align romm shim with jellyfin/navidrome uid pattern (romm_uid/romm_gid)

.gitmodules

@@ -1,3 +0,0 @@
-[submodule "roles/docker_compose_app"]
-	path = roles/docker_compose_app
-	url = ssh://git@ssh.git.jaroszew.ski:2222/ansible/ansible-role-docker-compose-app.git

README.md

@@ -4,9 +4,9 @@ A comprehensive Ansible collection for deploying and managing Docker Compose app
 
 ## Overview
 
-A curated collection of Docker Compose roles for self-hosted applications. Each role leverages the `docker_compose_app` base to provide standardized deployment, configuration management, backup procedures, and lifecycle operations across diverse containerized services.
+A curated collection of Docker Compose roles for self-hosted applications. Each role depends on the base role in the [`patrickj.docker_compose_app`](https://git.jaroszew.ski/ansible/ansible-collection-docker-compose-app) collection (FQCN `patrickj.docker_compose_app.app`) to provide standardized deployment, configuration management, backup procedures, and lifecycle operations across diverse containerized services.
 
-Consult the [role development documentation](https://git.jaroszew.ski/ansible/ansible-role-docker-compose-app/src/branch/main/README.md) for guidance on creating custom roles, variable conventions, and integration patterns.
+Consult the [base role documentation](https://git.jaroszew.ski/ansible/ansible-collection-docker-compose-app/src/branch/main/roles/app/README.md) for guidance on creating custom roles, variable conventions, and integration patterns.
 
 ## Features
 
@@ -21,13 +21,22 @@ Consult the [role development documentation](https://git.jaroszew.ski/ansible/an
 
 ## Installation
 
-### From Git Repository
+Both this collection and its base dependency (`patrickj.docker_compose_app`) are hosted on Gitea, not on Ansible Galaxy. Install them together via a `requirements.yml` in your playbook repo:
 
-```bash
+```yaml
-ansible-galaxy collection install https://git.jaroszew.ski/ansible/ansible-collection-docker-apps.git
+collections:
+  - name: https://git.jaroszew.ski/ansible/ansible-collection-docker-compose-app.git
+    type: git
+  - name: https://git.jaroszew.ski/ansible/ansible-collection-docker-apps.git
+    type: git
 ```
 
-### From Local Development
+Install with:
+```bash
+ansible-galaxy collection install -r requirements.yml
+```
+
+### From local development
 
 ```bash
 # From the collection directory
@@ -200,7 +209,7 @@ collections:
 
 1. Create role directory: `roles/new-app/`
 2. Follow the template structure from existing roles
-3. Configure meta dependency on `docker_compose_app`
+3. Configure meta dependency on `patrickj.docker_compose_app.app`
 4. Add to documentation
 
 ### Testing

roles/audiobookshelf/meta/main.yaml

@@ -5,7 +5,7 @@ galaxy_info:
   license: MIT
 
 dependencies:
-  - role: patrickj.docker_apps.docker_compose_app
+  - role: patrickj.docker_compose_app.app
     vars:
       app_role_name: audiobookshelf
       app_subdirectories:

roles/calibre-web/meta/main.yml

@@ -5,7 +5,7 @@ galaxy_info:
   license: MIT
 
 dependencies:
-  - role: patrickj.docker_apps.docker_compose_app
+  - role: patrickj.docker_compose_app.app
     vars:
       app_role_name: calibre-web
       app_subdirectories:

roles/gitea/meta/main.yaml

@@ -18,7 +18,7 @@ galaxy_info:
     - selfhosted
 
 dependencies:
-  - role: patrickj.docker_apps.docker_compose_app
+  - role: patrickj.docker_compose_app.app
     vars:
       app_role_name: gitea
       app_compose_validate: false

roles/glance/README.md

@@ -12,7 +12,7 @@ Glance is a self-hosted dashboard that displays information from various sources
 
 | Variable | Default | Description |
 |----------|---------|-------------|
-| `glance_config_template` | `{{ app_templates_path }}/glance.yml.j2` | Template file for generating glance.yml config |
+| `glance_config_template` | `glance.yml.j2` | Template file for generating glance.yml config (resolved via Ansible's role templates search path) |
 | `glance_config_path` | `{{ app_dir }}/config` | Configuration storage |
 | `glance_http_port` | `8080` | Web interface port |
 | `glance_container_version` | `latest` | Glance Docker image tag |

roles/glance/defaults/main.yml

@@ -13,4 +13,4 @@ glance_http_port: 8080
 glance_config_path: "{{ app_dir }}/config"
 
 # App-specific configuration
-glance_config_template: "{{ app_templates_path }}/glance.yml.j2"
+glance_config_template: glance.yml.j2

roles/glance/meta/main.yml

@@ -5,7 +5,7 @@ galaxy_info:
   license: MIT
 
 dependencies:
-  - role: patrickj.docker_apps.docker_compose_app
+  - role: patrickj.docker_compose_app.app
     vars:
       app_role_name: glance
       app_subdirectories:

roles/grafana/meta/main.yml

@@ -5,7 +5,7 @@ galaxy_info:
   license: MIT
 
 dependencies:
-  - role: patrickj.docker_apps.docker_compose_app
+  - role: patrickj.docker_compose_app.app
     vars:
       app_role_name: grafana
       app_subdirectories:

roles/immich/meta/main.yml

@@ -5,7 +5,7 @@ galaxy_info:
   license: MIT
 
 dependencies:
-  - role: patrickj.docker_apps.docker_compose_app
+  - role: patrickj.docker_compose_app.app
     vars:
       app_role_name: immich
       app_subdirectories:
@@ -15,6 +15,6 @@ dependencies:
         - "{{ immich_library_path }}"
         - "{{ immich_pgdata_path }}"
       app_extra_templates:
-        - src: "{{ app_templates_path }}/.env.j2"
+        - src: .env.j2
           dest: "{{ app_dir }}/.env"
       app_compose_validate: false

roles/influxdb/meta/main.yml

@@ -5,7 +5,7 @@ galaxy_info:
   license: MIT
 
 dependencies:
-  - role: patrickj.docker_apps.docker_compose_app
+  - role: patrickj.docker_compose_app.app
     vars:
       app_role_name: influxdb
       app_subdirectories:

roles/jellyfin/meta/main.yaml

@@ -5,7 +5,7 @@ galaxy_info:
   license: MIT
 
 dependencies:
-  - role: patrickj.docker_apps.docker_compose_app
+  - role: patrickj.docker_compose_app.app
     vars:
       app_role_name: jellyfin
       app_subdirectories:

roles/linkwarden/meta/main.yml

@@ -5,7 +5,7 @@ galaxy_info:
   license: MIT
 
 dependencies:
-  - role: patrickj.docker_apps.docker_compose_app
+  - role: patrickj.docker_compose_app.app
     vars:
       app_role_name: linkwarden
       app_subdirectories:
@@ -17,6 +17,6 @@ dependencies:
         - "{{ linkwarden_pgdata_path }}"
         - "{{ linkwarden_meili_data_path }}"
       app_extra_templates:
-        - src: "{{ app_templates_path }}/.env.j2"
+        - src: .env.j2
           dest: "{{ app_dir }}/.env"
       app_compose_validate: false # Issues validating when needing a .env

roles/mealie/meta/main.yml

@@ -5,7 +5,7 @@ galaxy_info:
   license: MIT
 
 dependencies:
-  - role: patrickj.docker_apps.docker_compose_app
+  - role: patrickj.docker_compose_app.app
     vars:
       app_role_name: mealie
       app_subdirectories:

roles/navidrome/meta/main.yaml

@@ -5,7 +5,7 @@ galaxy_info:
   license: MIT
 
 dependencies:
-  - role: patrickj.docker_apps.docker_compose_app
+  - role: patrickj.docker_compose_app.app
     vars:
       app_role_name: navidrome
       app_subdirectories:

roles/open-webui/meta/main.yml

@@ -5,7 +5,7 @@ galaxy_info:
   license: MIT
 
 dependencies:
-  - role: patrickj.docker_apps.docker_compose_app
+  - role: patrickj.docker_compose_app.app
     vars:
       app_role_name: open-webui
       app_subdirectories:

roles/paperless-ngx/meta/main.yml

@@ -5,7 +5,7 @@ galaxy_info:
   license: MIT
 
 dependencies:
-  - role: patrickj.docker_apps.docker_compose_app
+  - role: patrickj.docker_compose_app.app
     vars:
       app_role_name: paperless-ngx
       app_subdirectories:

roles/redlib/meta/main.yml

@@ -5,7 +5,7 @@ galaxy_info:
   license: MIT
 
 dependencies:
-  - role: patrickj.docker_apps.docker_compose_app
+  - role: patrickj.docker_compose_app.app
     vars:
       app_role_name: redlib
       app_health_check: false # Issues with redlib healthcheck 

roles/romm/defaults/main.yml

@@ -11,6 +11,14 @@ romm_restart_policy: "{{ app_restart_policy | default('unless-stopped') }}"
 # Network configuration
 romm_http_port: 8080
 
+# User the romm container runs as. Defaults to app_uid/app_gid (the ansible
+# connection user, or root under become). Override in your playbook to
+# align with host user perms on bind-mounted paths (e.g. NFS). Applies to
+# the romm service only; mariadb manages its own user internally. Also used
+# as the owner of the app-managed subdirectories.
+romm_uid: "{{ app_uid }}"
+romm_gid: "{{ app_gid }}"
+
 # Volume paths
 romm_library_path: "{{ app_dir }}/library"
 romm_assets_path: "{{ app_dir }}/assets"

roles/romm/meta/main.yml

@@ -5,14 +5,23 @@ galaxy_info:
   license: MIT
 
 dependencies:
-  - role: patrickj.docker_apps.docker_compose_app
+  - role: patrickj.docker_compose_app.app
     vars:
       app_role_name: romm
+      # romm_library_path is intentionally excluded: it's user-managed
+      # external storage (often on NFS/SMB with pre-existing perms).
+      # mysql_data_path is chowned to 999:999 mode 0700 for the mariadb
+      # container's mysql user. App dirs match romm_puid/romm_pgid when set;
+      # otherwise fall back to the base role's app_uid/app_gid.
       app_subdirectories: >-
         {{
-          [romm_library_path, romm_assets_path, romm_config_path,
+          [
-           romm_resources_path, romm_mysql_data_path]
+            {'path': romm_assets_path,     'owner': romm_uid, 'group': romm_gid},
-          + ([romm_redis_data_path] if romm_redis_data_path else [])
+            {'path': romm_config_path,     'owner': romm_uid, 'group': romm_gid},
+            {'path': romm_resources_path,  'owner': romm_uid, 'group': romm_gid},
+            {'path': romm_mysql_data_path, 'owner': 999, 'group': 999, 'mode': '0700'},
+          ]
+          + ([{'path': romm_redis_data_path, 'owner': romm_uid, 'group': romm_gid}] if romm_redis_data_path else [])
         }}
       app_backup_subdirectories:
         - "{{ romm_assets_path }}"
@@ -20,6 +29,6 @@ dependencies:
         - "{{ romm_resources_path }}"
         - "{{ romm_mysql_data_path }}"
       app_extra_templates:
-        - src: "{{ app_templates_path }}/.env.j2"
+        - src: .env.j2
           dest: "{{ app_dir }}/.env"
       app_compose_validate: false

roles/romm/templates/compose.yml.j2

@@ -4,6 +4,7 @@ services:
     image: "rommapp/romm:{{ romm_container_version }}"
     container_name: "{{ romm_container_name }}"
     restart: "{{ romm_restart_policy }}"
+    user: "{{ romm_uid }}:{{ romm_gid }}"
     env_file:
       - .env
     volumes:

roles/speedtest-tracker/meta/main.yml

@@ -5,7 +5,7 @@ galaxy_info:
   license: MIT
 
 dependencies:
-  - role: patrickj.docker_apps.docker_compose_app
+  - role: patrickj.docker_compose_app.app
     vars:
       app_role_name: speedtest-tracker
       app_subdirectories:

roles/uptime-kuma/meta/main.yml

@@ -5,7 +5,7 @@ galaxy_info:
   license: MIT
 
 dependencies:
-  - role: patrickj.docker_apps.docker_compose_app
+  - role: patrickj.docker_compose_app.app
     vars:
       app_role_name: uptime-kuma
       app_subdirectories: