plex: move post install tasks to plex_extra_tasks

disable remote access

roles/plex/tasks/main2.yml

@@ -58,9 +58,6 @@
 - name: Create Docker container
   ansible.builtin.include_tasks: "{{ resources_tasks_path }}/docker/create_docker_container.yml"
 
-- name: Post-Install Tasks
-  ansible.builtin.import_tasks: "subtasks/post-install/main.yml"
-
 - name: "Execute Plex Extra Tasks role"
   ansible.builtin.include_role:
     name: "plex_extra_tasks"

roles/plex_extra_tasks/defaults/main.yml

@@ -8,5 +8,5 @@
 #########################################################################
 ---
 plex_extra_tasks_hostname: "{{ plex_name
-                            if not ('container:' in lookup('vars', 'plex_docker_network_mode', default=docker_networks_name_common))
-                            else (lookup('vars', 'plex_docker_network_mode', default=docker_networks_name_common).split(':')[1]) }}"
+                            if not ('container:' in lookup('vars', plex_name + '_docker_network_mode_default', default=docker_networks_name_common))
+                            else (lookup('vars', plex_name + '_docker_network_mode_default', default=docker_networks_name_common).split(':')[1]) }}"

roles/plex_extra_tasks/tasks/main2.yml

@@ -40,6 +40,55 @@
   vars:
     var_prefix: "plex"
 
+- name: Ensure transcodes folder has the correct permissions
+  ansible.builtin.file:
+    path: "{{ plex_paths_transcodes_location }}"
+    owner: "{{ user.name }}"
+    group: "{{ user.name }}"
+    mode: "0775"
+    recurse: true
+
+- name: Find external port binding for '{{ plex_docker_container }}' docker port '{{ plex_web_port }}'
+  when: plex_open_main_ports
+  block:
+    - name: Lookup host port mapped to '{{ plex_docker_container }}' docker port '{{ plex_web_port }}'
+      ansible.builtin.shell: docker port {{ plex_docker_container }} {{ plex_web_port }} 2> /dev/null | sed 's/[0-9.]*://'
+      register: plex_docker_port_lookup_cmd
+      changed_when: false
+
+    - name: Set port variable
+      ansible.builtin.set_fact:
+        plex_docker_port_lookup: "{{ (plex_docker_port_lookup_cmd.stdout | trim)
+                                  if (plex_docker_port_lookup_cmd.stdout | trim | length > 0)
+                                  else plex_web_port }}"
+
+- name: Update port in '{{ plex_paths_config_location | basename }}'
+  community.general.xml:
+    path: "{{ plex_paths_config_location }}"
+    xpath: /Preferences
+    attribute: ManualPortMappingPort
+    value: "{{ plex_docker_port_lookup | default(plex_web_port) }}"
+    state: present
+  become: true
+  become_user: "{{ user.name }}"
+
+- name: Disable Remote Access in '{{ plex_paths_config_location | basename }}'
+  community.general.xml:
+    path: "{{ plex_paths_config_location }}"
+    xpath: /Preferences
+    attribute: PublishServerOnPlexOnlineKey
+    value: "0"
+    state: present
+  become: true
+  become_user: "{{ user.name }}"
+
+- name: Reset permissions of '{{ plex_paths_config_location | basename }}'
+  ansible.builtin.file:
+    path: "{{ plex_paths_config_location }}"
+    owner: "{{ user.name }}"
+    group: "{{ user.name }}"
+    mode: "0644"
+
 - name: "Install Sub-Zero Plugin"
   ansible.builtin.include_role:
     name: sub_zero