moving everything to active or retired vs incubating and graduated

active/podman_pihole/cloudflared-compose.yaml

@@ -0,0 +1,14 @@
+version: "3"
+
+# More info at https://docs.pi-hole.net/guides/dns/cloudflared/?h=cloud
+services:
+  cloudflared:
+    container_name: cloudflared
+    image: docker.io/cloudflare/cloudflared:2024.5.0
+    command: proxy-dns --address 0.0.0.0 --port 5053 --upstream https://1.1.1.1/dns-query --upstream https://1.0.0.1/dns-query
+    ports:
+      - "5053:5053/tcp"
+      - "5053:5053/udp"
+    restart: unless-stopped
+    networks:
+      - podman1

active/podman_pihole/pihole-compose.yaml

@@ -0,0 +1,25 @@
+version: "3"
+
+# More info at https://github.com/pi-hole/docker-pi-hole/ and https://docs.pi-hole.net/
+services:
+  pihole:
+    container_name: pihole
+    image: docker.io/pihole/pihole:2024.05.0
+    ports:
+      - "53:53/tcp"
+      - "53:53/udp"
+      - "8081:80/tcp"
+    environment:
+      TZ: "America/Chicago"
+      # WEBPASSWORD: "SET A PASSWORD HERE"
+    # Volumes store your data between container upgrades
+    volumes:
+      - pihole:/etc/pihole
+      - dnsmasq:/etc/dnsmasq.d
+    restart: unless-stopped
+    networks:
+      - podman1
+
+volumes:
+  pihole:
+  dnsmasq:

active/podman_pihole/pihole.md

@@ -0,0 +1,77 @@
+# Podman
+
+- [Podman](#podman)
+  - [Notes](#notes)
+  - [Podman systemd files](#podman-systemd-files)
+    - [pihole](#pihole)
+    - [Cloudflared](#cloudflared)
+  - [Update yellow quadlets](#update-yellow-quadlets)
+
+## Notes
+
+- podman auth is stored in `/run/user/1000/containers`
+
+## Podman systemd files
+
+Rather than copying compose files or running podman run as systemd services you can
+generate quadlet files to define containers that run at boot.
+
+Podlet generates quadlets - systemd files specifically for containers.
+
+You generate quadlets from compose files like so:
+
+```bash
+podman run \
+    -v ./compose:/compose \
+    -v ./quadlets:/quadlets \
+    quay.io/k9withabone/podlet \
+    -f /quadlets \
+    -i \
+    --overwrite \
+    compose /compose/grafana-compose.yaml
+```
+
+Copy these files to `/usr/share/containers/systemd/`
+
+### pihole
+
+<https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts>
+
+```bash
+podman run \
+    -v ./podman/compose:/compose \
+    -v ./podman/quadlets:/quadlets \
+    quay.io/k9withabone/podlet \
+    -f /quadlets \
+    -i \
+    --overwrite \
+    --wants network-online.target \
+    --after network-online.target \
+    compose /compose/pihole-compose.yaml
+```
+
+### Cloudflared
+
+https://docs.pi-hole.net/guides/dns/cloudflared/
+
+Creates a DOH proxy for pihole. Just set the pihole upstream to `10.1.203.197#5053` (yellow) or
+`10.1.200.253#5053` (orange).
+
+```bash
+podman run \
+    -v ./podman/compose:/compose \
+    -v ./podman/quadlets:/quadlets \
+    quay.io/k9withabone/podlet \
+    -f /quadlets \
+    -i \
+    --overwrite \
+    --wants network-online.target \
+    --after network-online.target \
+    compose /compose/cloudflared-compose.yaml
+```
+
+## Update yellow quadlets
+
+```bash
+ansible-playbook -i ./ansible/inventory.yaml podman/update-quadlets.yaml
+```

active/podman_pihole/update-quadlets.yaml

@@ -0,0 +1,22 @@
+- name: Update quadlets
+  hosts: yellow
+  tasks:
+  - name: Copy quadlets with owner and permissions
+    ansible.builtin.copy:
+      src: "{{ item }}"
+      dest: /usr/share/containers/systemd/
+      owner: root
+      group: root
+      mode: '0644'
+    loop:
+    - ./quadlets/pihole.container
+    - ./quadlets/cloudflared.container
+    - ./quadlets/podman1.network
+  - name: Daemon-reload to trigger re-read of quadlets
+    ansible.builtin.systemd_service:
+      daemon_reload: true
+  - name: Restart all quadlet services
+    ansible.builtin.systemd_service:
+      state: restarted
+      name: "{{ item }}"
+    loop: ["podman1-network", "pihole", "iperf3", "cloudflared"]