- name: Create app DB
  ansible.builtin.include_role:
    role: app/database
  vars:
    app_name: "linkwarden"

- name: Set up container data folder
  ansible.builtin.include_role:
    role: docker/container-data
  vars:
    dir_name: "linkwarden"

- name: Deploy linkwarden container
  community.docker.docker_container:
    name: linkwarden
    image: ghcr.io/linkwarden/linkwarden:latest
    restart_policy: always
    state: started
    restart: true
    env:
      DATABASE_URL: "postgresql://linkwarden:password@{{ pg_host }}:{{ pg_port }}/linkwarden"
      NEXT_PUBLIC_KEYCLOAK_ENABLED: "true"
      KEYCLOAK_ISSUER: "https://auth.thegrind.dev"
      KEYCLOAK_CLIENT_ID: "{{ linkwarden.authentik_client_id }}"
      KEYCLOAK_CLIENT_SECRET: "{{ linkwarden.authentik_client_secret }}"
      KEYCLOAK_CUSTOM_NAME: "BlinkerAuth"
      NEXT_PUBLIC_DISABLE_REGISTRATION: "true"
      NEXT_PUBLIC_CREDENTIALS_ENABLED: "false"
      NEXTAUTH_SECRET: "{{ linkwarden.nextauth_secret }}"
      NEXTAUTH_URL: "{{ url }}/api/v1/auth"
    ports:
      - "{{ port }}:3000"
    volumes:
      - "{{ container_data_base_path }}/linkwarden:/data/data"