# vim: ft=yaml.ansible
---
- name: setup vhs.data.coop website with unipi
  docker_container:
    name: vhs.data.coop_website
    image: docker.data.coop/unipi:{{ services.vhs_website.version }}
    restart_policy: unless-stopped
    purge_networks: yes
    networks:
      - name: external_services
    env:
      VIRTUAL_HOST: "{{ services.vhs_website.domain }}"
      LETSENCRYPT_HOST: "{{ services.vhs_website.domain }}"
      LETSENCRYPT_EMAIL: "{{ letsencrypt_email }}"
    command: "--remote=https://git.data.coop/vhs.data.coop/website.git#main"
    capabilities:
      - NET_ADMIN
    devices:
      - "/dev/net/tun"