Make socat its own role

roles/socat/tasks/main.yaml

@@ -0,0 +1,28 @@
+---
+- name: Socat socket for {{ socat_service_name }}
+  ansible.builtin.template:
+    src: socat.socket.j2
+    dest: /etc/systemd/system/{{ socat_service_name }}-socat.socket
+    mode: "0644"
+  notify:
+    - Reload systemd daemon
+    - Restart socat socket for {{ socat_service_name }}
+
+- name: Socat container for {{ socat_service_name }}
+  ansible.builtin.import_role:
+    name: container
+  vars:
+    container_name: "{{ socat_service_name }}-socat"
+    container_image: "docker.io/alpine/socat:latest"
+    container_command:
+      - "ACCEPT-FD:3,fork"
+      - "TCP:{{ socat_target_container }}:{{ socat_target_http_port }}"
+    container_user: nobody
+    container_networks:
+      - "{{ socat_service_name }}-socat"
+    container_ip: "{{ socat_container_ip }}"
+    container_requires:
+      - "{{ socat_service_name }}-socat.socket"
+      - "{{ socat_target_container }}.service"
+    container_auto_start: false
+    container_auto_update: "{{ socat_auto_update }}"