add trilium

ansible/roles/services/files/trilium/trilium.container

@@ -0,0 +1,22 @@
+[Unit]
+Description=Trilium deployment
+Wants=network-online.target
+After=network.target network-online.target
+
+[Container]
+ContainerName=trilium
+Image=docker.io/triliumnext/trilium:latest
+PublishPort=127.0.0.1:9400:8080
+Volume=/var/vol/trilium/data:/home/node/trilium-data:Z
+Volume=/usr/share/zoneinfo/Europe/Berlin:/etc/localtime:ro
+Environment=TRILIUM_DATA_DIR=/home/node/trilium-data
+AutoUpdate=registry
+
+[Service]
+# Restart service when sleep finishes
+Restart=on-failure
+RestartSec=60
+
+[Install]
+# Start by default on boot
+WantedBy=multi-user.target default.target

ansible/roles/services/vars/main.yml

@@ -63,3 +63,7 @@ services:
     systemd_service_name: "silverbullet"
     service_directories:
       - space
+  trilium:
+    systemd_service_name: "trilium"
+    service_directories:
+      - data

ansible/roles/traefik/files/dynamic.yml

@@ -170,6 +170,28 @@ http:
         certResolver: letsencrypt
       service: authentik-service
 
+    # Router for trilium.rohrschacht.de
+    trilium-router:
+      rule: "Host(`trilium.rohrschacht.de`)"
+      entryPoints:
+        - websecure
+      middlewares:
+        - authentik
+      priority: 10
+      tls:
+        certResolver: letsencrypt
+      service: trilium-service
+
+    # Router for trilium.rohrschacht.de authentik outpost path
+    trilium-router-auth:
+      rule: "Host(`trilium.rohrschacht.de`) && PathPrefix(`/outpost.goauthentik.io/`)"
+      entryPoints:
+        - websecure
+      priority: 15
+      tls:
+        certResolver: letsencrypt
+      service: authentik-service
+
   services:
     # Service for wekan.rohrschacht.de
     wekan-service:
@@ -247,4 +269,10 @@ http:
     silverbullet-service:
       loadBalancer:
         servers:
-          - url: "http://localhost:9300"
+          - url: "http://localhost:9300"
+
+    # Service for trilium.rohrschacht.de
+    trilium-service:
+      loadBalancer:
+        servers:
+          - url: "http://localhost:9400"