# vim: ft=yaml.ansible
---
- name: setup fedi.dk website with unipi
  docker_container:
    name: fedi.dk_website
    image: docker.data.coop/unipi:{{ services.fedi_dk_website.version }}
    restart_policy: unless-stopped
    purge_networks: yes
    networks:
      - name: external_services
    env:
      VIRTUAL_HOST: "{{ services.fedi_dk_website.domain }}"
      LETSENCRYPT_HOST: "{{ services.fedi_dk_website.domain }}"
      LETSENCRYPT_EMAIL: "{{ letsencrypt_email }}"
    command: "--remote=https://git.data.coop/fedi.dk/website.git#main"
    capabilities:
      - NET_ADMIN
    devices:
      - "/dev/net/tun"