service: Add support for service postgres containers

roles/service/tasks/database.yaml

@@ -0,0 +1,34 @@
+---
+- name: Set database name
+  ansible.builtin.set_fact:
+    _service_database_name: "{{ service_name }}-{{ service_database_type }}"
+
+- name: Database container for {{ service_name }}
+  ansible.builtin.include_role:
+    name: container
+  vars:
+    container_name: "{{ service_name }}-{{ service_database_type }}" # This doesn't use _service_database_name to allow container role handlers to work
+    container_image: "docker.io/library/postgres:{{ service_postgres_tag }}"
+    container_mounts:
+      - type: volume
+        source: "{{ _service_database_name }}"
+        destination: /var/lib/postgresql/data
+    container_networks:
+      - "{{ service_name }}"
+    container_secrets:
+      - name: "{{ _service_database_name }}"
+    container_env:
+      POSTGRES_USER: "{{ service_name | replace('-', '_') }}"
+      POSTGRES_PASSWORD_FILE: "/run/secrets/{{ _service_database_name }}"
+    container_auto_update: "{{ service_auto_update }}"
+
+- name: Get database secret info
+  containers.podman.podman_secret_info:
+    name: "{{ _service_database_name }}"
+    showsecret: true
+  register: _service_database_secret
+
+- name: Set database-related variables
+  ansible.builtin.set_fact:
+    _service_database_password: "{{ _service_database_secret.secrets[0].SecretData }}"
+    _service_container_requires: "{{ _service_container_requires + [_service_database_name + '.service'] }}"