cpx-ansible/roles/docker_services/tasks/services/wkd.yml

# vim: ft=yaml.ansible
---
- name: Create WKD volume directories
  ansible.builtin.file:
    path: "{{ services.wkd.volume }}/.well-known/openpgpkey/hu"
    owner: root
    mode: u=rwx,g=rx,o=rx
    state: directory

- name: Copy PGP key to WKD volume directory
  ansible.builtin.copy:
    src: wkd/6fi64ioaua1j93gkt5eow8skha8e34sy
    dest: "{{ services.wkd.volume }}/.well-known/openpgpkey/hu/6fi64ioaua1j93gkt5eow8skha8e34sy"
    owner: root
    mode: u=rw,g=r,o=r

- name: Deploy WKD Docker container
  community.docker.docker_container:
    name: wkd
    state: "{{ 'absent' if down is defined and down else 'started' }}"
    restart: "{{ restart is defined and restart }}"
    recreate: "{{ recreate is defined and recreate }}"
    image: nginx:{{ services.wkd.version }}
    restart_policy: always
    networks:
      - name: services
        aliases:
          - wkd
    volumes:
      - "{{ services.wkd.volume }}:/usr/share/nginx/html:ro"
      - "{{ base_volume }}/nginx.conf:/etc/nginx/nginx.conf:ro"