---
# Compose and settings are managed here. The secrets and keys stay on the
# host as data, like a game world, and are covered by the restic backup:
#   state/secrets.env          ejabberd secrets
#   state/certs/server.pem     TLS certificate (asxp.io, conference., xmpp.)
#   state/apushd/              push settings and VAPID key
#   state/tackygram/{env,key}  gateway credentials and master key
# Data: volumes xmpp_database, xmpp_tackygram.
- name: Deploy XMPP
  ansible.builtin.include_role:
    name: docker_service
  vars:
    service_name: xmpp
    service_base_path: "{{ services_base_path }}/xmpp"
    service_directories:
      - { path: state, mode: "0700" }
    service_templates:
      - { src: docker-compose.yml.j2, dest: docker-compose.yml }
      - { src: settings.env.j2, dest: settings.env }
    health_check_port: 5222