---

- name: setup netdata docker container for system monitoring
  docker_container:
    name: netdata
    image: netdata/netdata
    restart_policy: unless-stopped
    hostname: "hevonen.servers.{{ base_domain }}"
    capabilities:
      - SYS_PTRACE
    security_opts:
      - apparmor:unconfined
    volumes:
      - /proc:/host/proc:ro
      - /sys:/host/sys:ro
      - /var/run/docker.sock:/var/run/docker.sock:ro
    networks:
      - name: external_services
    env:
      VIRTUAL_HOST : "{{ netdata.domain }}"
      LETSENCRYPT_HOST: "{{ netdata.domain }}"
      LETSENCRYPT_EMAIL: "{{ letsencrypt_email }}"
      PGID: "999"
    labels:
      com.ouroboros.enable: "true"