---
- name: Authentik container
  ansible.builtin.include_role:
    name: service
  vars:
    docker_service: authentik
    docker_image: "ghcr.io/goauthentik/server:{{ authentik_tag }}"
    docker_command:
      - server
    docker_image_http_port: 9000
    docker_database: postgres
    docker_additional_services:
      - redis
    docker_env: "{{ authentik_common_env | combine(authentik_env) }}"
    docker_mounts: "{{ _authentik_mounts }}"

- name: Authentik worker container
  ansible.builtin.include_role:
    name: service
  vars:
    docker_namespace: authentik
    docker_service: worker
    docker_image: "ghcr.io/goauthentik/server:{{ authentik_tag }}"
    docker_command:
      - worker
    reverse_proxy_type: none
    docker_env: "{{ authentik_common_env | combine(authentik_env) }}"
    docker_mounts: "{{ _authentik_mounts }}"