- name: Configure nvak.banananet.work
  hosts: nvak.banananet.work
  roles:
    - role: nginx/default_server # Would not be configurable otherwise
    # Git Server
    - role: server/gitea
      tags:
        - git.banananet.work
      domain: git.banananet.work
      gitea_system_user: git
      database_user: gitea
    # Banananet.work
    - role: server/static
      tags:
        - banananet.work
      domain: banananet.work
      repo: git@git.banananet.work:banananetwork/main-static.git
    - role: nginx/forward
      tags:
        - banananet.work
      domain: www.banananet.work
      dest: banananet.work
    # Linx Server
    - role: server/linx
      tags:
        - drop.banananet.work
      domain: drop.banananet.work
      system_user: drop-banananet-work
      bind_port: 12840
      site_name: "BananaNetwork Drop Server"
    # SpotMe Server
    - role: server/spotme
      tags:
        - spotme.banananet.work
      domain: spotme.banananet.work
      bind_port: 12820
      spotme_system_user: spotme
#    # Admin Panel
#    - role: server/php
#      domain: nvak.banananet.work
#      repo: PHPMYADMIN # TODO
    # BananaNetwork Keys
#    - role: server/node
#      domain: keys.banananet.work
#      repo: https://git.banananet.work/banananetwork/keys.git
#      bind_port: 12822
#      system_user: keys-banananet-work
    # Nextcloud Server
    - role: server/nextcloud
      tags:
        - cloud.banananet.work
      domain: cloud.banananet.work
      system_user: nextcloud
      nextcloud_admin_user: "{{ global_username }}"
      enabled_apps_list:
        - accessibility
        - activity
        - admin_audit
        - apporder
        - bruteforcesettings
        - calendar
        - checksum
        - cloud_federation_api
        - comments
        - contacts
        - contactsinteraction
        - cospend
        - dav
        - deck
        - external
        - federatedfilesharing
        - federation
        - files
        - files_automatedtagging
        - files_external
        - files_markdown
        - files_pdfviewer
        - files_rightclick
        - files_sharing
        - files_trashbin
        - files_versions
        - files_videoplayer
        - firstrunwizard
        - logreader
        - lookup_server_connector
        - mail
        - metadata
        - nextcloud_announcements
        - notes
        - notifications
        - oauth2
        - ocdownloader
        - password_policy
        - phonetrack
        - photos
        - polls
        - privacy
        - provisioning_api
        - quota_warning
        - ransomware_protection
        - serverinfo
        - settings
        - sharebymail
        - sociallogin
        - socialsharing_email
        - support
        - suspicious_login
        - systemtags
        - tasks
        - text
        - theming
        - twofactor_admin
        - twofactor_backupcodes
        - twofactor_gateway
        - twofactor_nextcloud_notification
        - twofactor_totp
        - twofactor_u2f
        - updatenotification
        - viewer
        - workflowengine
      disabled_apps_list:
        - encryption
        - files_readmemd
        - recommendations
        - spreed
        - survey_client
        - user_ldap
    # Firefox Sync Server
    - role: server/firefox-sync
      tags:
        - firefox.banananet.work
      domain: firefox.banananet.work
      system_user: firefox-banananet-work
    # RSS Server
    # TODO Manual initialization of database required
    - role: server/tt-rss
      tags:
        - rss.banananet.work
      domain: rss.banananet.work
      system_user: rss-banananet-work
    # DSA Seite
#    - role: server/node
#      domain: dsa.banananet.work
#      repo: git@git.banananet.work:dsaGroup/dsaPage.git
#      bind_port: 12821
#      system_user: dsaPage
    # Forum der Schande
    - role: server/php
      tags:
        - forumderschan.de
      domain: forumderschan.de
      system_user: forumderschan-de
      repo: git@git.banananet.work:strichliste/strichliste-php.git
      root: html
      installation_includes:
        - includes
    - role: nginx/forward
      tags:
        - forumderschan.de
      domain: www.forumderschan.de
      dest: forumderschan.de
    # WG Nextcloud
    - role: server/nextcloud
      tags:
        - wg.banananet.work
      domain: wg.banananet.work
      system_user: wg-banananet-work
      nextcloud_admin_user: felix
      enabled_apps_list:
        - accessibility
        - activity
        - apporder
        - bruteforcesettings
        - calendar
        - checksum
        - cloud_federation_api
        - comments
        - contacts
        - cookbook
        - cospend
        - dav
        - deck
        - encryption
        - external
        - federatedfilesharing
        - federation
        - files
        - files_automatedtagging
        - files_external
        - files_pdfviewer
        - files_rightclick
        - files_sharing
        - files_trashbin
        - files_versions
        - files_videoplayer
        - firstrunwizard
        - logreader
        - lookup_server_connector
        - metadata
        - nextcloud_announcements
        - notes
        - notifications
        - oauth2
        - ocdownloader
        - password_policy
        - photos
        - polls
        - privacy
        - provisioning_api
        - quota_warning
        - ransomware_detection
        - ransomware_protection
        - serverinfo
        - settings
        - sharebymail
        - side_menu
        - sociallogin
        - socialsharing_email
        - support
        - suspicious_login
        - systemtags
        - tasks
        - text
        - theming
        - twofactor_admin
        - twofactor_backupcodes
        - twofactor_gateway
        - twofactor_nextcloud_notification
        - twofactor_totp
        - twofactor_u2f
        - updatenotification
        - viewer
        - workflowengine
      disabled_apps_list:
        - admin_audit
        - recommendations
        - spreed
        - survey_client
        - user_ldap
    - role: server/static
      domain: turnips.banananet.work
      repo: https://git.banananet.work/banananetwork/ac-nh-turnip-prices.git
    # SMD/SFC HST 2020
    - role: server/nextcloud
      tags:
        - hst20.banananet.work
      domain: hst20.banananet.work
      system_user: nc-hst20
      nextcloud_admin_user: felix
      enabled_apps_list:
        - accessibility
        - activity
        - apporder
        - bruteforcesettings
        - calendar
        #- checksum # currently not supported
        - cloud_federation_api
        - comments
        - contacts
        - cospend
        - dav
        - deck
        - encryption
        - external
        - federatedfilesharing
        - federation
        - files
        - files_automatedtagging
        - files_mindmap
        - files_pdfviewer
        - files_rightclick
        - files_sharing
        - files_trashbin
        - files_versions
        - files_videoplayer
        - firstrunwizard
        - forms
        - logreader
        - lookup_server_connector
        - metadata
        - nextcloud_announcements
        - notes
        - notifications
        - oauth2
        - password_policy
        - photos
        - polls
        - privacy
        - provisioning_api
        - quota_warning
        #- ransomware_detection # currently not supported
        - ransomware_protection
        - serverinfo
        - settings
        - sharebymail
        - socialsharing_email
        - spreed
        - support
        - suspicious_login
        - systemtags
        - tasks
        - text
        - theming
        - twofactor_admin
        - twofactor_backupcodes
        - twofactor_gateway
        - twofactor_totp
        - twofactor_u2f
        - updatenotification
        - viewer
        - whiteboard
        - workflowengine
      disabled_apps_list:
        - admin_audit
        - dashboard
        - files_external
        - recommendations
        - sociallogin
        - survey_client
        - user_ldap
        - user_status
        - weather_status
#    # Stadtpiraten
#    - role: server/typo3
#      domain: piraten.dev.banananet.work
#    - role: server/php
#      domain: forum.piraten.dev.banananet.work
#      repo: PHPBB # TODO
#      version: master
#    # Stadtpiraten (prod)
#    - role: nginx/forward
#      domain: www.stadtpiraten-karlsruhe.de
#      dest: stadtpiraten-karlsruhe.de