feat: haproxy for *arr stack

- add additional backends
- set *arr's to export as a backend
- add *arr.main.unkin.net certificates

site/profiles/manifests/media/lidarr.pp

@@ -13,4 +13,19 @@ class profiles::media::lidarr (
     cephfs_fs   => 'mediafs',
     require     => Profiles::Ceph::Keyring['media'],
   }
+
+  # export haproxy balancemember
+  profiles::haproxy::balancemember { "${facts['networking']['fqdn']}_443":
+    service => 'be_lidarr',
+    ports   => [443],
+    options => [
+      "cookie ${facts['networking']['hostname']}",
+      'ssl',
+      'verify none',
+      'check',
+      'inter 2s',
+      'rise 3',
+      'fall 2',
+    ]
+  }
 }

site/profiles/manifests/media/prowlarr.pp

@@ -13,4 +13,19 @@ class profiles::media::prowlarr (
     cephfs_fs   => 'mediafs',
     require     => Profiles::Ceph::Keyring['media'],
   }
+
+  # export haproxy balancemember
+  profiles::haproxy::balancemember { "${facts['networking']['fqdn']}_443":
+    service => 'be_prowlarr',
+    ports   => [443],
+    options => [
+      "cookie ${facts['networking']['hostname']}",
+      'ssl',
+      'verify none',
+      'check',
+      'inter 2s',
+      'rise 3',
+      'fall 2',
+    ]
+  }
 }

site/profiles/manifests/media/radarr.pp

@@ -13,4 +13,19 @@ class profiles::media::radarr (
     cephfs_fs   => 'mediafs',
     require     => Profiles::Ceph::Keyring['media'],
   }
+
+  # export haproxy balancemember
+  profiles::haproxy::balancemember { "${facts['networking']['fqdn']}_443":
+    service => 'be_radarr',
+    ports   => [443],
+    options => [
+      "cookie ${facts['networking']['hostname']}",
+      'ssl',
+      'verify none',
+      'check',
+      'inter 2s',
+      'rise 3',
+      'fall 2',
+    ]
+  }
 }

site/profiles/manifests/media/readarr.pp

@@ -13,4 +13,19 @@ class profiles::media::readarr (
     cephfs_fs   => 'mediafs',
     require     => Profiles::Ceph::Keyring['media'],
   }
+
+  # export haproxy balancemember
+  profiles::haproxy::balancemember { "${facts['networking']['fqdn']}_443":
+    service => 'be_readarr',
+    ports   => [443],
+    options => [
+      "cookie ${facts['networking']['hostname']}",
+      'ssl',
+      'verify none',
+      'check',
+      'inter 2s',
+      'rise 3',
+      'fall 2',
+    ]
+  }
 }

site/profiles/manifests/media/sonarr.pp

@@ -13,4 +13,19 @@ class profiles::media::sonarr (
     cephfs_fs   => 'mediafs',
     require     => Profiles::Ceph::Keyring['media'],
   }
+
+  # export haproxy balancemember
+  profiles::haproxy::balancemember { "${facts['networking']['fqdn']}_443":
+    service => 'be_sonarr',
+    ports   => [443],
+    options => [
+      "cookie ${facts['networking']['hostname']}",
+      'ssl',
+      'verify none',
+      'check',
+      'inter 2s',
+      'rise 3',
+      'fall 2',
+    ]
+  }
 }