initial commit

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

roles/diun/defaults/main.yml

@@ -0,0 +1,6 @@
+---
+# Check schedule (cron format)
+diun_schedule: "0 */6 * * *"
+
+# Notification toggles
+diun_notify_matrix: false

roles/diun/handlers/main.yml

@@ -0,0 +1,7 @@
+---
+- name: restart diun
+  community.docker.docker_compose_v2:
+    project_src: /srv/diun
+    state: present
+    recreate: always
+    build: never

roles/diun/tasks/main.yml

@@ -0,0 +1,29 @@
+---
+- name: Create diun directories
+  file:
+    path: "{{ item }}"
+    state: directory
+    mode: '0755'
+  loop:
+    - /srv/diun
+    - /srv/diun/data
+
+- name: Create diun configuration
+  template:
+    src: diun.yml.j2
+    dest: /srv/diun/data/diun.yml
+    mode: '0644'
+  notify: restart diun
+
+- name: Create compose file
+  template:
+    src: compose.yml.j2
+    dest: /srv/diun/compose.yml
+    mode: '0644'
+  notify: restart diun
+
+- name: Deploy diun
+  community.docker.docker_compose_v2:
+    project_src: /srv/diun
+    state: present
+    build: never

roles/diun/templates/compose.yml.j2

@@ -0,0 +1,21 @@
+services:
+  diun:
+    image: crazymax/diun:{{ diun_version }}
+    container_name: diun
+    restart: unless-stopped
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock:ro
+      - /srv/diun/data:/data
+    environment:
+      CONFIG: /data/diun.yml
+      TZ: {{ timezone | default('UTC') }}
+      LOG_LEVEL: info
+      LOG_JSON: "true"
+    labels:
+      diun.enable: "false"
+    networks:
+      - monitoring
+
+networks:
+  monitoring:
+    external: true

roles/diun/templates/diun.yml.j2

@@ -0,0 +1,30 @@
+watch:
+  schedule: "{{ diun_schedule | default('0 */6 * * *') }}"
+  firstCheckNotif: false
+
+providers:
+  docker:
+    watchByDefault: true
+    watchStopped: false
+
+{% if diun_notify_email | default(false) or diun_notify_matrix | default(false) %}
+notif:
+{% if diun_notify_email | default(false) %}
+  mail:
+    host: {{ mail_hostname }}
+    port: 587
+    ssl: false
+    insecureSkipVerify: false
+    username: {{ diun_email_user }}
+    password: {{ diun_email_password }}
+    from: {{ diun_email_user }}
+    to: {{ diun_email_to }}
+{% endif %}
+{% if diun_notify_matrix | default(false) %}
+  matrix:
+    homeserverURL: https://{{ tuwunel_domain }}
+    user: {{ diun_matrix_user }}
+    password: {{ diun_matrix_password }}
+    roomID: {{ diun_matrix_room_id }}
+{% endif %}
+{% endif %}