---
- name: Nextcloud service
  ansible.builtin.import_role:
    name: service
  vars:
    service_name: nextcloud
    service_container_image: docker.io/library/nextcloud:{{ nextcloud_tag }}
    service_container_http_port: 80
    service_domains: "{{ nextcloud_domains }}"
    service_database_type: postgres
    service_redis: true
    service_container_mounts:
      - type: volume
        source: data
        destination: /var/www/html
    service_container_secrets:
      - name: admin-password
        value: "{{ nextcloud_admin_password }}"
      - name: harp-shared-key
    service_container_env:
      POSTGRES_HOST: postgres
      POSTGRES_DB: nextcloud
      POSTGRES_USER: nextcloud
      POSTGRES_PASSWORD_FILE: /run/secrets/postgres
      REDIS_HOST: redis
      TRUSTED_PROXIES: 10.0.0.0/8
      NEXTCLOUD_TRUSTED_DOMAINS: "{{ nextcloud_domains | join(' ') }}"
      NEXTCLOUD_ADMIN_USER: admin
      NEXTCLOUD_ADMIN_PASSWORD_FILE: /run/secrets/admin-password
    service_additional_containers: "{{ _nextcloud_additional_containers }}"
    service_vhost_locations: "{{ _nextcloud_vhost_locations }}"