---
- name: TRAEFIK | Copy Stack Files
  copy:
    directory_mode: true
    src: traefik
    dest: "{{ ceph_volume }}"
  run_once: true
  delegate_to: "{{ groups['managers'][0] }}"

- name: TRAEFIK | Generate Compose file
  ansible.builtin.template:
    src: docker-compose.yml.j2
    dest: "{{ data_dir }}/traefik.yml"
    mode: 0644
  run_once: true
  delegate_to: "{{ groups['managers'][0] }}"

- name: TRAEFIK | Ensure permissions on acme.json
  ansible.builtin.file:
    path: "{{ data_dir }}/data/acme.json"
    mode: '0600'
  run_once: true
  delegate_to: "{{ groups['managers'][0] }}"

- name: TRAEFIK | traefik_public Netzwerk erstellen
  community.docker.docker_network:
    name: traefik_public
    driver: overlay
    state: present
    attachable: yes
    ipam_config:
      - subnet: '172.16.200.0/24'
        gateway: '172.16.200.1'
  run_once: true
  delegate_to: "{{ groups['managers'][0] }}"

- name: TRAEFIK | Deploy app stack
  community.docker.docker_stack:
    state: present
    name: traefik
    compose:
      - "{{ data_dir }}/traefik.yml"
  delegate_to: "{{ groups['managers'][0] }}"
  run_once: true