Add Syncthing to server container stack

ansible/inventory/group_vars/server.yml

@@ -80,10 +80,34 @@ server_directories:
     owner: root
     group: root
     mode: "0755"
+  - path: /opt/syncthing/config
+    owner: root
+    group: root
+    mode: "0755"
+  - path: /srv/syncthing
+    owner: root
+    group: root
+    mode: "0755"
+  - path: /srv/syncthing/data
+    owner: root
+    group: root
+    mode: "0755"
 
 server_ufw_rules:
   - rule: allow
     name: OpenSSH
+  - rule: allow
+    port: "22000"
+    proto: tcp
+    comment: Syncthing sync traffic
+  - rule: allow
+    port: "22000"
+    proto: udp
+    comment: Syncthing QUIC sync traffic
+  - rule: allow
+    port: "21027"
+    proto: udp
+    comment: Syncthing local discovery
 
 server_sshd_settings:
   PermitRootLogin: "no"

ansible/templates/server/docker-compose.yml.j2

@@ -68,6 +68,23 @@ services:
       - "3000:3000"
       - "127.0.0.1:222:22"
 
+  syncthing:
+    image: syncthing/syncthing:2
+    container_name: syncthing
+    hostname: syncthing
+    restart: unless-stopped
+    expose:
+      - "8384"
+    volumes:
+      - "/opt/syncthing/config:/var/syncthing"
+      - "/srv/syncthing/data:/data"
+    ports:
+      - "22000:22000/tcp"
+      - "22000:22000/udp"
+      - "21027:21027/udp"
+    networks:
+      - web
+
 networks:
   web:
     external: false