Added Standardnotes

config-tasks/caddy.yaml

@@ -19,6 +19,7 @@
         state: latest
         install_recommends: false
       delegate_to: "{{ control_host }}"
+      become: true
 
     - name: Curl IP block range file by ProjectSegfault
       command: curl --output /tmp/blocked-ranges.yaml https://raw.githubusercontent.com/ProjectSegfault/ansible/master/privfrontends/blocked-ranges.yaml

templates/compose/standardnotes.yaml.j2

@@ -0,0 +1,22 @@
+# {{ ansible_managed }}
+services:
+  standardnotes:
+    image: standardnotes/web:latest
+    container_name: standardnotes
+    security_opt:
+      - no-new-privileges
+#    cap_drop:
+#      - ALL
+    environment:
+      - PUID=1000
+      - PGID=1000
+      - TZ=Asia/Singapore
+    restart: unless-stopped
+    ports:
+      - 8911:80
+    networks:
+      - standardnotes
+
+networks:
+  standardnotes:
+    name: standardnotes

templates/conf/Caddyfile.j2

@@ -599,6 +599,15 @@
     }
   }
 
+  @sn host sn.{$HOSTNAME}
+  handle @sn {
+    encode zstd gzip
+    reverse_proxy {{ vultr_private_ip }}:8911
+    header {
+      X-Robots-Tag "noindex, noimageindex, nosnippet, notranslate, noarchive, nofollow"
+    }
+  }
+
 }
 
 # ----------------------------------------------------------------------------------------------------

vars/services.yaml

@@ -1,11 +1,12 @@
-config:
+compose:
-  oracle3:
+  vultr:
-    - gitea-netrc
+    - standardnotes
 
 # ----------------------------------------------------------------------------------------------------
 
 deployed_compose:
   vultr:
+    - standardnotes
     - imgin
     - rat-aint-tieba
     - watchtower