---
- name: Create wallabag
  community.docker.docker_container:
    name: wallabag
    detach: true
    image: copyrights/wallabag
    # pull: true
    labels:
      com.centurylinklabs.watchtower.enable: 'true'
      traefik.enable: "true"
      traefik.http.routers.wallabag.entrypoints: "http"
      traefik.http.routers.wallabag.rule: "Host(`{{ wallabag_domain }}`)"
      traefik.http.middlewares.wallabag-https-redirect.redirectscheme.scheme: "https"
      traefik.http.routers.wallabag.middlewares: "wallabag-https-redirect"
      traefik.http.routers.wallabag-secure.entrypoints: "https"
      traefik.http.routers.wallabag-secure.rule: "Host(`{{ wallabag_domain }}`)"
      traefik.http.routers.wallabag-secure.tls: "true"
      traefik.http.routers.wallabag-secure.tls.certresolver: "http"
      # traefik.http.routers.wallabag-secure.service: "wallabag"
      # traefik.http.services.wallabag.loadbalancer.server.port: "80"
      traefik.docker.network: "webnet"
      # traefik.backend.healthcheck.path: "/health"

    networks:
      - name: webnet
    network_mode: default
    recreate: "{{ force_recreate | default(omit) }}"
    comparisons:
      image: strict
      env: strict
      volumes: strict
    restart_policy: always
    state: started
    volumes:
      - '{{ wallabag_data_volume }}:/var/www/wallabag/data'
      - '{{ wallabag_images_volume }}:/var/www/wallabag/web/assets/images'
    env:
      VIRTUAL_HOST: "{{ wallabag_domain }}"
      LETSENCRYPT_HOST: "{{ wallabag_domain }}"
      LETSENCRYPT_EMAIL: "{{ letsencrypt_mail }}"
      SYMFONY__ENV__SECRET: "{{ wallabag_secret }}"
      SYMFONY__ENV__FROM_EMAIL: "{{ wallabag_email }}"
      SYMFONY__ENV__FOSUSER_CONFIRMATION: 'false'
      SYMFONY__ENV__DOMAIN_NAME: "https://{{ wallabag_domain }}"
  become: true
  retries: 3
  delay: 60
  until: current_task is not failed
  register: current_task