---

- name: Ensure hatecomputers-club docker/compose exist
  ansible.builtin.file:
    path: /etc/docker/compose/hatecomputers-club
    state: directory
    owner: root
    group: root
    mode: 0700

- name: Build hatecomputers-club docker-compose.yml.j2
  ansible.builtin.template:
    src: docker-compose.yml.j2
    dest: /etc/docker/compose/hatecomputers-club/docker-compose.yml
    owner: root
    group: root
    mode: 0700

- name: Allow dns from rfc1918 networks
  loop: "{{ rfc1918_networks }}"
  community.general.ufw:
    port: 53
    rule: allow
    from: "{{ item }}"
    state: "enabled"
    proto: "udp"

- name: Enable hatecomputers-club
  ansible.builtin.systemd_service:
    state: restarted
    enabled: true
    name: docker-compose@hatecomputers-club