---
- name: Deploy Kan.bn app
  hosts: apps
  become: true
  roles:
    - role: app/database
      vars:
        app_name: kan
  tasks:
    - name: Create kan-web container with correct ports
      community.docker.docker_container:
        name: kan-web
        image: ghcr.io/kanbn/kan:latest
        pull: true
        state: started
        restart_policy: unless-stopped
        ports:
          - "7070:3000"
        env:
          NEXT_PUBLIC_BASE_URL: "https://tasks.thegrind.dev"
          BETTER_AUTH_SECRET:  "your_auth_secret"
          POSTGRES_URL:        "postgresql://kan:password@10.89.0.102:5432/kan"
          NEXT_PUBLIC_ALLOW_CREDENTIALS: "true"