fear: deploy additional *arr stack apps

- cleanup hieradata entires for roles to remove some defaults
- add profiles::media::* classes to manage *arr stacks

hieradata/roles/apps/media/prowlarr.yaml

@@ -0,0 +1,52 @@
+---
+hiera_include:
+  - prowlarr
+  - profiles::nginx::simpleproxy
+
+# manage prowlarr
+prowlarr::params::user: prowlarr
+prowlarr::params::group: media
+prowlarr::params::manage_group: false
+prowlarr::params::archive_version: 1.19.0
+prowlarr::params::port: 8000
+
+# additional altnames
+profiles::pki::vault::alt_names:
+  - prowlarr.main.unkin.net
+  - prowlarr.service.consul
+  - prowlarr.query.consul
+  - "prowlarr.service.%{facts.country}-%{facts.region}.consul"
+
+# manage a simple nginx reverse proxy
+profiles::nginx::simpleproxy::nginx_vhost: 'prowlarr.query.consul'
+profiles::nginx::simpleproxy::nginx_aliases:
+  - prowlarr.main.unkin.net
+  - prowlarr.service.consul
+  - prowlarr.query.consul
+  - "prowlarr.service.%{facts.country}-%{facts.region}.consul"
+profiles::nginx::simpleproxy::proxy_port: 8000
+profiles::nginx::simpleproxy::proxy_host: 127.0.0.1
+profiles::nginx::simpleproxy::proxy_path: '/'
+
+# configure consul service
+nginx::client_max_body_size: 10M
+consul::services:
+  prowlarr:
+    service_name: 'prowlarr'
+    tags:
+      - 'media'
+      - 'prowlarr'
+    address: "%{facts.networking.ip}"
+    port: 443
+    checks:
+      - id: 'prowlarr_http_check'
+        name: 'Prowlarr HTTP Check'
+        http: "https://%{facts.networking.fqdn}:443"
+        method: 'GET'
+        tls_skip_verify: true
+        interval: '10s'
+        timeout: '1s'
+profiles::consul::client::node_rules:
+  - resource: service
+    segment: prowlarr
+    disposition: write