From db18e6ddf601cb061f080ff8aeeaca3f900c6486 Mon Sep 17 00:00:00 2001
From: Alex Tavarez <admin@sukaato.moe>
Date: Tue, 18 Nov 2025 21:34:30 -0500
Subject: [PATCH] Commented LDAP and NodeJS packages, uncommented aria and
 rsync packages, from software list--added container, misc and snap software

---
 roles/bootstrap/vars/main/software.yml | 79 ++++++++++++++++----------
 1 file changed, 49 insertions(+), 30 deletions(-)

diff --git a/roles/bootstrap/vars/main/software.yml b/roles/bootstrap/vars/main/software.yml
index 785d1b3..181180f 100644
--- a/roles/bootstrap/vars/main/software.yml
+++ b/roles/bootstrap/vars/main/software.yml
@@ -5,6 +5,9 @@
 software:
   pkgs:
     # @NOTE keep fields or keys constant; otherwise will have to edit handler notifiers and listeners elsewhere
+    failtwoban:
+      name:
+        apt: fail2ban
     gocryptfs:
       name:
         apt: gocryptfs
@@ -80,18 +83,19 @@ software:
     crystal-docs:
       name:
         apt: crystal-doc
-    javascript-lang:
-      name:
-        apt: nodejs
+    # @TODO replace below commented with an NVM-style installation (v22): https://nodejs.org/en/download
+    # javascript-lang:
+    #   name:
+    #     apt: nodejs
+    # javascript-pkg:
+    #   name:
+    #     apt: npm
+    # javascript-linter:
+    #   name:
+    #     apt: eslint
     javascript-docs:
       name:
         apt: nodejs-doc
-    javascript-pkg:
-      name:
-        apt: npm
-    javascript-linter:
-      name:
-        apt: eslint
     php-lang:
       name:
         apt: php
@@ -104,9 +108,9 @@ software:
     php-pkg:
       name:
         apt: composer
-    php-ldap:
-      name:
-        apt: php-ldap
+    # php-ldap:
+    #   name:
+    #     apt: php-ldap
     html-linter:
       name:
         apt: tidy
@@ -180,18 +184,18 @@ software:
     # dpkg-dev:
     #   name:
     #     apt: dpkg-dev
-    ldap-utils:
-      name:
-        apt: ldap-utils
-    slapd:
-      name:
-        apt: slapd
+    # ldap-utils:
+    #   name:
+    #     apt: ldap-utils
+    # slapd:
+    #   name:
+    #     apt: slapd
     proftpd-mod-crypto:
       name:
         apt: proftpd-mod-crypto
-    proftpd-mod-ldap:
-      name:
-        apt: proftpd-mod-ldap
+    # proftpd-mod-ldap:
+    #   name:
+    #     apt: proftpd-mod-ldap
     # @TODO manually install the commented below on current active new VPS, then uncomment
     # proftpd-mod-clamav:
     #   name:
@@ -202,15 +206,15 @@ software:
     proftpd-docs:
       name:
         apt: proftpd-doc
-    # rsync:
-    #   name:
-    #     apt: rsync
+    rsync:
+      name:
+        apt: rsync
     # rclone:
     #   name:
     #     apt: rsync 
-    # aria:
-    #   name:
-    #     apt: aria2 
+    aria:
+      name:
+        apt: aria2 
     # mopidy:
     #   name:
     #     apt: mopidy
@@ -228,11 +232,20 @@ software:
         - "nextcloud:php.memory-limit=512M"
         - "nextcloud:nextcloud.cron-interval=10m"
         - "nextcloud:http.compression=true"
-        # @TODO commented opts use 'connect' snapd subcommand--look into how to use in Ansible
-        # - "nextcloud:removable-media"
-        # - "nextcloud:network-observe"
+        - "nextcloud:ports.http=81"
         # @TODO see how to set these options: https://help.nextcloud.com/t/how-to-configure-nextcloud-snap/216036#p-649442-trusted-domains-configuration-8
         # @TODO see how to set these options: https://help.nextcloud.com/t/how-to-configure-nextcloud-snap/216036#p-649442-trusted-proxy-configuration-9
+  containers:
+    ariang:
+      name: https://docker.io/p3terx/ariang
+      tag: latest
+  links:
+    quartz:
+      name: quartz
+      src: https://github.com/jackyzha0/quartz.git
+      branch: v4
+      version: ~
+      output: ~
 config:
   git:
     sys:
@@ -274,4 +287,10 @@ config:
     tls_paths:
       cert: "/usr/local/share/ca-certificates/{{ hostvars[inventory_hostname].fqdn }}.crt"
       privkey: "/usr/local/share/ca-certificates/{{ hostvars[inventory_hostname].fqdn }}.key"
+  nextcloud:
+    users:
+      admin:
+        username: admin
+        # @TODO change this password to ansible-vaulted actual choice password later
+        password: password123 # @NOTE placeholder