Add Atlas media and storage services

ansible/roles/profile_server/tasks/main.yml

@@ -8,15 +8,16 @@
     fail_msg: >-
       server_firewall_backend must be firewalld for the Rocky server profile.
 
-- name: Require server container secret variables
-  tags: [dotfiles, dotfiles:server, services]
+- name: Require server database secret variables
+  tags: [dotfiles, dotfiles:server, services, navidrome]
   ansible.builtin.assert:
     that:
-      - (vault_navidrome_db_password | default('')) | length > 0
+      - server_navidrome_db_password | length > 0
       - (vault_postgres_root_password | default('')) | length > 0
     fail_msg: >-
-      Server container secrets are missing. Define vault_navidrome_db_password and
-      vault_postgres_root_password in secrets/vault.yml or another vars source.
+      Define vault_navidrome_db_password and vault_postgres_root_password in Vault
+      before rendering the Navidrome database configuration.
+  no_log: true
 
 - name: Configure DuckDNS updater
   tags: [dotfiles, dotfiles:server, duckdns]
@@ -71,6 +72,12 @@
   tags: [services, podman]
   ansible.builtin.include_tasks: podman-compose.yml
 
+- name: Configure Atlas music mount
+  ansible.builtin.import_tasks: rclone-music.yml
+
+- name: Configure rootless Navidrome
+  ansible.builtin.import_tasks: navidrome.yml
+
 - name: Disable SSH root login on server
   tags: [services]
   ansible.builtin.lineinfile: