/
/
/
Ansible role that deployes services on my runner machine
1---
2# Runner Services Role - Variables
3
4# Container images are NOT defined here: role vars beat group_vars and would
5# make the central pins in server_automation/group_vars/all/images.yml
6# ineffective. Fallback pins live in defaults/main.yml.
7
8# Default resource limits per service type
9resource_profiles:
10 lightweight:
11 memory_limit: "512m"
12 cpu_limit: "0.5"
13 standard:
14 memory_limit: "1g"
15 cpu_limit: "1"
16 heavy:
17 memory_limit: "2g"
18 cpu_limit: "2"
19 intensive:
20 memory_limit: "4g"
21 cpu_limit: "4"
22
23# Service classifications
24service_profiles:
25 frigate: "intensive"
26 immich_server: "heavy"
27 immich_ml: "intensive"
28 postgres: "standard"
29 mysql: "standard"
30 redis: "lightweight"
31 forgejo: "standard"
32 web_tools: "standard"
33 caddy: "lightweight"
34 tandoor: "standard"
35 ghost: "standard"
36
37# Hardware acceleration options
38hardware_acceleration_options:
39 - "none"
40 - "vaapi"
41 - "nvdec"
42 - "nvenc"
43 - "qsv"
44 - "cuda"
45
46# Database types supported
47supported_databases:
48 - "sqlite3"
49 - "postgresql"
50 - "mysql"
51
52# Network port ranges
53port_ranges:
54 web_services: "2000-9999"
55 ssh_services: "2200-2299"
56 rtmp_services: "1935"
57 rtsp_services: "8554"
58
59
60# Common paths for services
61common_paths:
62 logs: "/var/log"
63 configs: "/etc"
64 data: "/var/lib"
65 cache: "/var/cache"
66 tmp: "/tmp"
67
68# Service interdependencies
69service_dependencies:
70 immich:
71 - postgres
72 - redis
73 ghost:
74 - mysql
75 frigate:
76 - redis # optional, for MQTT
77
78# Default file permissions
79file_permissions:
80 config: "0644"
81 secret: "0600"
82 script: "0755"
83 directory: "0755"
84
85# Log levels
86log_levels:
87 - "debug"
88 - "info"
89 - "warn"
90 - "error"
91 - "fatal"
92
93# Supported authentication methods
94auth_methods:
95 - "local"
96 - "oauth"
97 - "ldap"
98 - "api_key"