From ac12da5c0251e157006598c6affab3e35841fc65 Mon Sep 17 00:00:00 2001
From: Jake Howard <git@theorangeone.net>
Date: Sun, 9 Feb 2020 12:43:38 +0000
Subject: [PATCH] Add tt-rss

---
 ansible/roles/docker/files/tt-rss/config.php  | 180 ++++++++++++++++++
 .../docker/files/tt-rss/docker-compose.yml    |  27 +++
 ansible/roles/docker/tasks/main.yml           |   3 +
 ansible/roles/docker/tasks/tt-rss.yml         |  49 +++++
 4 files changed, 259 insertions(+)
 create mode 100644 ansible/roles/docker/files/tt-rss/config.php
 create mode 100644 ansible/roles/docker/files/tt-rss/docker-compose.yml
 create mode 100644 ansible/roles/docker/tasks/tt-rss.yml

diff --git a/ansible/roles/docker/files/tt-rss/config.php b/ansible/roles/docker/files/tt-rss/config.php
new file mode 100644
index 0000000..013aa4d
--- /dev/null
+++ b/ansible/roles/docker/files/tt-rss/config.php
@@ -0,0 +1,180 @@
+<?php
+  // *******************************************
+  // *** Database configuration (important!) ***
+  // *******************************************
+
+  define('DB_TYPE', 'pgsql');
+  define('DB_HOST', 'db');
+  define('DB_USER', 'tt-rss');
+  define('DB_NAME', 'tt-rss');
+  define('DB_PASS', 'tt-rss');
+  define('DB_PORT', '5432');
+
+  define('MYSQL_CHARSET', 'UTF8');
+  // Connection charset for MySQL. If you have a legacy database and/or experience
+  // garbage unicode characters with this option, try setting it to a blank string.
+
+  // ***********************************
+  // *** Basic settings (important!) ***
+  // ***********************************
+
+  define('SELF_URL_PATH', 'https://tt-rss.jakehoward.tech/');
+  // This should be set to a fully qualified URL used to access
+  // your tt-rss instance over the net.
+  // The value should be a constant string literal. Please don't use
+  // PHP server variables here - you might introduce security
+  // issues on your install and cause hard to debug problems.
+  // If your tt-rss instance is behind a reverse proxy, use the external URL.
+
+  define('SINGLE_USER_MODE', false);
+  // Operate in single user mode, disables all functionality related to
+  // multiple users and authentication. Enabling this assumes you have
+  // your tt-rss directory protected by other means (e.g. http auth).
+
+  define('SIMPLE_UPDATE_MODE', false);
+  // Enables fallback update mode where tt-rss tries to update feeds in
+  // background while tt-rss is open in your browser.
+  // If you don't have a lot of feeds and don't want to or can't run
+  // background processes while not running tt-rss, this method is generally
+  // viable to keep your feeds up to date.
+  // Still, there are more robust (and recommended) updating methods
+  // available, you can read about them here: http://tt-rss.org/wiki/UpdatingFeeds
+
+  // *****************************
+  // *** Files and directories ***
+  // *****************************
+
+  define('PHP_EXECUTABLE', '/usr/bin/php');
+  // Path to PHP *COMMAND LINE* executable, used for various command-line tt-rss
+  // programs and update daemon. Do not try to use CGI binary here, it won't work.
+  // If you see HTTP headers being displayed while running tt-rss scripts,
+  // then most probably you are using the CGI binary. If you are unsure what to
+  // put in here, ask your hosting provider.
+
+  define('LOCK_DIRECTORY', 'lock');
+  // Directory for lockfiles, must be writable to the user you run
+  // daemon process or cronjobs under.
+
+  define('CACHE_DIR', 'cache');
+  // Local cache directory for RSS feed content.
+
+  define('ICONS_DIR', "feed-icons");
+  define('ICONS_URL', "feed-icons");
+  // Local and URL path to the directory, where feed favicons are stored.
+  // Unless you really know what you're doing, please keep those relative
+  // to tt-rss main directory.
+
+  // **********************
+  // *** Authentication ***
+  // **********************
+
+  // Please see PLUGINS below to configure various authentication modules.
+
+  define('AUTH_AUTO_CREATE', true);
+  // Allow authentication modules to auto-create users in tt-rss internal
+  // database when authenticated successfully.
+
+  define('AUTH_AUTO_LOGIN', true);
+  // Automatically login user on remote or other kind of externally supplied
+  // authentication, otherwise redirect to login form as normal.
+  // If set to true, users won't be able to set application language
+  // and settings profile.
+
+  // *********************
+  // *** Feed settings ***
+  // *********************
+
+  define('FORCE_ARTICLE_PURGE', 0);
+  // When this option is not 0, users ability to control feed purging
+  // intervals is disabled and all articles (which are not starred)
+  // older than this amount of days are purged.
+
+  // ****************************
+  // *** Sphinx search plugin ***
+  // ****************************
+
+  define('SPHINX_SERVER', 'localhost:9312');
+  // Hostname:port combination for the Sphinx server.
+
+  define('SPHINX_INDEX', 'ttrss, delta');
+  // Index name in Sphinx configuration. You can specify multiple indexes
+  // as a comma-separated string.
+  // Example configuration files are available on tt-rss wiki.
+
+  // ***********************************
+  // *** Self-registrations by users ***
+  // ***********************************
+
+  define('ENABLE_REGISTRATION', false);
+  // Allow users to register themselves. Please be aware that allowing
+  // random people to access your tt-rss installation is a security risk
+  // and potentially might lead to data loss or server exploit. Disabled
+  // by default.
+
+  define('REG_NOTIFY_ADDRESS', 'user@your.domain.dom');
+  // Email address to send new user notifications to.
+
+  define('REG_MAX_USERS', 10);
+  // Maximum amount of users which will be allowed to register on this
+  // system. 0 - no limit.
+
+  // **********************************
+  // *** Cookies and login sessions ***
+  // **********************************
+
+  define('SESSION_COOKIE_LIFETIME', 864000);
+  // Default lifetime of a session (e.g. login) cookie. In seconds,
+  // 0 means cookie will be deleted when browser closes.
+
+  // *********************************
+  // *** Email and digest settings ***
+  // *********************************
+
+  // Tiny Tiny RSS sends mail via PHP mail() function, unless handled
+  // by a plugin.
+
+  // If you need SMTP support, take a look here:
+  // https://git.tt-rss.org/fox/ttrss-mailer-smtp
+
+  define('SMTP_FROM_NAME', 'Tiny Tiny RSS');
+  define('SMTP_FROM_ADDRESS', 'noreply@your.domain.dom');
+  // Name, address and subject for sending outgoing mail. This applies
+  // to password reset notifications, digest emails and any other mail.
+
+  define('DIGEST_SUBJECT', '[tt-rss] New headlines for last 24 hours');
+  // Subject line for email digests
+
+  // ***************************************
+  // *** Other settings (less important) ***
+  // ***************************************
+
+  define('CHECK_FOR_UPDATES', true);
+  // Check for updates automatically if running Git version
+
+  define('ENABLE_GZIP_OUTPUT', false);
+  // Selectively gzip output to improve wire performance. This requires
+  // PHP Zlib extension on the server.
+  // Enabling this can break tt-rss in several httpd/php configurations,
+  // if you experience weird errors and tt-rss failing to start, blank pages
+  // after login, or content encoding errors, disable it.
+
+  define('PLUGINS', 'auth_internal, note');
+  // Comma-separated list of plugins to load automatically for all users.
+  // System plugins have to be specified here. Please enable at least one
+  // authentication plugin here (auth_*).
+  // Users may enable other user plugins from Preferences/Plugins but may not
+  // disable plugins specified in this list.
+  // Disabling auth_internal in this list would automatically disable
+  // reset password link on the login form.
+
+  define('LOG_DESTINATION', 'sql');
+  // Error log destination to use. Possible values: sql (uses internal logging
+  // you can read in Preferences -> System), syslog - logs to system log.
+  // Setting this to blank uses PHP logging (usually to http server
+  // error.log).
+  // Note that feed updating daemons don't use this logging facility
+  // for normal output.
+
+  define('CONFIG_VERSION', 26);
+  // Expected config version. Please update this option in config.php
+  // if necessary (after migrating all new options from this file).
diff --git a/ansible/roles/docker/files/tt-rss/docker-compose.yml b/ansible/roles/docker/files/tt-rss/docker-compose.yml
new file mode 100644
index 0000000..6e835f7
--- /dev/null
+++ b/ansible/roles/docker/files/tt-rss/docker-compose.yml
@@ -0,0 +1,27 @@
+version: "3"
+
+services:
+  tt-rss:
+    image: lunik1/tt-rss:latest
+    container_name: tt-rss
+    environment:
+      - PUID={{ docker_user.id }}
+      - PGID={{ docker_user.id }}
+      - TZ=Europe/London
+    volumes:
+      - ./config:/config
+    restart: unless-stopped
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.tt-rss.rule=Host(`tt-rss.jakehoward.tech`)"
+      - "traefik.http.routers.tt-rss.tls=true"
+      - "traefik.http.routers.tt-rss.tls.certresolver=le"
+
+  db:
+    image: postgres:12-alpine
+    restart: unless-stopped
+    volumes:
+      - ./postgres:/var/lib/postgresql/data
+    environment:
+      - POSTGRES_PASSWORD=tt-rss
+      - POSTGRES_USER=tt-rss
diff --git a/ansible/roles/docker/tasks/main.yml b/ansible/roles/docker/tasks/main.yml
index e0249c0..08779b7 100644
--- a/ansible/roles/docker/tasks/main.yml
+++ b/ansible/roles/docker/tasks/main.yml
@@ -39,3 +39,6 @@
 
 - name: Install yourls
   include: yourls.yml
+
+- name: Install tt-rss
+  include: tt-rss.yml
diff --git a/ansible/roles/docker/tasks/tt-rss.yml b/ansible/roles/docker/tasks/tt-rss.yml
new file mode 100644
index 0000000..83c4f99
--- /dev/null
+++ b/ansible/roles/docker/tasks/tt-rss.yml
@@ -0,0 +1,49 @@
+- name: Create tt-rss directory
+  file:
+    path: '/opt/tt-rss'
+    state: directory
+    owner: "{{ docker_user.name }}"
+    mode: "{{ docker_compose_directory_mask }}"
+  become: true
+  become_user: root
+
+- name: Install tt-rss compose file
+  template:
+    src: files/tt-rss/docker-compose.yml
+    dest: "/opt/tt-rss/docker-compose.yml"
+    mode: "{{ docker_compose_file_mask }}"
+    owner: "{{ docker_user.name }}"
+    validate: /usr/bin/docker-compose -f %s config
+  register: compose_file
+  become: true
+  become_user: root
+
+- name: Create tt-rss config directory
+  file:
+    path: '/opt/tt-rss/config'
+    state: directory
+    mode: "{{ docker_compose_directory_mask }}"
+  become: true
+  become_user: root
+
+- name: Install tt-rss config
+  template:
+    src: files/tt-rss/config.php
+    dest: "/opt/tt-rss/config/config.php"
+    mode: "{{ docker_compose_file_mask }}"
+    owner: "{{ docker_user.name }}"
+  register: config_file
+  become: true
+  become_user: root
+
+- name: Cycle tt-rss container
+  docker_compose:
+    project_src: /opt/tt-rss
+    pull: true
+    remove_orphans: true
+    remove_volumes: true
+    state: "{{ item }}"
+  when: compose_file.changed or config_file.changed
+  loop:
+    - absent
+    - present