---
- name: Create Tinyauth Docker Container
  docker_container:
    name: tinyauth
    image: ghcr.io/steveiliop56/tinyauth:v3
    restart_policy: unless-stopped
    recreate: true
    networks:
      - name: homelab
    env:
      USERS: "{{ TINYAUTH_USERS }}"
      SECRET: "{{ TINYAUTH_SECRET }}"
      APP_URL: "{{ TINYAUTH_APP_URL }}"
      GENERIC_CLIENT_ID: "{{ TINYAUTH_GENERIC_CLIENT_ID }}"
      GENERIC_CLIENT_SECRET: "{{ TINYAUTH_GENERIC_CLIENT_SECRET }}"
      GENERIC_AUTH_URL: "{{ TINYAUTH_GENERIC_AUTH_URL }}"
      GENERIC_TOKEN_URL: "{{ TINYAUTH_GENERIC_TOKEN_URL }}"
      GENERIC_USER_URL: "{{ TINYAUTH_GENERIC_USER_URL }}"
      GENERIC_SCOPES: "{{ TINYAUTH_GENERIC_SCOPES }}"
      GENERIC_NAME: "{{ TINYAUTH_GENERIC_NAME }}"
      OAUTH_WHITELIST: "{{ TINYAUTH_OAUTH_WHITELIST }}"
      APP_TITLE: "{{ TINYAUTH_APP_TITLE }}"
      BACKGROUND_IMAGE: "{{ TINYAUTH_BACKGROUND_IMAGE }}"
    labels:
      traefik.enable: "true"
      traefik.http.routers.tinyauth.rule: Host(`auth.fntz.net`)
      traefik.http.routers.tinyauth.entrypoints: webSecure
      traefik.http.routers.tinyauth.tls.certresolver: letsencrypt
      traefik.http.middlewares.tinyauth.forwardauth.address: http://tinyauth:3000/api/auth/traefik