first_commit

roles/garage/templates/docker-compose.yml.j2

@@ -0,0 +1,10 @@
+services:
+  garage:
+    image: dxflrs/garage:{{ garage_version }}
+    container_name: garage
+    restart: unless-stopped
+    network_mode: "host"
+    volumes:
+      - ./garage.toml:/etc/garage.toml:ro
+      - ./meta:/var/lib/garage/meta
+      - ./data:/var/lib/garage/data

roles/garage/templates/garage.toml.j2

@@ -0,0 +1,29 @@
+metadata_dir = "/var/lib/garage/meta"
+data_dir = "/var/lib/garage/data"
+
+db_engine = "lmdb"
+replication_factor = {{ garage_replication_factor }}
+read_quorum = {{ garage_read_quorum }}
+write_quorum = {{ garage_write_quorum }}
+compression_level = 2
+metadata_auto_snapshot_interval = "6h"
+
+# RPC привязан к WG интерфейсу для безопасности
+rpc_bind_addr = "{{ wireguard_ip }}:3901"
+rpc_public_addr = "{{ wireguard_ip }}:3901"
+rpc_secret = "{{ garage_rpc_secret }}"
+
+[s3_api]
+s3_region = "garage"
+# S3 API доступно на всех интерфейсах (для доступа из LAN и через WG)
+api_bind_addr = "0.0.0.0:3900"
+
+[admin]
+admin_token = "{{ garage_admin_token }}"
+
+[kademlia]
+bootstrap_peers = [
+{% for peer in wireguard_peers %}
+    "{{ peer.pubkey }}@{{ peer.ip }}:3901"{% if not loop.last %},{% endif %}
+{% endfor %}
+]