role_podman/tasks/configuration.yml

---
# tasks file for podman

- name: Activer le lingering
  ansible.builtin.command:
    cmd: "loginctl enable-linger {{ container_user }}"
    creates: /var/lib/systemd/linger/{{ container_user }}
  become: true
  loop: "{{ podman_containers }}"
  loop_control:
    label: "{{ item.name }}"
  vars:
    container_user: "podman-{{ item.user | default(item.name) }}"

- name: Créer les dossiers des volumes
  ansible.builtin.file:
    path: "{{ item.1 | split(':') | first }}"
    state: directory
    owner: "{{ container_user }}"
    group: "{{ container_user }}"
    mode: u=rwX,g=rX,o=rX
  become: true
  loop: "{{ q('ansible.builtin.subelements', podman_containers, 'volumes', {'skip_missing': True}) }}"
  loop_control:
    label: "{{ item.0.name }}"
  vars:
    container_user: "podman-{{ item.0.user | default(item.0.name) }}"

- name: Déployer les conteneurs
  containers.podman.podman_container:
    hostname: "{{ item.hostname | default(inventory_hostname) }}"
    name: "{{ item.name }}"
    image: "{{ item.image }}"
    state: quadlet
    device: "{{ item.device | default(omit) }}"
    ports: "{{ item.ports | default(omit) }}"
    volumes: "{{ item.volumes | default(omit) }}"
    userns: "{{ item.userns | default(omit) }}"
    mount: "{{ item.mount | default(omit) }}"
    publish: "{{ item.publish | default(omit) }}"
    env: "{{ item.env | default(omit) }}"
    quadlet_options: "{{ item.quadlet_options | default(omit) }}"
    sysctl: "{{ item.sysctl | default(omit) }}"
    cap_add: "{{ item.cap_add | default(omit) }}"
    recreate: true
  become: true
  become_user: "{{ container_user }}"
  register: deploy_container
  loop: "{{ podman_containers }}"
  loop_control:
    label: "{{ item.name }}"
  vars:
    container_user: "podman-{{ item.user | default(item.name) }}"

- name: Démarrer ou redémarrer le conteneur
  ansible.builtin.systemd_service:
    name: "{{ item.item.name }}.service"
    state: "{{ 'restarted' if item.changed else 'started' }}"
    daemon_reload: true
    scope: user
  become: true
  become_user: "{{ container_user }}"
  loop: "{{ deploy_container.results }}"
  loop_control:
    label: "{{ item.item.name }}"
  vars:
    container_user: "podman-{{ item.item.user | default(item.item.name) }}"

- name: Activer le service de mise à jour automatique
  ansible.builtin.systemd_service:
    name: podman-auto-update.timer
    daemon_reload: true
    enabled: true
    scope: user
  when: podman_auto_update
  become: true
  become_user: "{{ container_user }}"
  loop: "{{ deploy_container.results }}"
  loop_control:
    label: "{{ item.item.name }}"
  vars:
    container_user: "podman-{{ item.item.user | default(item.item.name) }}"