---
- name: Database container for {{ service_name }}
  ansible.builtin.import_role:
    name: container
  vars:
    container_name: "{{ service_name }}-{{ service_database_type }}" # This doesn't use _service_database_name to allow container role handlers to work
    container_image: "{{ service_postgres_image }}:{{ service_postgres_tag }}"
    container_mounts:
      - type: volume
        source: "{{ _service_database_name }}"
        destination: /var/lib/postgresql/data
    container_networks: "{{ _service_database_networks }}"
    container_ip: >-
      {{ service_container_ip | ansible.utils.ipmath(1) if _service_static_ip else '' }}
    container_secrets:
      - name: "{{ _service_database_name }}"
        target: "{{ service_database_type }}"
    container_env:
      POSTGRES_USER: "{{ service_name | replace('-', '_') }}"
      POSTGRES_PASSWORD_FILE: "/run/secrets/{{ service_database_type }}"
      POSTGRES_INITDB_ARGS: "--encoding=UTF-8 --lc-collate=C --lc-ctype=C"
    container_auto_update: "{{ service_auto_update }}"