Add windmill

roles/windmill/templates/worker_entrypoint.sh.j2

@@ -0,0 +1,26 @@
+#!/bin/bash
+# {{ ansible_managed }}
+_term() {
+	echo "Received SIGTERM, stopping all containers"
+	kill "$child"
+}
+
+podman system service -t 0 &
+
+podman run \
+	--rm \
+	-v /run/secrets/postgres-url:/run/secrets/postgres-url:ro \
+	-e DATABASE_URL_FILE=/run/secrets/postgres-url \
+	-e MODE=worker \
+	-e WORKER_GROUP=default \
+	-e ENABLE_UNSHARE_PID="true" \
+	-v /tmp/storage-run-1000/podman/podman.sock:/var/run/docker.sock \
+	-v /worker-logs:/tmp/windmill/logs \
+	-v /worker-dependency-cache:/tmp/windmill/cache \
+	--name worker \
+	--network host \
+	ghcr.io/windmill-labs/windmill:main &
+
+child=$!
+trap _term SIGTERM
+wait $!