---
- name: Windmill service
  ansible.builtin.import_role:
    name: service
  vars:
    service_name: windmill
    service_container_image: ghcr.io/windmill-labs/windmill:main
    service_container_mounts:
      - type: volume
        source: worker-logs
        destination: /tmp/windmill/logs
    service_container_http_port: 8000
    service_domains:
      - "{{ windmill_domain }}"
    service_database_type: postgres
    service_container_env:
      DATABASE_URL_FILE: /run/secrets/postgres-url
      MODE: server
    service_additional_containers:
      - name: worker
        pinp: true
        mounts:
          - type: volume
            source: worker-logs
            destination: /tmp/windmill/logs
          - type: volume
            source: worker-dependency-cache
            destination: /tmp/windmill/cache
        env:
          DATABASE_URL_FILE: /run/secrets/postgres-url
          MODE: worker
          WORKER_GROUP: default
          ENABLE_UNSHARE_PID: "true"
          UNSHARE_ISOLATION_FLAGS: "--user --map-root-user --pid --fork"

      - name: worker-native
        env:
          DATABASE_URL_FILE: /run/secrets/postgres-url
          MODE: worker
          WORKER_TYPE: native
          NATIVE_MODE: "true"
          NUM_WORKERS: "8"
          SLEEP_QUEUE: "200"
      - name: lsp
        image: ghcr.io/windmill-labs/windmill-extra:latest
        secrets: []
        mounts:
          - type: volume
            source: lsp-cache
            destination: /puls/.cache
        publish_ports:
          - name: lsp
            type: socket
            container_port: 3001
        env:
          ENABLE_LSP: "true"
          ENABLE_MULTIPLAYER: "false"
          ENABLE_DEBUGGER: "false"
          WINDMILL_BASE_URL: http://windmill:8000
    service_vhost_locations:
      - path: /ws/*
        proxy_target_socket: /run/windmill-lsp-socat.sock