---
- name: Deploy Romm
  include_role:
    name: docker
  vars:
    name: romm
    directories:
      - "{{ data_dir }}/romm"
      - "{{ data_dir }}/romm/igdb"
      - "{{ data_dir }}/romm/assets"
      - "{{ data_dir }}/romm/config"
    networks:
      - name: homelab
    volumes:
      - "{{ data_dir }}/romm/igdb:/romm/resources"
      - "{{ data_dir }}/romm/redis:/redis-data"
      - "{{ data_dir }}/romm/assets:/romm/assets"
      - "{{ data_dir }}/romm/config:/romm/config"
      - "{{ ROMM_LIBRARY_PATH }}:/romm/library"
    env:
      DB_HOST: 172.16.0.44
      DB_NAME: romm
      DB_USER: romm
      DB_PASSWD: romm
      ROMM_AUTH_SECRET_KEY: "{{ ROMM_AUTH_SECRET_KEY }}"
      IGDB_CLIENT_ID: "{{ ROMM_IGDB_CLIENT_ID }}"
      IGDB_CLIENT_SECRET: "{{ ROMM_IGDB_CLIENT_SECRET }}"
      OIDC_ENABLED: "{{ ROMM_OIDC_ENABLED }}"
      OIDC_PROVIDER: "{{ ROMM_OIDC_PROVIDER }}"
      OIDC_CLIENT_ID: "{{ ROMM_OIDC_CLIENT_ID }}"
      OIDC_CLIENT_SECRET: "{{ ROMM_OIDC_CLIENT_SECRET }}"
      OIDC_REDIRECT_URI: "{{ ROMM_OIDC_REDIRECT_URL }}"
      OIDC_SERVER_APPLICATION_URL: "{{ ROMM_SERVER_APPLICATION_URL }}"
    labels:
      traefik.enable: "true"
      traefik.http.routers.emu.rule: Host(`emu.fntz.net`)
      traefik.http.routers.emu.entrypoints: webSecure
      traefik.http.routers.emu.tls.certresolver: letsencrypt
      traefik.http.services.emu.loadbalancer.server.port: "8080"