# 📦 Application Container Deployments

This document details the containerized application architecture, storage mounts, and Systemd service mappings deployed across the virtual machine nodes using rootless **Podman**.

---

## 🏗️ Application & Systemd Service Architecture

Every application workload runs inside an isolated rootless container. The host's local **Systemd** daemon manages the startup dependencies and lifecycle of the containers:

```mermaid
graph TD
    %% My Color Palette
    classDef vmNode fill:#161d1c,stroke:#7099f,color:#f8f8f2,stroke-width:1.5px;
    classDef svcNode fill:#212c2a,stroke;#9580ff,color:#f8f8f2,stroke-width:1px;
    classDef appNode fill:#2b3b38,stroke:#8aff80,color:#8aff80,stroke-width:1.5px;
    classDef mountNode fill:#212c2a,stroke:#ffca80,color:#ffca80,stroke-width:1px;

    subgraph VM_Portfolio ["portfolio.lab.local"]
        Svc_Portal["⚙️ portal.service<br>(Systemd)"]:::svcNode
        App_Nginx["🌐 Nginx Web Server<br>(Port 80)"]:::appNode
        SiteFiles["📁 /home/sho/containers/portal<br>(Static HTML/CSS/JS)"]:::vmNode
    end

    subgraph VM_Minecraft ["minecraft.lab.local"]
        Svc_Minecraft["⚙️ minecraft.service<br>(Systemd)"]:::svcNode
        App_MC["⚔️ Fabric Server<br>(Port 25565)"]:::appNode
        MCDatabase["📁 /home/sho/containers/minecraft<br>(Persistent /data)"]:::vmNode
    end

    subgraph VM_Navidrome ["navidrome.lab.local"]
        Svc_Rclone["⚙️ rclone-mount.service<br>(Systemd)"]:::svcNode
        Svc_Navidrome["⚙️ navidrome.service<br>(Systemd)"]:::svcNode
        App_ND["🎵 Navidrome Streamer<br>(Port 4533)"]:::appNode
        GDrive["☁️ Google Drive<br>(FUSE Mount: /mnt/gdrive)"]:::mountNode
    end

    Svc_Portal ===>|Launches| App_Nginx
    App_Nginx -->|Mounts read-only| SiteFiles

    Svc_Minecraft ===>|Launches| App_MC
    App_MC -->|Mounts read-write| MCDatabase

    Svc_Rclone ===>|Mounts Google Drive via| GDrive
    Svc_Navidrome ===>|Launches| App_ND
    Svc_Navidrome -.->|Requires| Svc_Rclone
    App_ND -->|Scrapes MP3s from| GDrive

    %% Subgraph Colors
    style VM_Portfolio fill:#111615,stroke:#70a99f,stroke-width:1px;
    style VM_Minecraft fill:#111615,stroke:#70a99f,stroke-width:1px;
    style VM_Navidrome fill:#111615,stroke:#70a99f,stroke-width:1px;
```

---

## 📄 Application Specifications

The container lifecycle is automated via `ansible/playbooks/04_services_deploy.yml`:

### 1.  Portfolio Hub (`portfolio.lab.local`)

*   **Engine**: Launches `docker.io/library/nginx:alpine` using rootless Podman.
*   **Statis Assets**: Clones and mounts the HTML/CSS website files into `/usr/share/nginx/html` in read-only(`ro`) mode.
*   **Port Mapping**: Maps container port to 80 to target port 80 of the virtual machine.

### 2.  Fabric Minecraft Server (`minecraft.lab.local`)

*   **Engine**: Launches `docker.io/itzg/minecraft-server:java17`(java-based wrapper).
*   **Configurations**:
    *   `EULA=TRUE`: Accepts user agreements.
    *   `TYPE=FABRIC`: Deploys Fabric mod loader.
    *   `VERSION=1.20.1`: Deploys game runtime version.
    *   `MEMORY=4G`: Allocates memory bounds(configured dynamically via variables).
    *   `MODRINTH_PROJECTS`: Deploys specific mod files(Fabric API, Architectury API, Geckolib, Kotlin runtime, hamster pets, etc.).
*   **Persistent Storage**: Mounts `/home/sho/containers/minecraft` to `/data` in read-write mode to preserve world data, player profiles, and server properties.

### 3.  Music Streaming Node (`navidrome.lab.local`)

*   **rclone Google Drive FUSE Mount**:
    *   Installed packages `fuse3` and `rclone`.
    *   Modifies `/etc/fuse.conf` to enable `user_allow_other`(allowing rootless containers to read paths mounted by host users).
    *   Configures `rclone` with Google Drive credentials and spawns a background mount service daemon(`rclone-mount.service`) directing drive data to `/mnt/gdrive` using cache mode `full`(cached locally for 24h).
*   **Navidrome Engine**:
    *   Launches `docker.io/deluan/navidrome:latest`.
    *   Mounts the FUSE path `/mnt/gdrive` into `/music:ro`.
    *   Systemd configurations map a `Requires=rclone-mount.service` dependency, preventing the Navidrome container from running if the Google Drive FUSE mount fails.

---

## 🚀 Execution & Management

Deploy the application containers using the Ansible tags target:

```bash
ansible-playbook site.yml --tags "services" --ask-vault-pass
```

### Container Status Verification

Log in to any service virtual machine and query Podman:

```bash
# View running container status
podman ps

# Inspect container startup logs
podman logs navidrome
```