---
- name: Docker apps
  hosts: tamriel
  remote_user: ansible_worker
  tasks:
  - name: Synchronize docker-compose files
    synchronize:
      src: composer/
      dest: composer
  - name: counter app
    docker_service:
      project_src: composer/app
  - name: nginx
    docker_service:
      project_src: composer/nginx
  - name: gitea
    docker_service:
      project_src: composer/gitea
  - name: grafana
    docker_service:
      project_name: grafana
      definition:
        version: '2'
        volumes:
          grafana-storage:
            external:
              name: grafana_storage
        services:
          grafana:
            image: grafana/grafana
            ports:
            - "127.0.0.1:5002:3000"
            environment:
            - GF_SERVER_ROOT_URL=http://grafana.dybiec.info
            - GF_SECURITY_ADMIN_PASSWORD=very_secret
            volumes:
            - "grafana-storage:/var/lib/grafana"
            restart: always
          prometheus:
            image: prom/prometheus
            expose: [9090]
            extra_hosts:
            - "dockerhost:172.17.0.1"
            volumes:
              - "~/composer/monitoring/prometheus:/etc/prometheus/:ro"
            restart: always
          cadvisor:
            image: google/cadvisor
            expose: [8080]
            volumes:
              - "/:/rootfs:ro"
              - "/var/run:/var/run:ro"
              - "/sys:/sys:ro"
              - "/var/lib/docker:/var/lib/docker:ro"
              - "/dev/disk:/dev/disk:ro"
            restart: always
  - name: registry
    docker_service:
      project_src: composer/registry
  - name: vpn
    docker_service:
      project_name: vpn
      definition:
        version: '2'
        volumes:
          openvpn-certs:
            external:
              name: openvpn-pawel
        services:
          openvpn:
            image: kylemanna/openvpn
            network_mode: host
            volumes:
              - "openvpn-certs:/etc/openvpn"
            privileged: true