Add homeassistant service

roles/home/README.md

@@ -0,0 +1,9 @@
+TODO
+
+## Notes
+
+- Official Docs recommend running in privileged mode (it appears to facilitate 
+  the opening of serial ports for Z-Wave devices etc) which I have not done as it
+  removes the benefits of running in a containerized environment.
+
+- Official Docs recommend running in host networking mode, which is not implemented here.

roles/home/defaults/main.yml

@@ -0,0 +1 @@
+subdomain_homeassistant: home

roles/home/tasks/backup.yml

@@ -0,0 +1,7 @@
+---
+- name: Backup home
+  ansible.builtin.include_role:
+    name: common
+    tasks_from: backup
+  vars:
+    app: home

roles/home/tasks/main.yml

@@ -0,0 +1,9 @@
+---
+- name: Install home
+  include_role:
+    name: common
+    tasks_from: install
+  vars:
+    app: home
+    data_dirs:
+    - config

roles/home/tasks/remove.yml

@@ -0,0 +1,7 @@
+---
+- name: Remove home
+  ansible.builtin.include_role:
+    name: common
+    tasks_from: remove
+  vars:
+    app: home

roles/home/tasks/restore.yml

@@ -0,0 +1,7 @@
+---
+- name: Restore home
+  ansible.builtin.include_role:
+    name: common
+    tasks_from: restore
+  vars:
+    app: home

roles/home/templates/compose.yml.j2

@@ -0,0 +1,25 @@
+version: "3.8"
+services:
+  homeassistant:
+    image: homeassistant/home-assistant
+    user: "{{uid}}:{{gid}}"  # run the container service as app user (not root)
+    restart: unless-stopped
+    environment:
+      TZ: {{tz}}
+    volumes:
+    - {{app_root}}/config:/config
+    labels:
+      traefik.enable: "true"
+      traefik.http.routers.homeassistant.entrypoints: websecure
+      traefik.http.routers.homeassistant.rule: Host(`{{subdomain_homeassistant}}.{{domain}}`)
+      traefik.http.routers.homeassistant.tls: "true"
+      traefik.http.services.homeassistant.loadbalancer.server.port: 8123
+{% if server_is_live %}
+      traefik.http.routers.get.tls.certresolver: {{cert_resolver}}
+{% endif %}
+    networks:
+      - traefik
+
+networks:
+  traefik:
+    external: true