init

ansible/roles/comentario/templates/docker-compose.yml.j2

@@ -0,0 +1,26 @@
+services:
+  postgres:
+    image: postgres:17-alpine
+    environment:
+      POSTGRES_DB: comentario
+      POSTGRES_USER: postgres
+      POSTGRES_PASSWORD: postgres
+    volumes:
+      - postgres_data:/var/lib/postgresql/data
+    restart: unless-stopped
+
+  comentario:
+    image: registry.gitlab.com/comentario/comentario:{{ version }}
+    ports:
+      - "127.0.0.1:{{ port }}:80"
+    environment:
+      BASE_URL: https://{{ domain }}
+      SECRETS_FILE: /secrets.yaml
+    volumes:
+      - ./secrets.yaml:/secrets.yaml:ro
+    depends_on:
+      - postgres
+    restart: unless-stopped
+
+volumes:
+  postgres_data:

ansible/roles/comentario/templates/secrets.yaml.j2

@@ -0,0 +1,27 @@
+postgres:
+  host: postgres
+  port: 5432
+  database: comentario
+  username: postgres
+  password: postgres
+{% if smtp_host is defined %}
+smtp:
+  host: {{ smtp_host }}
+  port: {{ smtp_port | default(587) }}
+  username: {{ smtp_username }}
+  password: {{ smtp_password }}
+  from: {{ smtp_from | default(smtp_username) }}
+{% endif %}
+{% if oauth_client_id is defined %}
+idp:
+  oidc:
+    - id: authentik
+      name: Authentik
+      url: {{ oauth_issuer_url }}
+      key: {{ oauth_client_id }}
+      secret: {{ oauth_client_secret }}
+      scopes:
+        - openid
+        - profile
+        - email
+{% endif %}