chore: migrate media applications (#299)

- migrate media applications to new cephfs pool + incus
- enable exporting haproxy
- move ceph-client-setup to only apply to non-lxc hosts
- ensure unrar is installed for nzbget
- updated jellyfin use of data_dir
- set lxc instances for jellyfin to use /shared/apps/jellyfin

Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/299

hieradata/roles/apps/media/jellyfin.yaml

@@ -61,3 +61,11 @@ profiles::yum::global::repos:
     baseurl: https://download1.rpmfusion.org/nonfree/el/updates/%{facts.os.release.major}/%{facts.os.architecture}
     gpgkey: https://download1.rpmfusion.org/nonfree/el/RPM-GPG-KEY-rpmfusion-nonfree-el-%{facts.os.release.major}
     mirrorlist: absent
+  unkinben:
+    name: unkinben
+    descr: unkinben repository
+    target: /etc/yum.repos.d/unkin.repo
+    baseurl: https://git.query.consul/api/packages/unkinben/rpm/el8
+    gpgkey: https://git.query.consul/api/packages/unkinben/rpm/repository.key
+    gpgcheck: false
+    mirrorlist: absent

hieradata/roles/apps/media/nzbget.yaml

@@ -5,6 +5,9 @@ hiera_include:
   - profiles::media::nzbget
   - profiles::nginx::ldapauth
 
+profiles::packages::include:
+  unrar: {}
+
 # manage nzbget
 nzbget::params::user: nzbget
 nzbget::params::group: media

hieradata/virtual/lxc.yaml

@@ -6,11 +6,5 @@ profiles::packages::include:
 # disable mlock for vault nodes on lxd/incus
 vault::disable_mlock: true
 
-hiera_exclude:
-  # exclude the media profiles which are just cephfs-mount-management
-  - profiles::media::lidarr
-  - profiles::media::nzbget
-  - profiles::media::prowlarr
-  - profiles::media::radarr
-  - profiles::media::readarr
-  - profiles::media::sonarr
+# manage jellyfin changes
+profiles::media::jellyfin::data_dir: /shared/apps/jellyfin