Silo¶

Description / name	Input element
Your domain name

Overview¶

Silo is a self-hosted media server for movies, shows, music, and books with direct play, transcoding, and optional Jellyfin-compatible client support.

Manual

Releases

Community

Deployment¶

sb install sandbox-silo

Usage¶

Visit https://silo.iYOUR_DOMAIN_NAMEi.

Configure libraries against the usual /mnt/unionfs/... paths in the admin UI.

Role Defaults¶

Variables can be customized using the Inventory. (1)

Example override
```
silo_name: "custom_value"
```
Avoid overriding variables ending in _default

When overriding variables that end in _default (like silo_docker_envs_default), you replace the entire default configuration. Future updates that add new default values will not be applied to your setup, potentially breaking functionality.

Instead, use the corresponding _custom variable (like silo_docker_envs_custom) to add your changes. Custom values are merged with defaults, ensuring you receive updates.

BasicsPostgresRedisWebDNSTraefikDockerDocker+Global Override Options

silo_name

# Type: string
silo_name: silo

silo_role_postgres_deploy

# Type: bool (true/false)
silo_role_postgres_deploy: true

silo_role_postgres_name

# Type: string
silo_role_postgres_name: "{{ silo_name }}-postgres"

silo_role_postgres_user

# If empty it will fall back to the postgres role default.
# Type: string
silo_role_postgres_user: ""

silo_role_postgres_password

# If empty it will fall back to the postgres role default.
# Type: string
silo_role_postgres_password: ""

silo_role_postgres_docker_env_db

# Type: string
silo_role_postgres_docker_env_db: "silo"

silo_role_postgres_docker_image_repo

# Type: string
silo_role_postgres_docker_image_repo: "pgvector/pgvector"

silo_role_postgres_docker_image_tag

# Type: string
silo_role_postgres_docker_image_tag: "pg18"

silo_role_postgres_docker_shm_size

# Type: string
silo_role_postgres_docker_shm_size: "8G"

silo_role_postgres_docker_healthcheck

# Type: dict
silo_role_postgres_docker_healthcheck:
  test: ["CMD-SHELL", "pg_isready -d {{ lookup('role_var', '_postgres_docker_env_db', role='silo') }} -U {{ lookup('role_var', '_postgres_user', role='silo') if (lookup('role_var', '_postgres_user', role='silo') | length > 0) else lookup('role_var', '_docker_env_user', role='postgres') }}"]
  start_period: 20s
  interval: 30s
  retries: 5
  timeout: 5s

silo_role_postgres_paths_folder

# Type: string
silo_role_postgres_paths_folder: "{{ silo_name }}"

silo_role_postgres_paths_location

# Type: string
silo_role_postgres_paths_location: "{{ server_appdata_path }}/{{ silo_role_postgres_paths_folder }}/postgres"

silo_role_redis_name

# Type: string
silo_role_redis_name: "{{ silo_name }}-redis"

silo_role_redis_docker_image_tag

# Type: string
silo_role_redis_docker_image_tag: "alpine"

silo_role_redis_paths_folder

# Type: string
silo_role_redis_paths_folder: "{{ silo_name }}"

silo_role_redis_paths_location

# Type: string
silo_role_redis_paths_location: "{{ server_appdata_path }}/{{ silo_role_redis_paths_folder }}/redis"

silo_role_web_subdomain

# Type: string
silo_role_web_subdomain: "{{ silo_name }}"

silo_role_web_domain

# Type: string
silo_role_web_domain: "{{ user.domain }}"

silo_role_web_port

# Type: string
silo_role_web_port: "8080"

silo_role_web_url

# Type: string
silo_role_web_url: "{{ 'https://' + (lookup('role_var', '_web_subdomain', role='silo') + '.' + lookup('role_var', '_web_domain', role='silo')
                    if (lookup('role_var', '_web_subdomain', role='silo') | length > 0)
                    else lookup('role_var', '_web_domain', role='silo')) }}"

silo_role_dns_record

# Type: string
silo_role_dns_record: "{{ lookup('role_var', '_web_subdomain', role='silo') }}"

silo_role_dns_zone

# Type: string
silo_role_dns_zone: "{{ lookup('role_var', '_web_domain', role='silo') }}"

silo_role_dns_proxy

# Type: bool (true/false)
silo_role_dns_proxy: "{{ dns_proxied }}"

silo_role_traefik_sso_middleware

# Type: string
silo_role_traefik_sso_middleware: ""

silo_role_traefik_middleware_default

# Type: string
silo_role_traefik_middleware_default: "{{ traefik_default_middleware }}"

silo_role_traefik_middleware_custom

# Type: string
silo_role_traefik_middleware_custom: ""

silo_role_traefik_certresolver

# Type: string
silo_role_traefik_certresolver: "{{ traefik_default_certresolver }}"

silo_role_traefik_enabled

# Type: bool (true/false)
silo_role_traefik_enabled: true

silo_role_traefik_api_enabled

# Type: bool (true/false)
silo_role_traefik_api_enabled: false

silo_role_traefik_api_endpoint

# Type: string
silo_role_traefik_api_endpoint: ""

silo_role_traefik_gzip_enabled

# Type: bool (true/false)
silo_role_traefik_gzip_enabled: false

Container

silo_role_docker_container

# Type: string
silo_role_docker_container: "{{ silo_name }}"

Image

silo_role_docker_image_pull

# Type: bool (true/false)
silo_role_docker_image_pull: true

silo_role_docker_image_repo

# Type: string
silo_role_docker_image_repo: "ghcr.io/silo-server/silo-server"

silo_role_docker_image_tag

# Type: string
silo_role_docker_image_tag: "latest"

silo_role_docker_image

# Type: string
silo_role_docker_image: "{{ lookup('role_var', '_docker_image_repo', role='silo') }}:{{ lookup('role_var', '_docker_image_tag', role='silo') }}"

Envs

silo_role_docker_envs_default

# Type: dict
silo_role_docker_envs_default:
  HOME: "/tmp"
  SILO_PUBLIC_URL: "{{ lookup('role_var', '_web_url', role='silo') }}"
  MODE: "integrated"
  SECRET_KEY: "{{ silo_saltbox_facts.facts.secret_key }}"
  DATABASE_URL: "postgres://{{ lookup('role_var', '_postgres_user', role='silo')
                        if (lookup('role_var', '_postgres_user', role='silo') | length > 0)
                        else lookup('role_var', '_docker_env_user', role='postgres') }}:{{ lookup('role_var', '_postgres_password', role='silo')
                        if (lookup('role_var', '_postgres_password', role='silo') | length > 0)
                        else lookup('role_var', '_docker_env_password', role='postgres') }}@{{ lookup('role_var', '_postgres_name', role='silo') }}:5432/{{ lookup('role_var', '_postgres_docker_env_db', role='silo') }}?sslmode=disable"
  REDIS_URL: "redis://{{ lookup('role_var', '_redis_name', role='silo') }}:6379"
  SILO_PLUGIN_CACHE_DIR: "/var/lib/silo/plugins"
  POSTGRES_TUNE: "auto"
  TZ: "{{ tz }}"

silo_role_docker_envs_custom

# Type: dict
silo_role_docker_envs_custom: {}

Volumes

silo_role_docker_volumes_default

# Type: list
silo_role_docker_volumes_default:
  - "{{ silo_role_paths_location }}/plugins:/var/lib/silo/plugins"
  - "{{ silo_role_paths_location }}/compat:/var/lib/silo/compat"
  - "{{ silo_role_paths_transcodes_location }}:/tmp/silo-transcode"
  - "{{ silo_role_paths_location }}/audiobook-covers:/var/lib/silo/audiobook-covers"
  - "{{ silo_role_paths_location }}/catalog-seeds:/catalog-seeds:ro"
  - "/proc/meminfo:/host/proc/meminfo:ro"

silo_role_docker_volumes_custom

# Type: list
silo_role_docker_volumes_custom: []

Hostname

silo_role_docker_hostname

# Type: string
silo_role_docker_hostname: "{{ silo_name }}"

Networks

silo_role_docker_networks_alias

# Type: string
silo_role_docker_networks_alias: "{{ silo_name }}"

silo_role_docker_networks_default

# Type: list
silo_role_docker_networks_default: []

silo_role_docker_networks_custom

# Type: list
silo_role_docker_networks_custom: []

Restart Policy

silo_role_docker_restart_policy

# Type: string
silo_role_docker_restart_policy: unless-stopped

Groups

silo_role_docker_groups

# Type: list
silo_role_docker_groups:
  - "{{ vgid }}"
  - "{{ rgid }}"

User

silo_role_docker_user

# Type: string
silo_role_docker_user: "{{ uid }}:{{ gid }}"

Dependencies

silo_role_depends_on

# Type: string
silo_role_depends_on: "{{ lookup('role_var', '_postgres_name', role='silo') }},{{ lookup('role_var', '_redis_name', role='silo') }}"

silo_role_depends_on_delay

# Type: string (quoted number)
silo_role_depends_on_delay: "0"

silo_role_depends_on_healthchecks

# Type: string ("true"/"false")
silo_role_depends_on_healthchecks: "false"

The following advanced options are available via create_docker_container but are not defined in the role. See: docker_container module

Resource Limits

silo_role_docker_blkio_weight

# Type: int
silo_role_docker_blkio_weight:

silo_role_docker_cpu_period

# Type: int
silo_role_docker_cpu_period:

silo_role_docker_cpu_quota

# Type: int
silo_role_docker_cpu_quota:

silo_role_docker_cpu_shares

# Type: int
silo_role_docker_cpu_shares:

silo_role_docker_cpus

# Type: string
silo_role_docker_cpus:

silo_role_docker_cpuset_cpus

# Type: string
silo_role_docker_cpuset_cpus:

silo_role_docker_cpuset_mems

# Type: string
silo_role_docker_cpuset_mems:

silo_role_docker_kernel_memory

# Type: string
silo_role_docker_kernel_memory:

silo_role_docker_memory

# Type: string
silo_role_docker_memory:

silo_role_docker_memory_reservation

# Type: string
silo_role_docker_memory_reservation:

silo_role_docker_memory_swap

# Type: string
silo_role_docker_memory_swap:

silo_role_docker_memory_swappiness

# Type: int
silo_role_docker_memory_swappiness:

silo_role_docker_shm_size

# Type: string
silo_role_docker_shm_size:

Security & Devices

silo_role_docker_cap_drop

# Type: list
silo_role_docker_cap_drop:

silo_role_docker_cgroupns_mode

# Type: string
silo_role_docker_cgroupns_mode:

silo_role_docker_device_cgroup_rules

# Type: list
silo_role_docker_device_cgroup_rules:

silo_role_docker_device_read_bps

# Type: list
silo_role_docker_device_read_bps:

silo_role_docker_device_read_iops

# Type: list
silo_role_docker_device_read_iops:

silo_role_docker_device_requests

# Type: list
silo_role_docker_device_requests:

silo_role_docker_device_write_bps

# Type: list
silo_role_docker_device_write_bps:

silo_role_docker_device_write_iops

# Type: list
silo_role_docker_device_write_iops:

silo_role_docker_devices

# Type: list
silo_role_docker_devices:

silo_role_docker_privileged

# Type: bool (true/false)
silo_role_docker_privileged:

silo_role_docker_security_opts

# Type: list
silo_role_docker_security_opts:

silo_role_docker_userns_mode

# Type: string
silo_role_docker_userns_mode:

Networking

silo_role_docker_dns_opts

# Type: list
silo_role_docker_dns_opts:

silo_role_docker_dns_search_domains

# Type: list
silo_role_docker_dns_search_domains:

silo_role_docker_dns_servers

# Type: list
silo_role_docker_dns_servers:

silo_role_docker_domainname

# Type: string
silo_role_docker_domainname:

silo_role_docker_exposed_ports

# Type: list
silo_role_docker_exposed_ports:

silo_role_docker_hosts

# Type: dict
silo_role_docker_hosts:

silo_role_docker_hosts_use_common

# Type: bool (true/false)
silo_role_docker_hosts_use_common:

silo_role_docker_ipc_mode

# Type: string
silo_role_docker_ipc_mode:

silo_role_docker_links

# Type: list
silo_role_docker_links:

silo_role_docker_network_mode

# Type: string
silo_role_docker_network_mode:

silo_role_docker_pid_mode

# Type: string
silo_role_docker_pid_mode:

silo_role_docker_ports

# Type: list
silo_role_docker_ports:

silo_role_docker_uts

# Type: string
silo_role_docker_uts:

Storage

silo_role_docker_keep_volumes

# Type: bool (true/false)
silo_role_docker_keep_volumes:

silo_role_docker_mounts

# Type: list
silo_role_docker_mounts:

silo_role_docker_storage_opts

# Type: dict
silo_role_docker_storage_opts:

silo_role_docker_tmpfs

# Type: list
silo_role_docker_tmpfs:

silo_role_docker_volume_driver

# Type: string
silo_role_docker_volume_driver:

silo_role_docker_volumes_from

# Type: list
silo_role_docker_volumes_from:

silo_role_docker_volumes_global

# Type: bool (true/false)
silo_role_docker_volumes_global:

silo_role_docker_working_dir

# Type: string
silo_role_docker_working_dir:

Monitoring & Lifecycle

silo_role_docker_auto_remove

# Type: bool (true/false)
silo_role_docker_auto_remove:

silo_role_docker_cleanup

# Type: bool (true/false)
silo_role_docker_cleanup:

silo_role_docker_force_kill

# Type: string
silo_role_docker_force_kill:

silo_role_docker_healthcheck

# Type: dict
silo_role_docker_healthcheck:

silo_role_docker_healthy_wait_timeout

# Type: int
silo_role_docker_healthy_wait_timeout:

silo_role_docker_init

# Type: bool (true/false)
silo_role_docker_init:

silo_role_docker_kill_signal

# Type: string
silo_role_docker_kill_signal:

silo_role_docker_log_driver

# Type: string
silo_role_docker_log_driver:

silo_role_docker_log_options

# Type: dict
silo_role_docker_log_options:

silo_role_docker_oom_killer

# Type: bool (true/false)
silo_role_docker_oom_killer:

silo_role_docker_oom_score_adj

# Type: int
silo_role_docker_oom_score_adj:

silo_role_docker_output_logs

# Type: bool (true/false)
silo_role_docker_output_logs:

silo_role_docker_paused

# Type: bool (true/false)
silo_role_docker_paused:

silo_role_docker_recreate

# Type: bool (true/false)
silo_role_docker_recreate:

silo_role_docker_restart_retries

# Type: int
silo_role_docker_restart_retries:

silo_role_docker_stop_signal

# Type: string
silo_role_docker_stop_signal:

silo_role_docker_stop_timeout

# Type: int
silo_role_docker_stop_timeout:

Other Options

silo_role_docker_capabilities

# Type: list
silo_role_docker_capabilities:

silo_role_docker_cgroup_parent

# Type: string
silo_role_docker_cgroup_parent:

silo_role_docker_commands

# Type: list
silo_role_docker_commands:

silo_role_docker_create_timeout

# Type: int
silo_role_docker_create_timeout:

silo_role_docker_entrypoint

# Type: string
silo_role_docker_entrypoint:

silo_role_docker_env_file

# Type: string
silo_role_docker_env_file:

silo_role_docker_labels

# Type: dict
silo_role_docker_labels:

silo_role_docker_labels_use_common

# Type: bool (true/false)
silo_role_docker_labels_use_common:

silo_role_docker_read_only

# Type: bool (true/false)
silo_role_docker_read_only:

silo_role_docker_runtime

# Type: string
silo_role_docker_runtime:

silo_role_docker_sysctls

# Type: list
silo_role_docker_sysctls:

silo_role_docker_ulimits

# Type: list
silo_role_docker_ulimits:

silo_role_autoheal_enabled

# Enable or disable Autoheal monitoring for the container created when deploying
# Type: bool (true/false)
silo_role_autoheal_enabled: true

silo_role_diun_enabled

# Enable or disable Diun update notifications for the container created when deploying
# Type: bool (true/false)
silo_role_diun_enabled: true

silo_role_dns_enabled

# Enable or disable automatic DNS record creation for the container
# Type: bool (true/false)
silo_role_dns_enabled: true

silo_role_docker_controller

# Enable or disable Saltbox Docker Controller management for the container
# Type: bool (true/false)
silo_role_docker_controller: true

silo_role_docker_networks_alias_custom

# Type: list
silo_role_docker_networks_alias_custom:

silo_role_docker_volumes_download

# Type: bool (true/false)
silo_role_docker_volumes_download:

silo_role_themepark_addons

# Type: string
silo_role_themepark_addons:

silo_role_themepark_app

# Type: string
silo_role_themepark_app:

silo_role_themepark_theme

# Type: string
silo_role_themepark_theme:

silo_role_traefik_api_middleware

# Type: string
silo_role_traefik_api_middleware:

silo_role_traefik_api_middleware_http

# Type: string
silo_role_traefik_api_middleware_http:

silo_role_traefik_autodetect_enabled

# Enable Traefik autodetect middleware for the container
# Type: bool (true/false)
silo_role_traefik_autodetect_enabled: false

silo_role_traefik_crowdsec_enabled

# Enable CrowdSec middleware for the container
# Type: bool (true/false)
silo_role_traefik_crowdsec_enabled: false

silo_role_traefik_error_pages_enabled

# Enable custom error pages middleware for the container
# Type: bool (true/false)
silo_role_traefik_error_pages_enabled: false

silo_role_traefik_middleware_http

# Type: string
silo_role_traefik_middleware_http:

silo_role_traefik_middleware_http_api_insecure

# Type: bool (true/false)
silo_role_traefik_middleware_http_api_insecure:

silo_role_traefik_middleware_http_insecure

# Type: bool (true/false)
silo_role_traefik_middleware_http_insecure:

silo_role_traefik_priority

# Type: string
silo_role_traefik_priority:

silo_role_traefik_robot_enabled

# Enable robots.txt middleware for the container
# Type: bool (true/false)
silo_role_traefik_robot_enabled: true

silo_role_traefik_tailscale_enabled

# Enable Tailscale-specific Traefik configuration for the container
# Type: bool (true/false)
silo_role_traefik_tailscale_enabled: false

silo_role_traefik_wildcard_enabled

# Enable wildcard certificate for the container
# Type: bool (true/false)
silo_role_traefik_wildcard_enabled: true

silo_role_web_api_http_port

# Type: string (quoted number)
silo_role_web_api_http_port:

silo_role_web_api_http_scheme

# Type: string ("http"/"https")
silo_role_web_api_http_scheme:

silo_role_web_api_http_serverstransport

# Type: dict/omit
silo_role_web_api_http_serverstransport:

silo_role_web_api_port

# Type: string (quoted number)
silo_role_web_api_port:

silo_role_web_api_scheme

# Type: string ("http"/"https")
silo_role_web_api_scheme:

silo_role_web_api_serverstransport

# Type: dict/omit
silo_role_web_api_serverstransport:

silo_role_web_fqdn_override

# Override the Traefik fully qualified domain name (FQDN) for the container
# Type: list
silo_role_web_fqdn_override:

Example Override

silo_role_web_fqdn_override:
  - "{{ traefik_host }}"
  - "silo2.{{ user.domain }}"
  - "silo.otherdomain.tld"

Note: Include {{ traefik_host }} to preserve the default FQDN alongside your custom entries

silo_role_web_host_override

# Override the Traefik web host configuration for the container
# Type: string
silo_role_web_host_override:

Example Override

silo_role_web_host_override: "Host(`{{ traefik_host }}`) || Host(`{{ 'silo2.' + user.domain }}`)"

Note: Use {{ traefik_host }} to include the default host configuration in your custom rule

silo_role_web_http_port

# Type: string (quoted number)
silo_role_web_http_port:

silo_role_web_http_scheme

# Type: string ("http"/"https")
silo_role_web_http_scheme:

silo_role_web_http_serverstransport

# Type: dict/omit
silo_role_web_http_serverstransport:

silo_role_web_scheme

# URL scheme to use for web access to the container
# Type: string ("http"/"https")
silo_role_web_scheme:

silo_role_web_serverstransport

# Type: dict/omit
silo_role_web_serverstransport: