hieradata/nodes/ausyd1nxvm1040.main.unkin.net.yaml

@@ -2,6 +2,13 @@
 networking::interfaces:
   eth0:
     ipaddress: 198.18.13.50
+  ens19:
+    ensure: present
+    family: inet
+    method: static
+    ipaddress: 10.18.15.50
+    netmask: 255.255.255.0
+    onboot: true
 networking::routes:
   default:
-    gateway: 198.18.13.254
+    gateway: 198.18.13.254

hieradata/roles/apps/media/radarr.eyaml

@@ -0,0 +1,2 @@
+---
+radarr::api_key: ENC[PKCS7,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]

hieradata/roles/apps/media/radarr.yaml

@@ -0,0 +1,56 @@
+---
+hiera_include:
+  - radarr
+  - profiles::nginx::simpleproxy
+
+# manage radarr
+radarr::params:
+  user: radarr
+  group: radarr
+  base_path: /opt/radarr
+  install_path: /opt/radarr/bin
+  archive_version: 5.7.0
+  archive_name: Radarr.master.linux-core-x64.tar.gz
+  service_enable: true
+  service_name: radarr
+
+# additional altnames
+profiles::pki::vault::alt_names:
+  - radarr.main.unkin.net
+  - radarr.service.consul
+  - radarr.query.consul
+  - "radarr.service.%{facts.country}-%{facts.region}.consul"
+
+# manage a simple nginx reverse proxy
+profiles::nginx::simpleproxy::nginx_vhost: 'radarr.query.consul'
+profiles::nginx::simpleproxy::nginx_aliases:
+  - radarr.main.unkin.net
+  - radarr.service.consul
+  - radarr.query.consul
+  - "radarr.service.%{facts.country}-%{facts.region}.consul"
+profiles::nginx::simpleproxy::proxy_port: 7878
+profiles::nginx::simpleproxy::proxy_host: 127.0.0.1
+profiles::nginx::simpleproxy::proxy_path: '/'
+
+# configure consul service
+nginx::client_max_body_size: 10M
+consul::services:
+  radarr:
+    service_name: 'radarr'
+    tags:
+      - 'media'
+      - 'radarr'
+    address: "%{facts.networking.ip}"
+    port: 443
+    checks:
+      - id: 'radarr_http_check'
+        name: 'radarr HTTP Check'
+        http: "https://%{facts.networking.fqdn}:443"
+        method: 'GET'
+        tls_skip_verify: true
+        interval: '10s'
+        timeout: '1s'
+profiles::consul::client::node_rules:
+  - resource: service
+    segment: radarr
+    disposition: write

site/profiles/manifests/media/radarr.pp

@@ -0,0 +1,16 @@
+# profiles::media::radarr
+class profiles::media::radarr (
+  Stdlib::Absolutepath $media_root = '/shared/media',
+) {
+
+  include profiles::ceph::client
+
+  # manage the sharedvol
+  profiles::storage::cephfsvol {"${::facts['networking']['fqdn']}_media":
+    mount       => $media_root,
+    keyring     => '/etc/ceph/ceph.client.media.keyring',
+    cephfs_name => 'media',
+    cephfs_fs   => 'mediafs',
+    require     => Profiles::Ceph::Keyring['media'],
+  }
+}

site/roles/manifests/apps/media/radarr.pp

@@ -6,5 +6,6 @@ class roles::apps::media::radarr {
   }else{
     include profiles::defaults
     include profiles::base
+    include profiles::media::radarr
   }
 }