---

- name: run membersystem containers
  community.docker.docker_compose:
    project_name: member.data.coop
    pull: true
    definition:
      version: '3'
      services:
        backend:
          image: docker.data.coop/membersystem:latest
          restart: always
          user: $UID:$GID
          tty: true
          depends_on:
            - postgres
          networks:
            - membersystem
            - external_services
            - postfix
          environment:
            SECRET_KEY: '{{ membersystem_secrets.secret_key }}'
            DATABASE_URL: postgres://postgres:{{ postgres_passwords.membersystem
              }}@postgres:5432/postgres
            POSTGRES_HOST: postgres
            POSTGRES_PORT: 5432
            EMAIL_BACKEND: django.core.mail.backends.smtp.EmailBackend
            EMAIL_URL: smtp://noop@{{ smtp_host }}:{{ smtp_port }}
            VIRTUAL_HOST: '{{ services.membersystem.domain }}'
            VIRTUAL_PORT: '8000'
            LETSENCRYPT_HOST: '{{ services.membersystem.domain }}'
            LETSENCRYPT_EMAIL: '{{ letsencrypt_email }}'
            ALLOWED_HOSTS: '{{ services.membersystem.domain }}'
            CSRF_TRUSTED_ORIGINS: https://{{ services.membersystem.domain }}
            DJANGO_ADMINS: '{{ services.membersystem.django_admins }}'
            DEFAULT_FROM_EMAIL: noreply@{{ services.membersystem.domain }}
          labels:
            com.centurylinklabs.watchtower.enable: 'true'

        postgres:
          image: postgres:13-alpine
          restart: always
          volumes:
            - '{{ volume_root_folder }}/membersystem/postgres/data:/var/lib/postgresql/data'
          networks:
            - membersystem
          environment:
            POSTGRES_PASSWORD: '{{ postgres_passwords.membersystem }}'

      networks:
        membersystem:
        external_services:
          external: true
        postfix:
          external: true