansible_parent_role_names | first + '_dns_ipv4', default=lookup('vars', ansible_parent_role_names | first + '_role_dns_ipv4', default=ip_address_public)) }}"+    ipv6_address_public_template: "{{ lookup('vars', ansible_parent_role_names | first + '_dns_ipv4', default=lookup('vars', ansible_parent_role_names | first + '_role_dns_ipv6', default=ipv6_address_public)) }}"  - name: Cloudflare | Tailscale block-  when: traefik_tailscale_enabled and lookup('vars', ansible_parent_role_names | first + '_traefik_tailscale_enabled', default=false)+  when: traefik_tailscale_enabled and lookup('vars', ansible_parent_role_names | first + '_traefik_tailscale_enabled', default=lookup('vars', ansible_parent_role_names | first + '_role_traefik_tailscale_enabled', default=false))   block:     - name: Get Tailscale IPs       ansible.builtin.shell: "tailscale ip"       register: dns_tailscale_ips-      failed_when: dns_tailscale_ips.rc != 0+      failed_when: (dns_tailscale_ips.rc != 0)      - name: Set Tailscale variables       ansible.builtin.set_fact:@@ -48,8 +35,8 @@  - name: Cloudflare | Add DNS Record   ansible.builtin.include_tasks: "subtasks/add_dns_record.yml"-  when: dns_action != 'remove'+  when: (dns_action != 'remove')  - name: Cloudflare | Remove DNS Record   ansible.builtin.include_tasks: "subtasks/remove_dns_record.yml"-  when: dns_action == 'remove'+  when: (dns_action == 'remove')

@@ -15,18 +15,16 @@   when: (not cloudflare_allow_nested_proxy) and ("." in dns_record) and dns_proxy  - name: Cloudflare | Add DNS Record | Fetch Record information-  ansible.builtin.shell: "{{ cloudflare_path }}/venv/bin/python3 {{ cloudflare_script_path }} --auth_key '{{ cloudflare.api }}' --auth_email '{{ cloudflare.email }}' --zone_name '{{ dns_zone }}' --record '{{ dns_record }}.{{ dns_zone }}'"+  cloudflare_dns_records:+    auth_email: "{{ cloudflare.email }}"+    auth_key: "{{ cloudflare.api }}"+    zone_name: "{{ dns_zone }}"+    record: "{{ dns_record }}.{{ dns_zone }}"   register: cloudflare_record-  ignore_errors: true -- name: Cloudflare | Add DNS Record | Print Failure Output-  ansible.builtin.fail:-    msg: "{{ cloudflare_record.stderr }}"-  when: cloudflare_record.rc != 0--- name: Cloudflare | Add DNS Record | Convert JSON to Dictionary+- name: Cloudflare | Add DNS Record | Set variables   ansible.builtin.set_fact:-    cloudflare_record_dict: "{{ cloudflare_record.stdout | from_json }}"+    cloudflare_record_dict: "{{ cloudflare_record.records }}"     cloudflare_ipv4_record: []     cloudflare_ipv6_record: [] @@ -45,7 +43,7 @@     label: "{{ item.name }} - {{ item.type }}"  - name: Cloudflare | Add DNS Record | Tasks on success-  when: cloudflare_dns_record_removal_status is succeeded and cloudflare_dns_record_removal_status.changed+  when: (cloudflare_dns_record_removal_status is succeeded) and cloudflare_dns_record_removal_status.changed   block:     - name: Cloudflare | Add DNS Record | Set 'dns_record_print' variable       ansible.builtin.set_fact:@@ -73,20 +71,20 @@  - name: Cloudflare | Add DNS Record | IPv4 Tasks   ansible.builtin.include_tasks: "add_dns_record/ipv4_enabled.yml"-  when: dns.ipv4 and-        ((not ((cloudflare_ipv4_record is defined and (cloudflare_ipv4_record | length > 0)) and (cloudflare_ipv4_record.content == ip_address_public) and (cloudflare_ipv4_record.proxied == dns_proxy)))-         or not (cloudflare_ipv4_record is defined and (cloudflare_ipv4_record | length > 0)))+  when: dns_ipv4_enabled and+        ((not (((cloudflare_ipv4_record is defined) and (cloudflare_ipv4_record | length > 0)) and (cloudflare_ipv4_record.content == ipv4_address_public_template) and (cloudflare_ipv4_record.proxied == dns_proxy)))+         or not ((cloudflare_ipv4_record is defined) and (cloudflare_ipv4_record | length > 0)))  - name: Cloudflare | Add DNS Record | IPv4 Disable Tasks   ansible.builtin.include_tasks: "add_dns_record/ipv4_disabled.yml"-  when: (not dns.ipv4) and (cloudflare_ipv4_record is defined and (cloudflare_ipv4_record | length > 0))+  when: (not dns_ipv4_enabled) and ((cloudflare_ipv4_record is defined) and (cloudflare_ipv4_record | length > 0))  - name: Cloudflare | Add DNS Record | IPv6 Enabled Block   ansible.builtin.include_tasks: "add_dns_record/ipv6_enabled.yml"-  when: dns.ipv6 and-        ((not ((cloudflare_ipv6_record is defined and (cloudflare_ipv6_record | length > 0)) and (cloudflare_ipv6_record.content == ipv6_address_public) and (cloudflare_ipv6_record.proxied == dns_proxy)))-         or not (cloudflare_ipv6_record is defined and (cloudflare_ipv6_record | length > 0)))+  when: dns_ipv6_enabled and+        ((not (((cloudflare_ipv6_record is defined) and (cloudflare_ipv6_record | length > 0)) and (cloudflare_ipv6_record.content == ipv6_address_public_template) and (cloudflare_ipv6_record.proxied == dns_proxy)))+         or not ((cloudflare_ipv6_record is defined) and (cloudflare_ipv6_record | length > 0)))  - name: Cloudflare | Add DNS Record | IPv6 Disable Block   ansible.builtin.include_tasks: "add_dns_record/ipv6_disabled.yml"-  when: (not dns.ipv6) and (cloudflare_ipv6_record is defined and (cloudflare_ipv6_record | length > 0))+  when: (not dns_ipv6_enabled) and ((cloudflare_ipv6_record is defined) and (cloudflare_ipv6_record | length > 0))

@@ -10,7 +10,7 @@ - name: Cloudflare | Add DNS Record | IPv4 | Validate IP variable   ansible.builtin.fail:     msg: "{{ ip_address_public_error }}"-  when: (not ip_address_public_is_valid)+  when: (not ip_address_public_is_valid) and (ipv4_address_public_template == ip_address_public)  - name: Cloudflare | Add DNS Record | IPv4 | Add DNS Record   community.general.cloudflare_dns:@@ -21,8 +21,8 @@     solo: true     proxied: "{{ dns_proxy }}"     type: A-    value: "{{ ip_address_public-            if not lookup('vars', ansible_parent_role_names | first + '_traefik_tailscale_enabled', default=false)+    value: "{{ ipv4_address_public_template+            if not lookup('vars', ansible_parent_role_names | first + '_traefik_tailscale_enabled', default=lookup('vars', ansible_parent_role_names | first + '_role_traefik_tailscale_enabled', default=false))             else dns_tailscale_ipv4 }}"     record: "{{ dns_record }}"   register: cloudflare_dns_record_creation_status@@ -36,4 +36,4 @@      - name: Cloudflare | Add DNS Record | IPv4 | Display DNS Record creation status       ansible.builtin.debug:-        msg: "DNS A Record for '{{ dns_record_print }}' set to '{{ ip_address_public }}' was added. Proxy: {{ dns_proxy }}"+        msg: "DNS A Record for '{{ dns_record_print }}' set to '{{ ipv4_address_public_template }}' was added. Proxy: {{ dns_proxy }}"

@@ -10,7 +10,7 @@ - name: Cloudflare | Add DNS Record | IPv6 | Validate IPv6 variable   ansible.builtin.fail:     msg: "{{ ipv6_address_public_error }}"-  when: (not ipv6_address_public_is_valid)+  when: (not ipv6_address_public_is_valid) and (ipv6_address_public_template == ipv6_address_public)  - name: Cloudflare | Add DNS Record | IPv6 | Add DNS Record   community.general.cloudflare_dns:@@ -21,8 +21,8 @@     solo: true     proxied: "{{ dns_proxy }}"     type: AAAA-    value: "{{ ipv6_address_public-            if not lookup('vars', ansible_parent_role_names | first + '_traefik_tailscale_enabled', default=false)+    value: "{{ ipv6_address_public_template+            if (not lookup('vars', ansible_parent_role_names | first + '_traefik_tailscale_enabled', default=lookup('vars', ansible_parent_role_names | first + '_role_traefik_tailscale_enabled', default=false)))             else dns_tailscale_ipv6 }}"     record: "{{ dns_record }}"   register: cloudflare_dns_v6_record_creation_status@@ -36,4 +36,4 @@      - name: Cloudflare | Add DNS Record | IPv6 | Display DNS Record creation status       ansible.builtin.debug:-        msg: "DNS AAAA Record for '{{ dns_record_print }}' set to '{{ ipv6_address_public }}' was added. Proxy: {{ dns_proxy }}"+        msg: "DNS AAAA Record for '{{ dns_record_print }}' set to '{{ ipv6_address_public_template }}' was added. Proxy: {{ dns_proxy }}"

@@ -18,7 +18,7 @@   register: cloudflare_dns_record_removal_status  - name: Cloudflare | Remove DNS Record | IPv4 | Tasks on success-  when: cloudflare_dns_record_removal_status is succeeded+  when: (cloudflare_dns_record_removal_status is succeeded)   block:     - name: Cloudflare | Remove DNS Record | IPv4 | Set 'dns_record_print' variable       ansible.builtin.set_fact:@@ -39,7 +39,7 @@   register: cloudflare_dns_v6_record_removal_status  - name: Cloudflare | Remove DNS Record | IPv6 | Tasks on success-  when: cloudflare_dns_v6_record_removal_status is succeeded+  when: (cloudflare_dns_v6_record_removal_status is succeeded)   block:     - name: Cloudflare | Remove DNS Record | IPv6 | Set 'dns_record_print' variable       ansible.builtin.set_fact:

@@ -11,9 +11,9 @@   ansible.builtin.file:     path: "{{ item }}"     state: directory-    owner: "{{ lookup('vars', role_name + '_paths_owner', default=user.name) }}"-    group: "{{ lookup('vars', role_name + '_paths_group', default=user.name) }}"-    mode: "{{ lookup('vars', role_name + '_paths_permissions', default='0775') }}"-    recurse: "{{ lookup('vars', role_name + '_paths_recursive', default=false) }}"-  with_items: "{{ lookup('vars', role_name + '_paths_folders_list')-                  + lookup('vars', role_name + '_paths_folders_list_custom', default=[]) }}"+    owner: "{{ lookup('role_var', '_paths_owner', default=user.name) }}"+    group: "{{ lookup('role_var', '_paths_group', default=user.name) }}"+    mode: "{{ lookup('role_var', '_paths_permissions', default='0775') }}"+    recurse: "{{ lookup('role_var', '_paths_recursive', default=false) }}"+  with_items: "{{ lookup('role_var', '_paths_folders_list')+                  + lookup('role_var', '_paths_folders_list_custom', default=[]) }}"

@@ -7,49 +7,18 @@ #                   GNU General Public License v3.0                     # ######################################################################### ----- name: Resources | Tasks | DNS | Tasker | Get FLD-  ansible.builtin.shell: |-    {{ saltbox_python }} -c "from tld import get_tld; res = get_tld(\"http://{{ dns_zone | default(user.domain) }}\", as_object=True); print(res.fld)"-  register: fld--- name: Resources | Tasks | DNS | Tasker | Get subdomain-  when: dns_record | length > 0-  block:-    - name: Resources | Tasks | DNS | Tasker | Set subdomain var-      ansible.builtin.set_fact:-        subdomain_block: 1--    - name: Resources | Tasks | DNS | Tasker | Get subdomain-      ansible.builtin.shell: |-        {{ saltbox_python }} -c "from tld import get_tld; res = get_tld(\"http://{{ dns_record }}.{{ dns_zone | default(user.domain) }}\", as_object=True); print(res.subdomain)"-      register: subdomain_notempty--- name: Resources | Tasks | DNS | Tasker | Get subdomain-  when: dns_record | length == 0-  block:-    - name: Resources | Tasks | DNS | Tasker | Set subdomain var-      ansible.builtin.set_fact:-        subdomain_block: 0--    - name: Resources | Tasks | DNS | Tasker | Get subdomain-      ansible.builtin.shell: |-        {{ saltbox_python }} -c "from tld import get_tld; res = get_tld(\"http://{{ dns_zone | default(user.domain) }}\", as_object=True); print(res.subdomain)"-      register: subdomain_empty--- name: Resources | Tasks | DNS | Tasker | Set subdomain var-  ansible.builtin.set_fact:-    subdomain: "{{ subdomain_notempty.stdout-                if (subdomain_block)-                else subdomain_empty.stdout }}"+- name: Resources | Tasks | DNS | Tasker | Parse domain+  tld_parse:+    url: "{{ dns_zone | default(user.domain) }}"+    record: "{{ dns_record | default('') }}"+  register: domain_parsed  - name: Resources | Tasks | DNS | Tasker | Set '_dns_*' variables   ansible.builtin.set_fact:-    _dns_tasker_zone: "{{ fld.stdout }}"-    _dns_tasker_record: "{{ subdomain-                         if (subdomain | length > 0)-                         else '@' }}"+    _dns_tasker_zone: "{{ domain_parsed.fld }}"+    _dns_tasker_record: "{{ domain_parsed.record }}"     _dns_tasker_action: "{{ dns_action | default('add') }}"-    _dns_tasker_proxy: "{{ dns_proxy | default(dns.proxied) }}"+    _dns_tasker_proxy: "{{ dns_proxy | default(dns_proxied) }}"  - name: Resources | Tasks | DNS | Tasker | Sent task to DNS Role   ansible.builtin.include_role:

@@ -13,126 +13,185 @@                   if (var_prefix is defined)                   else role_name }}" +- name: Resources | Tasks | Docker | Create Docker Container | Set instance name+  ansible.builtin.set_fact:+    _instance_name: "{{ lookup('vars', _var_prefix + '_name', default=_var_prefix) }}"++- name: Resources | Tasks | Docker | Create Docker Container | Set variables that need omit handling+  ansible.builtin.set_fact:+    _docker_command: "{{ (lookup('docker_var', '_docker_commands', default=[]) | reject('equalto', omit) | list) }}"+    _docker_cpus: "{{ lookup('docker_var', '_docker_cpus', default=docker_cpus_default) }}"+    _docker_env: "{{ (nvidia_docker_env if use_nvidia else {}) | combine(lookup('docker_var', '_docker_envs', default={})) }}"+    _docker_etc_hosts: "{{ (docker_hosts_common if lookup('docker_var', '_docker_hosts_use_common', default=true) else {}) | combine(lookup('docker_var', '_docker_hosts', default={}))+                        if not ('container:' in lookup('docker_var', '_docker_network_mode', default=docker_networks_name_common))+                        else {} }}"+    _docker_exposed_ports: "{{ (lookup('docker_var', '_docker_exposed_ports', default=[]) | unique | reject('equalto', omit) | list)+                            if not ('container:' in lookup('docker_var', '_docker_network_mode', default=docker_networks_name_common))+                            else [] }}"+    _docker_hostname: "{{ lookup('docker_var', '_docker_hostname', default='')+                       if (lookup('docker_var', '_docker_network_mode', default=docker_networks_name_common) == docker_networks_name_common)+                       else '' }}"+    _docker_labels: "{{ (docker_labels_common if lookup('docker_var', '_docker_labels_use_common', default=true) else {}) | combine(lookup('docker_var', '_docker_labels', default={})) }}"+    _docker_log_driver: "{{ docker_log_driver if (docker_log_driver != 'default') else lookup('docker_var', '_docker_log_driver', default='') }}"+    _docker_log_options: "{{ docker_log_options if (docker_log_options != 'default') else lookup('docker_var', '_docker_log_options', default={}) }}"+    _docker_memory: "{{ lookup('docker_var', '_docker_memory', default=docker_memory_default) }}"+    _docker_networks: "{{ lookup('docker_var', '_docker_networks', default=[])+                       if not ((lookup('docker_var', '_docker_network_mode', default=docker_networks_name_common) == 'host') or ('container' in lookup('docker_var', '_docker_network_mode', default=docker_networks_name_common)))+                       else [] }}"+    _docker_published_ports: "{{ (lookup('docker_var', '_docker_ports', default=[]) | unique | reject('equalto', omit) | list)+                              if not ('container:' in lookup('docker_var', '_docker_network_mode', default=docker_networks_name_common))+                              else [] }}"+    _docker_volumes: "{{ ((docker_volumes_common + lookup('docker_var', '_docker_volumes', default=[]))+                      if (lookup('docker_var', '_docker_volumes_global', default=true) | bool)+                      else lookup('docker_var', '_docker_volumes', default=[])) | unique | reject('equalto', omit) | list }}"+ - name: Resources | Tasks | Docker | Create Docker Container | Network Container Health Status   ansible.builtin.include_tasks: "{{ resources_tasks_path }}/docker/network_container_health_status.yml"-  when: ('container:' in lookup('vars', _var_prefix + '_docker_network_mode', default=docker_networks_name_common))+  when: ('container:' in lookup('docker_var', '_docker_network_mode', default=docker_networks_name_common))  - name: Resources | Tasks | Docker | Create Docker Container | Create Docker Container # noqa args[module]   community.docker.docker_container:-    auto_remove: "{{ lookup('vars', _var_prefix + '_docker_auto_remove', default=omit) }}"-    blkio_weight: "{{ lookup('vars', _var_prefix + '_docker_blkio_weight', default=omit) }}"-    cap_drop: "{{ lookup('vars', _var_prefix + '_docker_cap_drop', default=omit) }}"-    capabilities: "{{ lookup('vars', _var_prefix + '_docker_capabilities', default=omit) }}"-    cgroup_parent: "{{ lookup('vars', _var_prefix + '_docker_cgroup_parent', default=omit) }}"-    cleanup: "{{ lookup('vars', _var_prefix + '_docker_cleanup', default=omit) }}"-    command: "{{ lookup('vars', _var_prefix + '_docker_commands', default=omit) | reject('equalto', omit) | list }}"+    auto_remove: "{{ lookup('docker_var', '_docker_auto_remove', default=omit) }}"+    blkio_weight: "{{ lookup('docker_var', '_docker_blkio_weight', default=omit) }}"+    cap_drop: "{{ lookup('docker_var', '_docker_cap_drop', default=omit) }}"+    capabilities: "{{ lookup('docker_var', '_docker_capabilities', default=omit) }}"+    cgroup_parent: "{{ lookup('docker_var', '_docker_cgroup_parent', default=omit) }}"+    cgroupns_mode: "{{ lookup('docker_var', '_docker_cgroupns_mode', default=omit) }}"+    cleanup: "{{ lookup('docker_var', '_docker_cleanup', default=omit) }}"+    command: "{{ _docker_command+              if (_docker_command | length > 0)+              else omit }}"     command_handling: compatibility     container_default_behavior: compatibility-    cpu_period: "{{ lookup('vars', _var_prefix + '_docker_cpu_period', default=omit) }}"-    cpu_quota: "{{ lookup('vars', _var_prefix + '_docker_cpu_quota', default=omit) }}"-    cpu_shares: "{{ lookup('vars', _var_prefix + '_docker_cpu_shares', default=omit) }}"-    cpus: "{{ (docker_cpus_default is defined) | ternary(docker_cpus_default, lookup('vars', _var_prefix + '_docker_cpus', default=omit)) }}"-    cpuset_cpus: "{{ lookup('vars', _var_prefix + '_docker_cpuset_cpus', default=omit) }}"-    cpuset_mems: "{{ lookup('vars', _var_prefix + '_docker_cpuset_mems', default=omit) }}"+    cpu_period: "{{ lookup('docker_var', '_docker_cpu_period', default=omit) }}"+    cpu_quota: "{{ lookup('docker_var', '_docker_cpu_quota', default=omit) }}"+    cpu_shares: "{{ lookup('docker_var', '_docker_cpu_shares', default=omit) }}"+    cpus: "{{ _docker_cpus+           if (_docker_cpus | length > 0)+           else omit }}"+    cpuset_cpus: "{{ lookup('docker_var', '_docker_cpuset_cpus', default=omit) }}"+    cpuset_mems: "{{ lookup('docker_var', '_docker_cpuset_mems', default=omit) }}"     default_host_ip: ""-    device_read_bps: "{{ lookup('vars', _var_prefix + '_docker_device_read_bps', default=omit) }}"-    device_read_iops: "{{ lookup('vars', _var_prefix + '_docker_device_read_iops', default=omit) }}"-    device_requests: "{{ lookup('vars', _var_prefix + '_docker_device_requests', default=omit) }}"-    device_write_bps: "{{ lookup('vars', _var_prefix + '_docker_device_write_bps', default=omit) }}"-    device_write_iops: "{{ lookup('vars', _var_prefix + '_docker_device_write_iops', default=omit) }}"-    devices: "{{ lookup('vars', _var_prefix + '_docker_devices', default=omit) }}"-    dns_opts: "{{ lookup('vars', _var_prefix + '_docker_dns_opts', default=omit) }}"-    dns_search_domains: "{{ lookup('vars', _var_prefix + '_docker_dns_search_domains', default=omit) }}"-    dns_servers: "{{ lookup('vars', _var_prefix + '_docker_dns_servers', default=omit) }}"-    domainname: "{{ lookup('vars', _var_prefix + '_docker_domainname', default=omit) }}"-    entrypoint: "{{ lookup('vars', _var_prefix + '_docker_entrypoint', default=omit) }}"-    env: "{{ (nvidia_docker_env if use_nvidia else {})-             | combine(lookup('vars', _var_prefix + '_docker_envs', default={}))-             | default(omit) }}"-    env_file: "{{ lookup('vars', _var_prefix + '_docker_env_file', default=omit) }}"-    etc_hosts: "{{ lookup('vars', _var_prefix + '_docker_hosts', default=omit)-                if not ('container:' in lookup('vars', _var_prefix + '_docker_network_mode', default=docker_networks_name_common))-                else {} }}"-    exposed_ports: "{{ (lookup('vars', _var_prefix + '_docker_exposed_ports', default=[]) | unique | reject('equalto', omit) | list)-                    if not ('container:' in lookup('vars', _var_prefix + '_docker_network_mode', default=docker_networks_name_common))-                    else [] }}"-    groups: "{{ lookup('vars', _var_prefix + '_docker_groups', default=omit) }}"-    healthcheck: "{{ lookup('vars', _var_prefix + '_docker_healthcheck', default=omit) }}"-    hostname: "{{ lookup('vars', _var_prefix + '_docker_hostname', default=omit)-               if (lookup('vars', _var_prefix + '_docker_network_mode', default=docker_networks_name_common) == docker_networks_name_common)+    detach: true+    device_cgroup_rules: "{{ lookup('docker_var', '_docker_device_cgroup_rules', default=omit) }}"+    device_read_bps: "{{ lookup('docker_var', '_docker_device_read_bps', default=omit) }}"+    device_read_iops: "{{ lookup('docker_var', '_docker_device_read_iops', default=omit) }}"+    device_requests: "{{ lookup('docker_var', '_docker_device_requests', default=omit) }}"+    device_write_bps: "{{ lookup('docker_var', '_docker_device_write_bps', default=omit) }}"+    device_write_iops: "{{ lookup('docker_var', '_docker_device_write_iops', default=omit) }}"+    devices: "{{ lookup('docker_var', '_docker_devices', default=omit) }}"+    dns_opts: "{{ lookup('docker_var', '_docker_dns_opts', default=omit) }}"+    dns_search_domains: "{{ lookup('docker_var', '_docker_dns_search_domains', default=omit) }}"+    dns_servers: "{{ lookup('docker_var', '_docker_dns_servers', default=omit) }}"+    domainname: "{{ lookup('docker_var', '_docker_domainname', default=omit) }}"+    entrypoint: "{{ lookup('docker_var', '_docker_entrypoint', default=omit) }}"+    env: "{{ _docker_env+          if (_docker_env | length > 0)+          else omit }}"+    env_file: "{{ lookup('docker_var', '_docker_env_file', default=omit) }}"+    etc_hosts: "{{ _docker_etc_hosts+                if (_docker_etc_hosts | length > 0)+                else omit }}"+    exposed_ports: "{{ _docker_exposed_ports+                    if (_docker_exposed_ports | length > 0)+                    else omit }}"+    groups: "{{ lookup('docker_var', '_docker_groups', default=omit) }}"+    healthcheck: "{{ lookup('docker_var', '_docker_healthcheck', default=omit) }}"+    healthy_wait_timeout: "{{ lookup('docker_var', '_docker_healthy_wait_timeout', default=300) }}"+    hostname: "{{ _docker_hostname+               if (_docker_hostname | length > 0)                else omit }}"-    image: "{{ lookup('vars', _var_prefix + '_docker_image') }}"-    init: "{{ lookup('vars', _var_prefix + '_docker_init', default=omit) }}"-    ipc_mode: "{{ lookup('vars', _var_prefix + '_docker_ipc_mode', default=omit) }}"-    keep_volumes: "{{ lookup('vars', _var_prefix + '_docker_keep_volumes', default=omit) }}"-    kernel_memory: "{{ lookup('vars', _var_prefix + '_docker_kernel_memory', default=omit) }}"-    labels: "{{ lookup('vars', _var_prefix + '_docker_labels', default=omit) }}"-    links: "{{ lookup('vars', _var_prefix + '_docker_links', default=omit) }}"-    log_driver: "{{ (docker_log_driver != 'default') | ternary(docker_log_driver, lookup('vars', _var_prefix + '_docker_log_driver', default=omit)) }}"-    log_options: "{{ (docker_log_options != 'default') | ternary(docker_log_options, lookup('vars', _var_prefix + '_docker_log_options', default=omit)) }}"-    memory: "{{ (docker_memory_default is defined) | ternary(docker_memory_default, lookup('vars', _var_prefix + '_docker_memory', default=omit)) }}"-    memory_reservation: "{{ lookup('vars', _var_prefix + '_docker_memory_reservation', default=omit) }}"-    memory_swap: "{{ lookup('vars', _var_prefix + '_docker_memory_swap', default=omit) }}"-    memory_swappiness: "{{ lookup('vars', _var_prefix + '_docker_memory_swappiness', default=omit) }}"-    mounts: "{{ lookup('vars', _var_prefix + '_docker_mounts', default=omit) }}"-    name: "{{ lookup('vars', _var_prefix + '_docker_container', default=_var_prefix) }}"-    network_mode: "{{ lookup('vars', _var_prefix + '_docker_network_mode', default=docker_networks_name_common) }}"-    networks: "{{ omit-               if (lookup('vars', _var_prefix + '_docker_network_mode', default=docker_networks_name_common) == 'host') or ('container' in lookup('vars', _var_prefix + '_docker_network_mode', default=docker_networks_name_common))-               else lookup('vars', _var_prefix + '_docker_networks') }}"+    image: "{{ lookup('docker_var', '_docker_image') }}"+    image_comparison: "desired-image"+    image_label_mismatch: "ignore"+    image_name_mismatch: "recreate"+    init: "{{ lookup('docker_var', '_docker_init', default=omit) }}"+    ipc_mode: "{{ lookup('docker_var', '_docker_ipc_mode', default=omit) }}"+    keep_volumes: "{{ lookup('docker_var', '_docker_keep_volumes', default=omit) }}"+    kernel_memory: "{{ lookup('docker_var', '_docker_kernel_memory', default=omit) }}"+    kill_signal: "{{ lookup('docker_var', '_docker_kill_signal', default=omit) }}"+    labels: "{{ _docker_labels+             if (_docker_labels | length > 0)+             else omit }}"+    links: "{{ lookup('docker_var', '_docker_links', default=omit) }}"+    log_driver: "{{ _docker_log_driver+                 if (_docker_log_driver | length > 0)+                 else omit }}"+    log_options: "{{ _docker_log_options+                  if (_docker_log_options | length > 0)+                  else omit }}"+    memory: "{{ _docker_memory+             if (_docker_memory | length > 0)+             else omit }}"+    memory_reservation: "{{ lookup('docker_var', '_docker_memory_reservation', default=omit) }}"+    memory_swap: "{{ lookup('docker_var', '_docker_memory_swap', default=omit) }}"+    memory_swappiness: "{{ lookup('docker_var', '_docker_memory_swappiness', default=omit) }}"+    mounts: "{{ lookup('docker_var', '_docker_mounts', default=omit) }}"+    name: "{{ lookup('docker_var', '_docker_container', default=_instance_name) }}"+    network_mode: "{{ lookup('docker_var', '_docker_network_mode', default=docker_networks_name_common) }}"+    networks: "{{ _docker_networks+               if (_docker_networks | length > 0)+               else omit }}"     networks_cli_compatible: true-    oom_killer: "{{ lookup('vars', _var_prefix + '_docker_oom_killer', default=omit) }}"-    oom_score_adj: "{{ lookup('vars', _var_prefix + '_docker_oom_score_adj', default=omit) }}"-    output_logs: "{{ lookup('vars', _var_prefix + '_docker_output_logs', default=omit) }}"-    paused: "{{ lookup('vars', _var_prefix + '_docker_paused', default=omit) }}"-    pid_mode: "{{ lookup('vars', _var_prefix + '_docker_pid_mode', default=omit) }}"-    privileged: "{{ lookup('vars', _var_prefix + '_docker_privileged', default=omit) }}"-    published_ports: "{{ (lookup('vars', _var_prefix + '_docker_ports', default=[]) | unique | reject('equalto', omit) | list)-                      if not ('container:' in lookup('vars', _var_prefix + '_docker_network_mode', default=docker_networks_name_common))-                      else [] }}"-    pull: "{{ lookup('vars', _var_prefix + '_docker_image_pull', default=true) | bool }}"-    read_only: "{{ lookup('vars', _var_prefix + '_docker_read_only', default=omit) }}"-    recreate: "{{ lookup('vars', _var_prefix + '_docker_recreate', default=omit) }}"-    restart_policy: "{{ lookup('vars', _var_prefix + '_docker_restart_policy', default='unless-stopped') }}"-    restart_retries: "{{ lookup('vars', _var_prefix + '_docker_restart_retries', default=omit) }}"-    runtime: "{{ lookup('vars', _var_prefix + '_docker_runtime', default=omit) }}"-    security_opts: "{{ lookup('vars', _var_prefix + '_docker_security_opts', default=omit) }}"-    shm_size: "{{ lookup('vars', _var_prefix + '_docker_shm_size', default=omit) }}"+    oom_killer: "{{ lookup('docker_var', '_docker_oom_killer', default=omit) }}"+    oom_score_adj: "{{ lookup('docker_var', '_docker_oom_score_adj', default=omit) }}"+    output_logs: "{{ lookup('docker_var', '_docker_output_logs', default=omit) }}"+    paused: "{{ lookup('docker_var', '_docker_paused', default=omit) }}"+    pid_mode: "{{ lookup('docker_var', '_docker_pid_mode', default=omit) }}"+    privileged: "{{ lookup('docker_var', '_docker_privileged', default=omit) }}"+    published_ports: "{{ _docker_published_ports+                      if (_docker_published_ports | length > 0)+                      else omit }}"+    pull: "{{ lookup('docker_var', '_docker_image_pull', default=true) | bool }}"+    pull_check_mode_behavior: "image_not_present"+    read_only: "{{ lookup('docker_var', '_docker_read_only', default=omit) }}"+    recreate: "{{ lookup('docker_var', '_docker_recreate', default=omit) }}"+    restart_policy: "{{ lookup('docker_var', '_docker_restart_policy', default='unless-stopped') }}"+    restart_retries: "{{ lookup('docker_var', '_docker_restart_retries', default=omit) }}"+    runtime: "{{ lookup('docker_var', '_docker_runtime', default=omit) }}"+    security_opts: "{{ lookup('docker_var', '_docker_security_opts', default=omit) }}"+    shm_size: "{{ lookup('docker_var', '_docker_shm_size', default=omit) }}"     state: started-    stop_timeout: "{{ lookup('vars', _var_prefix + '_docker_stop_timeout', default='10') }}"-    storage_opts: "{{ lookup('vars', _var_prefix + '_docker_storage_opts', default=omit) }}"-    sysctls: "{{ lookup('vars', _var_prefix + '_docker_sysctls', default=omit) }}"+    stop_timeout: "{{ lookup('docker_var', '_docker_stop_timeout', default='10') }}"+    storage_opts: "{{ lookup('docker_var', '_docker_storage_opts', default=omit) }}"+    sysctls: "{{ lookup('docker_var', '_docker_sysctls', default=omit) }}"     tls_hostname: localhost-    tmpfs: "{{ lookup('vars', _var_prefix + '_docker_tmpfs', default=omit) }}"-    ulimits: "{{ lookup('vars', _var_prefix + '_docker_ulimits', default=omit) }}"-    user: "{{ lookup('vars', _var_prefix + '_docker_user', default=omit) }}"-    userns_mode: "{{ lookup('vars', _var_prefix + '_docker_userns_mode', default=omit) }}"-    uts: "{{ lookup('vars', _var_prefix + '_docker_uts', default=omit) }}"-    volume_driver: "{{ lookup('vars', _var_prefix + '_docker_volume_driver', default=omit) }}"-    volumes: "{{ ((docker_volumes_common + lookup('vars', _var_prefix + '_docker_volumes', default=omit))-              if (lookup('vars', _var_prefix + '_docker_volumes_global', default=true) | bool)-              else lookup('vars', _var_prefix + '_docker_volumes', default=omit)) | unique | reject('equalto', omit) | list }}"-    volumes_from: "{{ lookup('vars', _var_prefix + '_docker_volumes_from', default=omit) }}"-    working_dir: "{{ lookup('vars', _var_prefix + '_docker_working_dir', default=omit) }}"+    tmpfs: "{{ lookup('docker_var', '_docker_tmpfs', default=omit) }}"+    ulimits: "{{ lookup('docker_var', '_docker_ulimits', default=omit) }}"+    user: "{{ lookup('docker_var', '_docker_user', default=omit) }}"+    userns_mode: "{{ lookup('docker_var', '_docker_userns_mode', default=omit) }}"+    uts: "{{ lookup('docker_var', '_docker_uts', default=omit) }}"+    volume_driver: "{{ lookup('docker_var', '_docker_volume_driver', default=omit) }}"+    volumes: "{{ _docker_volumes+              if (_docker_volumes | length > 0)+              else omit }}"+    volumes_from: "{{ lookup('docker_var', '_docker_volumes_from', default=omit) }}"+    working_dir: "{{ lookup('docker_var', '_docker_working_dir', default=omit) }}"   register: create_docker_result   retries: "{{ ansible_retry_count             if (not continuous_integration)             else ansible_retry_count_ci }}"-  timeout: "{{ 300+  timeout: "{{ lookup('docker_var', '_docker_create_timeout', default=120)             if continuous_integration             else omit }}"   delay: 10-  until: create_docker_result is succeeded+  until: (create_docker_result is succeeded) -- name: Resources | Tasks | Docker | Create Docker Container | Prune dangling images+- name: "Resources | Tasks | Docker | Create Docker Container | Wait for {{ docker_create_image_prune_delay_timeout }} seconds"+  ansible.builtin.wait_for:+    timeout: "{{ docker_create_image_prune_delay_timeout }}"+  when: docker_create_image_prune and docker_create_image_prune_delay++- name: Resources | Tasks | Docker | Create Docker Container | Prune images   community.docker.docker_prune:     images: true     images_filters:-      dangling: true+      until: 24h+    timeout: 120   when: docker_create_image_prune   register: prune_images_result   retries: "{{ ansible_retry_count             if (not continuous_integration)             else ansible_retry_count_ci }}"   delay: 10-  until: prune_images_result is succeeded+  until: (prune_images_result is succeeded)

@@ -11,17 +11,21 @@   ansible.builtin.wait_for:     timeout: "{{ docker_network_container_health_delay }}" -- name: Resources | Tasks | Docker | Network Container Health Status | Check health of network linked container+- name: "Resources | Tasks | Docker | Network Container Health Status | Set instance name"+  ansible.builtin.set_fact:+    _instance_name: "{{ lookup('vars', _var_prefix + '_name', default=_var_prefix) }}"++- name: "Resources | Tasks | Docker | Network Container Health Status | Check health of network linked container"   community.docker.docker_container_info:-    name: "{{ lookup('vars', _var_prefix + '_docker_network_mode', default=docker_networks_name_common).split(':')[1] }}"+    name: "{{ lookup('docker_var', '_docker_network_mode', default=docker_networks_name_common).split(':')[1] }}"   register: docker_info -- name: Resources | Tasks | Docker | Network Container Health Status | Fail if network linked container does not exist+- name: "Resources | Tasks | Docker | Network Container Health Status | Fail if network linked container does not exist"   ansible.builtin.fail:-    msg: "{{ lookup('vars', _var_prefix + '_docker_container', default=_var_prefix) }} is configured to use {{ lookup('vars', _var_prefix + '_docker_network_mode', default=docker_networks_name_common).split(':')[1] }} for networking but it does not exist"-  when: not docker_info.exists+    msg: "{{ lookup('docker_var', '_docker_container', default=_var_prefix) }} is configured to use {{ lookup('docker_var', '_docker_network_mode', default=docker_networks_name_common).split(':')[1] }} for networking but it does not exist"+  when: (not docker_info.exists) -- name: Resources | Tasks | Docker | Network Container Health Status | Fail if network linked container is not healthy+- name: "Resources | Tasks | Docker | Network Container Health Status | Fail if network linked container is not healthy"   ansible.builtin.fail:-    msg: "{{ lookup('vars', _var_prefix + '_docker_container', default=_var_prefix) }} is configured to use {{ lookup('vars', _var_prefix + '_docker_network_mode', default=docker_networks_name_common).split(':')[1] }} for networking but it is not healthy"-  when: ('State' not in docker_info.container or 'Health' not in docker_info.container.State or 'Status' not in docker_info.container.State.Health or docker_info.container.State.Health.Status != 'healthy')+    msg: "{{ lookup('docker_var', '_docker_container', default=_var_prefix) }} is configured to use {{ lookup('docker_var', '_docker_network_mode', default=docker_networks_name_common).split(':')[1] }} for networking but it is not healthy"+  when: (('State' not in docker_info.container) or ('Health' not in docker_info.container.State) or ('Status' not in docker_info.container.State.Health) or (docker_info.container.State.Health.Status != 'healthy'))

@@ -13,18 +13,22 @@                   if (var_prefix is defined)                   else role_name }}" +- name: Resources | Tasks | Docker | Remove Docker Container | Set instance name+  ansible.builtin.set_fact:+    _instance_name: "{{ lookup('vars', _var_prefix + '_name', default=_var_prefix) }}"+ - name: Resources | Tasks | Docker | Remove Docker Container | Remove Docker Container   community.docker.docker_container:     container_default_behavior: compatibility-    force_kill: "{{ lookup('vars', _var_prefix + '_docker_force_kill', default=omit) }}"-    kill_signal: "{{ lookup('vars', _var_prefix + '_docker_kill_signal', default=omit) }}"-    name: "{{ var_prefix | default(lookup('vars', _var_prefix + '_docker_container', default=_var_prefix)) }}"+    force_kill: "{{ lookup('docker_var', '_docker_force_kill', default=omit) }}"+    kill_signal: "{{ lookup('docker_var', '_docker_kill_signal', default=omit) }}"+    name: "{{ lookup('docker_var', '_docker_container', default=_var_prefix) }}"     state: absent-    stop_timeout: "{{ lookup('vars', _var_prefix + '_docker_stop_timeout', default='10') }}"+    stop_timeout: "{{ lookup('docker_var', '_docker_stop_timeout', default='180') }}"     tls_hostname: localhost   register: remove_docker_result   retries: "{{ ansible_retry_count             if (not continuous_integration)             else ansible_retry_count_ci }}"   delay: 10-  until: remove_docker_result is succeeded+  until: (remove_docker_result is succeeded)

@@ -13,14 +13,18 @@                   if (var_prefix is defined)                   else role_name }}" +- name: Resources | Tasks | Docker | Restart Docker Container | Set instance name+  ansible.builtin.set_fact:+    _instance_name: "{{ lookup('vars', _var_prefix + '_name', default=_var_prefix) }}"+ - name: Resources | Tasks | Docker | Restart Docker Container | Stop Docker Container   community.docker.docker_container:     container_default_behavior: compatibility-    force_kill: "{{ lookup('vars', _var_prefix + '_docker_force_kill', default=omit) }}"-    kill_signal: "{{ lookup('vars', _var_prefix + '_docker_kill_signal', default=omit) }}"-    name: "{{ lookup('vars', _var_prefix + '_docker_container', default=_var_prefix) }}"+    force_kill: "{{ lookup('docker_var', '_docker_force_kill', default=omit) }}"+    kill_signal: "{{ lookup('docker_var', '_docker_kill_signal', default=omit) }}"+    name: "{{ lookup('docker_var', '_docker_container', default=_var_prefix) }}"     state: stopped-    stop_timeout: "{{ lookup('vars', _var_prefix + '_docker_stop_timeout', default='180') }}"+    stop_timeout: "{{ lookup('docker_var', '_docker_stop_timeout', default='180') }}"     tls_hostname: localhost     comparisons:       '*': ignore@@ -29,12 +33,12 @@             if (not continuous_integration)             else ansible_retry_count_ci }}"   delay: 10-  until: stop_docker_result is succeeded+  until: (stop_docker_result is succeeded)  - name: Resources | Tasks | Docker | Restart Docker Container | Start Docker Container   community.docker.docker_container:     container_default_behavior: compatibility-    name: "{{ lookup('vars', _var_prefix + '_docker_container', default=_var_prefix) }}"+    name: "{{ lookup('docker_var', '_docker_container', default=_var_prefix) }}"     state: started     tls_hostname: localhost     comparisons:@@ -44,4 +48,4 @@             if (not continuous_integration)             else ansible_retry_count_ci }}"   delay: 10-  until: start_docker_result is succeeded+  until: (start_docker_result is succeeded)

@@ -21,4 +21,4 @@      - name: Resources | Tasks | Docker | Set Docker Devices Variable | Set 'docker_devices' variable # noqa var-naming[no-jinja]       ansible.builtin.set_fact:-        "{{ docker_devices_var_name }}": "{{ ['/dev/dri:/dev/dri'] + lookup('vars', role_name + '_docker_devices_default', default=[]) }}"+        "{{ docker_devices_var_name }}": "{{ ['/dev/dri:/dev/dri'] + lookup('docker_var', '_docker_devices_default', default=[]) }}"

@@ -13,10 +13,14 @@                   if (var_prefix is defined)                   else role_name }}" +- name: Resources | Tasks | Docker | Start Docker Container | Set instance name+  ansible.builtin.set_fact:+    _instance_name: "{{ lookup('vars', _var_prefix + '_name', default=_var_prefix) }}"+ - name: Resources | Tasks | Docker | Start Docker Container | Start Docker Container   community.docker.docker_container:     container_default_behavior: compatibility-    name: "{{ lookup('vars', _var_prefix + '_docker_container', default=_var_prefix) }}"+    name: "{{ lookup('docker_var', '_docker_container', default=_var_prefix) }}"     state: started     tls_hostname: localhost     comparisons:@@ -26,4 +30,4 @@             if (not continuous_integration)             else ansible_retry_count_ci }}"   delay: 10-  until: start_docker_result is succeeded+  until: (start_docker_result is succeeded)

@@ -12,8 +12,8 @@  - name: "Resources | Tasks | Docker | Start Saltbox Docker Containers | Get Docker service state"   ansible.builtin.set_fact:-    start_docker_service_running: "{{ (services['docker.service'] is defined) and (services['docker.service']['state'] == 'running') }}"-    start_docker_containers_docker_controller_service_running: "{{ (services['saltbox_managed_docker_controller.service'] is defined) and (services['saltbox_managed_docker_controller.service']['state'] == 'running') }}"+    start_docker_service_running: "{{ (ansible_facts['services']['docker.service'] is defined) and (ansible_facts['services']['docker.service']['state'] == 'running') }}"+    start_docker_containers_docker_controller_service_running: "{{ (ansible_facts['services']['saltbox_managed_docker_controller.service'] is defined) and (ansible_facts['services']['saltbox_managed_docker_controller.service']['state'] == 'running') }}"  - name: Resources | Tasks | Docker | Start Saltbox Docker Containers | Run Controller Tasks   when: start_docker_service_running and start_docker_containers_docker_controller_service_running

@@ -13,14 +13,18 @@                   if (var_prefix is defined)                   else role_name }}" +- name: Resources | Tasks | Docker | Stop Docker Container | Set instance name+  ansible.builtin.set_fact:+    _instance_name: "{{ lookup('vars', _var_prefix + '_name', default=_var_prefix) }}"+ - name: Resources | Tasks | Docker | Stop Docker Container | Stop Docker Container   community.docker.docker_container:     container_default_behavior: compatibility-    force_kill: "{{ lookup('vars', _var_prefix + '_docker_force_kill', default=omit) }}"-    kill_signal: "{{ lookup('vars', _var_prefix + '_docker_kill_signal', default=omit) }}"-    name: "{{ lookup('vars', _var_prefix + '_docker_container', default=_var_prefix) }}"+    force_kill: "{{ lookup('docker_var', '_docker_force_kill', default=omit) }}"+    kill_signal: "{{ lookup('docker_var', '_docker_kill_signal', default=omit) }}"+    name: "{{ lookup('docker_var', '_docker_container', default=_var_prefix) }}"     state: stopped-    stop_timeout: "{{ lookup('vars', _var_prefix + '_docker_stop_timeout', default='180') }}"+    stop_timeout: "{{ lookup('docker_var', '_docker_stop_timeout', default='180') }}"     tls_hostname: localhost     comparisons:       '*': ignore@@ -29,4 +33,4 @@             if (not continuous_integration)             else ansible_retry_count_ci }}"   delay: 10-  until: stop_docker_result is succeeded+  until: (stop_docker_result is succeeded)

@@ -12,8 +12,8 @@  - name: "Resources | Tasks | Docker | Stop Saltbox Docker Containers | Get Docker service state"   ansible.builtin.set_fact:-    stop_docker_service_running: "{{ (services['docker.service'] is defined) and (services['docker.service']['state'] == 'running') }}"-    stop_docker_containers_docker_controller_service_running: "{{ (services['saltbox_managed_docker_controller.service'] is defined) and (services['saltbox_managed_docker_controller.service']['state'] == 'running') }}"+    stop_docker_service_running: "{{ (ansible_facts['services']['docker.service'] is defined) and (ansible_facts['services']['docker.service']['state'] == 'running') }}"+    stop_docker_containers_docker_controller_service_running: "{{ (ansible_facts['services']['saltbox_managed_docker_controller.service'] is defined) and (ansible_facts['services']['saltbox_managed_docker_controller.service']['state'] == 'running') }}"  - name: Resources | Tasks | Docker | Stop Saltbox Docker Containers | Run Controller Tasks   when: stop_docker_service_running and stop_docker_containers_docker_controller_service_running

@@ -15,10 +15,10 @@  - name: Resources | Tasks | Git | Clone Git Repo | Set '_git_repo_*' variables   ansible.builtin.set_fact:-    _git_repo_url: "{{ lookup('vars', _var_prefix + '_git_repo_url') }}"-    _git_repo_dest: "{{ lookup('vars', _var_prefix + '_git_repo_dest') }}"-    _git_repo_branch_primary: "{{ lookup('vars', _var_prefix + '_git_repo_branch_primary') }}"-    _git_repo_branch_secondary: "{{ lookup('vars', _var_prefix + '_git_repo_branch_secondary', default='master') }}"+    _git_repo_url: "{{ git_repo_url }}"+    _git_repo_dest: "{{ git_repo_dest }}"+    _git_repo_branch_primary: "{{ git_repo_branch_primary }}"+    _git_repo_branch_secondary: "{{ git_repo_branch_secondary | default('main') }}"  - name: Resources | Tasks | Git | Clone Git Repo | Check for existing git folder   ansible.builtin.stat:@@ -28,7 +28,6 @@ - name: Resources | Tasks | Git | Clone Git Repo | Existing repo block   when: _git_repo_dest_stat.stat.exists   block:-     - name: Resources | Tasks | Git | Clone Git Repo | Get current git branch       ansible.builtin.shell: |         cd {{ _git_repo_dest }}@@ -38,7 +37,7 @@     - name: Resources | Tasks | Git | Clone Git Repo | Update target branch       ansible.builtin.set_fact:         _git_repo_branch_primary: "{{ _git_repo_branch_secondary }}"-      when: _git_repo_branch_secondary == _git_repo_dest_current_branch | trim+      when: (_git_repo_branch_secondary == (_git_repo_dest_current_branch | trim))  - name: Resources | Tasks | Git | Clone Git Repo | git clone repo '{{ _git_repo_branch_primary }}'   ansible.builtin.git:@@ -53,9 +52,8 @@   register: _git_clone_status  - name: Resources | Tasks | Git | Clone Git Repo | Tasks when above fails-  when: _git_clone_status is failed+  when: (_git_clone_status is failed)   block:-     - name: Resources | Tasks | Git | Clone Git Repo | git clone repo 'master' if above fails       ansible.builtin.git:         repo: "{{ _git_repo_url }}"@@ -76,4 +74,4 @@         git remote add origin {{ _git_repo_url }}         git fetch origin         git reset --hard origin/{{ _git_repo_branch_primary }}-      when: _git_clone_master_status is failed+      when: (_git_clone_master_status is failed)

@@ -7,12 +7,30 @@ #                   GNU General Public License v3.0                     # ######################################################################### ----- name: Resources | Tasks | Instances | Get Info | Run Sonarr Tasks-  ansible.builtin.include_tasks: sonarr.yml+- name: Resources | Tasks | Instances | Get Info | Run Lidarr Tasks+  ansible.builtin.include_tasks: lidarr.yml   vars:-    sonarr_name: "{{ item }}"-  with_items: "{{ sonarr_instances }}"-  when: ('sonarr' in get_info_list)+    lidarr_name: "{{ item }}"+  with_items: "{{ lidarr_instances }}"+  when: ('lidarr' in get_info_list)++- name: Resources | Tasks | Instances | Get Info | Run NZBGet Tasks+  ansible.builtin.include_tasks: nzbget.yml+  when: ('nzbget' in get_info_list)++- name: Resources | Tasks | Instances | Get Info | Run Overseerr Tasks+  ansible.builtin.include_tasks: overseerr.yml+  vars:+    overseerr_name: "{{ item }}"+  with_items: "{{ overseerr_instances }}"+  when: ('overseerr' in get_info_list)++- name: Resources | Tasks | Instances | Get Info | Run Plex Tasks+  ansible.builtin.include_tasks: plex.yml+  vars:+    plex_name: "{{ item }}"+  with_items: "{{ plex_instances }}"+  when: ('plex' in get_info_list)  - name: Resources | Tasks | Instances | Get Info | Run Radarr Tasks   ansible.builtin.include_tasks: radarr.yml@@ -21,30 +39,13 @@   with_items: "{{ radarr_instances }}"   when: ('radarr' in get_info_list) -- name: Resources | Tasks | Instances | Get Info | Run Lidarr Tasks-  ansible.builtin.include_tasks: lidarr.yml+- name: Resources | Tasks | Instances | Get Info | Run SABnzbd Tasks+  ansible.builtin.include_tasks: sabnzbd.yml+  when: ('sabnzbd' in get_info_list)++- name: Resources | Tasks | Instances | Get Info | Run Sonarr Tasks+  ansible.builtin.include_tasks: sonarr.yml   vars:-    lidarr_name: "{{ item }}"-  with_items: "{{ lidarr_instances }}"-  when: ('lidarr' in get_info_list)--- name: Resources | Tasks | Instances | Get Info | Run Readarr Tasks-  ansible.builtin.include_tasks: readarr.yml-  vars:-    readarr_name: "{{ item }}"-  with_items: "{{ readarr_instances }}"-  when: ('readarr' in get_info_list)--- name: Resources | Tasks | Instances | Get Info | Run Plex Tasks-  ansible.builtin.include_tasks: plex.yml-  vars:-    plex_name: "{{ item }}"-  with_items: "{{ plex_instances }}"-  when: ('plex' in get_info_list)--- name: Resources | Tasks | Instances | Get Info | Run Overseerr Tasks-  ansible.builtin.include_tasks: overseerr.yml-  vars:-    overseerr_name: "{{ item }}"-  with_items: "{{ overseerr_instances }}"-  when: ('overseerr' in get_info_list)+    sonarr_name: "{{ item }}"+  with_items: "{{ sonarr_instances }}"+  when: ('sonarr' in get_info_list)