torrent working

ansible/roles/arr/tasks/main.yaml

@@ -7,14 +7,18 @@
     state: present
     update_cache: true
 
+- name: Reload systemd
+  ansible.builtin.systemd:
+    daemon_reload: true
+
 - name: Start arr services
   ansible.builtin.systemd:
     name: "{{ item }}"
     state: started
     enabled: true
-    daemon_reload: true
   loop:
     - sonarr.service
     - radarr.service
     - lidarr.service
     - prowlarr.service
+    - bazarr.service

ansible/roles/docker/tasks/main.yaml

@@ -0,0 +1,82 @@
+---
+
+- name: Install Docker on Archlinux
+  when: ansible_facts['os_family'] == "Archlinux"
+  community.general.pacman:
+    name: docker
+    state: present
+    update_cache: true
+
+- name: Add users to docker group
+  ansible.builtin.user:
+    name: "{{ item }}"
+    groups: docker
+    append: true
+  loop: "{{ docker_users }}"
+
+- name: Start and enable Docker
+  ansible.builtin.systemd:
+    name: docker
+    state: started
+    enabled: true
+
+- name: Create Docker networks
+  when:
+    - docker_networks is defined
+    - docker_networks | length > 0
+  community.docker.docker_network:
+    attachable: "{{ item.attachable | default(true) }}"
+    driver: "{{ item.driver | default('bridge') }}"
+    driver_options: "{{ item.driver_options | default(omit) }}"
+    enable_ipv6: "{{ item.enable_ipv6 | default(false) }}"
+    internal: "{{ item.internal | default(false) }}"
+    ipam_config: "{{ item.ipam | default(omit) }}"
+    name: "{{ item.name }}"
+    state: "present"
+  loop: "{{ docker_networks }}"
+
+- name: Create Docker volumes
+  when:
+    - docker_volumes is defined
+    - docker_volumes | length > 0
+  community.general.docker_volume:
+    driver: "{{ item.driver | default('local') }}"
+    # driver_options: "{{ item.driver_options | default({}) }}"
+    recreate: "never"
+    state: "present"
+    volume_name: "{{ item.name }}"
+  loop: "{{ docker_volumes }}"
+
+- name: Pull Docker images
+  when:
+    - docker_images is defined
+    - docker_images | length > 0
+  community.docker.docker_image_pull:
+    name: "{{ item.name }}"
+    pull: "always"
+    tag: "{{ item.tag | default('latest') }}"
+  loop: "{{ docker_images }}"
+
+- name: Create Docker containers
+  when:
+    - docker_containers is defined
+    - docker_containers | length > 0
+  community.general.docker_container:
+    auto_remove: "{{ item.auto_remove | default(false) }}"
+    capabilities: "{{ item.capabilities | default(omit) }}"
+    command: "{{ item.command | default(omit) }}"
+    detach: true
+    domainname: "{{ item.domainname | default(omit) }}"
+    entrypoint: "{{ item.entrypoint | default(omit) }}"
+    env: "{{ item.env | default({}) }}"
+    etc_hosts: "{{ item.etc_hosts | default({}) }}"
+    hostname: "{{ item.hostname | default(item.name) }}"
+    image: "{{ item.image }}"
+    name: "{{ item.name }}"
+    networks: "{{ item.networks | default(omit) }}"
+    published_ports: "{{ item.ports | default([]) }}"
+    restart_policy: "{{ item.restart_policy | default('unless_stopped') }}"
+    state: 'started'
+    sysctls: "{{ item.sysctls | default({}) }}"
+    volumes: "{{ item.volumes | default([]) }}"
+  loop: "{{ docker_containers }}"

ansible/roles/torrent/tasks/main.yaml

@@ -0,0 +1,35 @@
+---
+
+- name: Create downloads directory
+  ansible.builtin.file:
+    path: "{{ torrent_downloads_dir }}"
+    state: directory
+    owner: "{{ torrent_user }}"
+    group: "{{ torrent_user }}"
+    mode: "0775"
+
+- name: Create qbittorrent config directory
+  ansible.builtin.file:
+    path: /etc/qbittorrent
+    state: directory
+    owner: "{{ torrent_user }}"
+    group: "{{ torrent_user }}"
+    mode: "0775"
+
+- name: Template out the wireguard config
+  ansible.builtin.template:
+    dest: /etc/qbittorrent/wg0.conf
+    src: wireguard.conf.j2
+    owner: root
+    group: root
+    mode: "0600"
+
+- name: Modprobe the wireguard module
+  community.general.modprobe:
+    name: wireguard
+    persistent: present
+    state: present
+
+- name: Branch to Docker role
+  ansible.builtin.include_role:
+    name: docker

ansible/roles/torrent/templates/wireguard.conf.j2

@@ -0,0 +1,11 @@
+  [Interface]
+  PrivateKey = {{ torrent_wireguard_private_key }}
+  Address = {{ torrent_wireguard_address }}/32
+  DNS = {{ torrent_wireguard_dns }}
+  MTU = 1420
+
+  [Peer]
+  PublicKey = {{ torrent_wireguard_peer_public_key }}
+  AllowedIPs = 0.0.0.0/0
+  Endpoint = {{ torrent_wireguard_peer_endpoint }}:51820
+  PersistentKeepalive = 25