---

- name: Create traefik config dir
  ansible.builtin.file:
    path: "{{ item }}"
    state: directory
  loop:
    - "{{ (app_base_dir, traefik_config_dir, 'certs') | path_join }}"
    - "{{ (app_base_dir, traefik_config_dir, 'letsencrypt') | path_join }}"
    - "{{ (app_base_dir, traefik_config_dir, 'plugins') | path_join }}"
    - "{{ (app_base_dir, traefik_config_dir, 'rules') | path_join }}"
    - "{{ (app_base_dir, traefik_config_dir, 'static') | path_join }}"


- name: Write traefik config files
  ansible.builtin.template:
    src: "{{ item.src }}"
    dest: "{{ item.dest }}"
    mode: 0644
    owner: matzman
    group: matzman
  loop:
    - { src: "static_traefik.j2", dest: "{{ (app_base_dir, traefik_config_dir, 'static', 'traefik.yml') | path_join }}" }
    - { src: "rules_dashboard.j2", dest: "{{ (app_base_dir, traefik_config_dir, 'rules', 'dashboard.yml') | path_join }}" }
    - { src: "rules_middleware.j2", dest: "{{ (app_base_dir, traefik_config_dir, 'rules', 'middleware.yml') | path_join }}" }


- name: Create traefik-proxy net
  community.docker.docker_network:
    name: "{{ traefik_proxy_net }}"
    driver: bridge
    enable_ipv6: true
    ipam_config:
      - subnet: 172.31.0.0/16
        gateway: 172.31.0.1
        iprange: 172.31.128.0/17
      - subnet: fc30:0882:4324:1::/64
        gateway: fc30:0882:4324:1::1
        iprange: fc30:0882:4324:1:8000::/65
    driver_options:
      com.docker.network.bridge.name: br-traefik0