From 7f09db5d20a80d61b5a759494d8919ef432fbe45 Mon Sep 17 00:00:00 2001
From: Jake Howard <git@theorangeone.net>
Date: Wed, 7 Oct 2020 14:09:23 +0100
Subject: [PATCH] Add heimdall

---
 ansible/main.yml                               |  1 +
 .../roles/heimdall/files/docker-compose.yml    | 18 ++++++++++++++++++
 ansible/roles/heimdall/handlers/main.yml       |  4 ++++
 ansible/roles/heimdall/tasks/main.yml          | 17 +++++++++++++++++
 terraform/jakehoward.tech.tf                   |  8 ++++++++
 5 files changed, 48 insertions(+)
 create mode 100644 ansible/roles/heimdall/files/docker-compose.yml
 create mode 100644 ansible/roles/heimdall/handlers/main.yml
 create mode 100644 ansible/roles/heimdall/tasks/main.yml

diff --git a/ansible/main.yml b/ansible/main.yml
index 62dd2ef..d2e502f 100644
--- a/ansible/main.yml
+++ b/ansible/main.yml
@@ -44,6 +44,7 @@
     - grafana
     - gitlab
     - scrutiny
+    - heimdall
 
 - hosts: walker
   roles:
diff --git a/ansible/roles/heimdall/files/docker-compose.yml b/ansible/roles/heimdall/files/docker-compose.yml
new file mode 100644
index 0000000..855c3f4
--- /dev/null
+++ b/ansible/roles/heimdall/files/docker-compose.yml
@@ -0,0 +1,18 @@
+version: "2.3"
+
+services:
+  heimdall:
+    image: linuxserver/heimdall:latest
+    environment:
+      - PUID={{ docker_user.id }}
+      - PGID={{ docker_user.id }}
+      - TZ=Europe/London
+    restart: unless-stopped
+    volumes:
+      - "{{ app_data_dir }}/heimdall/:/config"
+    labels:
+      - traefik.enable=true
+      - traefik.http.routers.heimdall.rule=Host(`jakehoward.tech`)
+      - traefik.http.routers.heimdall.tls.certresolver=le
+      - traefik.http.services.heimdall-heimdall.loadbalancer.server.port=443
+      - traefik.http.services.heimdall-heimdall.loadbalancer.server.scheme=https
diff --git a/ansible/roles/heimdall/handlers/main.yml b/ansible/roles/heimdall/handlers/main.yml
new file mode 100644
index 0000000..076d09c
--- /dev/null
+++ b/ansible/roles/heimdall/handlers/main.yml
@@ -0,0 +1,4 @@
+- name: restart heimdall
+  shell:
+    chdir: /opt/heimdall
+    cmd: "{{ docker_update_command }}"
diff --git a/ansible/roles/heimdall/tasks/main.yml b/ansible/roles/heimdall/tasks/main.yml
new file mode 100644
index 0000000..431c2ae
--- /dev/null
+++ b/ansible/roles/heimdall/tasks/main.yml
@@ -0,0 +1,17 @@
+- name: Create install directory
+  file:
+    path: /opt/heimdall
+    state: directory
+    owner: "{{ docker_user.name }}"
+    mode: "{{ docker_compose_directory_mask }}"
+  become: true
+
+- name: Install compose file
+  template:
+    src: files/docker-compose.yml
+    dest: /opt/heimdall/docker-compose.yml
+    mode: "{{ docker_compose_file_mask }}"
+    owner: "{{ docker_user.name }}"
+    validate: /usr/bin/docker-compose -f %s config
+  notify: restart heimdall
+  become: true
diff --git a/terraform/jakehoward.tech.tf b/terraform/jakehoward.tech.tf
index 782ed0c..87f76dc 100644
--- a/terraform/jakehoward.tech.tf
+++ b/terraform/jakehoward.tech.tf
@@ -155,3 +155,11 @@ resource "cloudflare_record" "jakehowardtech_grafana" {
   type    = "A"
   ttl     = 1
 }
+
+resource "cloudflare_record" "jakehowardtech_apex" {
+  zone_id = cloudflare_zone.jakehowardtech.id
+  name    = "@"
+  value   = vultr_server.casey.main_ip
+  type    = "A"
+  ttl     = 1
+}