---
- hosts: internal-apps
  become: true
  vars_files: 
    - ./vars.yml
  tasks:
    - name: Update Packages
      ansible.builtin.dnf:
        update_cache: yes

    - name: Install Packages
      ansible.builtin.dnf:
        name:
          - vim
          - podman
          - fail2ban
          - python3-libdnf5
        state: present
    
    - name: Create directories 
      file:
        path: "{{ item }}"
        state: directory
        mode: '0755'
      loop: "{{ directories }}"

    - name: Create Jellyfin directories 
      file:
        path: "{{ item }}"
        state: directory
        mode: '0777'
      loop: "{{ directories_jellyfin }}"

    - name: Create internal podman network
      containers.podman.podman_network:
        name: npm_internal
        ip_range: 10.10.0.128/25
        subnet: 10.10.0.0/24
        gateway: 10.10.0.1
        state: present

    - name: pull images
      containers.podman.podman_image:
        name: "{{ item }}"
      loop: "{{ images }}"

    - name: Deploy Nginx Proxy Manager 
      containers.podman.podman_container:
        image: "docker.io/jc21/nginx-proxy-manager:latest"
        name: npm
        restart_policy: always
        recreate: true
        state: started
        ports:
          - "80:80"
          - "81:81"
          - "443:443"
        volumes:
          - "/opt/apps/npm:/data:z"
          - "/opt/apps/letsencrypt:/etc/letsencrypt:z"
        network:
          - npm_internal
        ip: '10.10.0.19'

    - name: Generate systemd unit for NPM
      containers.podman.podman_generate_systemd:
        name: npm
        new: true
        restart_policy: always

    - name: Enable NPM on boot
      ansible.builtin.systemd:
        name: container-npm
        enabled: yes
        daemon_reload: yes

    - name: Deploy Gitea 
      containers.podman.podman_container:
        image: docker.gitea.com/gitea:nightly
        name: gitea
        env:
          USER_UID: 1000
          USER_GID: 1000
        restart_policy: always
        recreate: true
        state: started
        volumes:
          - /opt/apps/gitea:/data:z
          - /usr/share/zoneinfo/America/Denver:/etc/timezone:ro
          - /etc/localtime:/etc/localtime:ro
        network:
          - npm_internal
        ip: '10.10.0.25'
        ports:
        #  - "3000:3000"
          - "222:22"

    - name: Generate systemd unit for Gitea
      containers.podman.podman_generate_systemd:
        name: gitea
        new: true
        restart_policy: always

    - name: Enable Gitea on boot
      ansible.builtin.systemd:
        name: container-gitea
        enabled: yes
        daemon_reload: yes

    - name: Deploy Jellyfin
      containers.podman.podman_container:
        image: lscr.io/linuxserver/jellyfin:latest
        name: jellyfin
        env:
          USER_UID: 1000
          USER_GID: 1000
          JELLYFIN_PublishedServerUrl: http://jellyfin.boxswapper.io
        restart_policy: always
        recreate: true
        state: started
        volumes:
          - /opt/apps/jellyfin/config:/config:z
          - /opt/apps/jellyfin/tvseries:/data/tvshows:z
          - /opt/apps/jellyfin/movies:/data/movies:z
          - /usr/share/zoneinfo/America/Denver:/etc/timezone:ro
          - /etc/localtime:/etc/localtime:ro
        network:
          - npm_internal
        ip: '10.10.0.30'
        # ports:
        #   - 8096:8096
      #   - 8920:8920 #optional
      #   - 7359:7359/udp #optional
      #   - 1900:1900/udp #optional

    - name: Generate systemd unit for Jellyfin
      containers.podman.podman_generate_systemd:
        name: jellyfin
        new: true
        restart_policy: always

    - name: Enable Jellyfin on boot
      ansible.builtin.systemd:
        name: container-jellyfin
        enabled: yes
        daemon_reload: yes






        


























#----N8N deployment, no GPU avail for deployment ------#

    # - name: Deploy n8n
      # containers.podman.podman_container:
      #   image: docker.n8n.io/n8nio/n8n
      #   name: n8n
      #   env:
      #     N8N_ENFORCE_SETTINGS_FILE_PERMISSIONS: true
      #     N8N_RUNNERS_ENABLED: true
      #   restart_policy: always
      #   recreate: true
      #   state: started
      #   volumes:
      #     - /opt/apps/n8n/data:/home/node/.n8n:z
      #     - /opt/apps/n8n/files:/files:z
      #     - /usr/share/zoneinfo/America/Denver:/etc/timezone:ro
      #     - /etc/localtime:/etc/localtime:ro

      #   network:
      #     - npm_internal
      #   ip: '10.10.0.35'
      # # ports:
      # #   - 5678:5678