---
- name: Include VPN credentials
  include_vars: group_vars/vpn_credentials.yml

- name: Create Transmission Directories
  file:
    path: "{{ item }}"
    state: directory
    # mode: 0755
  with_items:
    - "{{ transmission_config_directory }}"
    - "{{ transmission_download_directory }}"
    - "{{ transmission_watch_directory }}"

- name: Transmission with VPN
  docker_container:
    name: transmission-openvpn
    image: haugene/transmission-openvpn
    pull: true
    volumes:
      - "/etc/localtime:/etc/localtime:ro"
      - "{{ transmission_download_directory }}:/storage/downloads:rw"
      - "{{ transmission_config_directory }}:/config:rw"
      - "{{ transmission_watch_directory }}:/storage/watch:rw"
      - "/etc/timezone:/etc/timezone:ro"
    ports:
      - "9091:9091"
      - "51413:51413"
    env:
      TRANSMISSION_HOME: /config
      TRANSMISSION_DOWNLOAD_DIR: /storage/downloads/complete
      TRANSMISSION_INCOMPLETE_DIR: /storage/downloads/incomplete
      TRANSMISSION_WATCH_DIR: /storage/watch
      OPENVPN_PROVIDER: "{{ openvpn_provider }}"
      OPENVPN_USERNAME: "{{ openvpn_username }}"
      OPENVPN_PASSWORD: "{{ openvpn_password }}"
      OPENVPN_CONFIG: "{{ openvpn_config }}"
      PUID: "{{ transmission_user_id }}"
      PGID: "{{ transmission_group_id }}"
      LOCAL_NETWORK: "{{ transmission_local_network }}"
      ENABLE_UFW: false
    devices:
      - /dev/net/tun
    capabilities:
      - NET_ADMIN
    restart_policy: unless-stopped
    memory: 1g
    labels:
      traefik.backend: "transmission-openvpn"
      traefik.frontend.rule: "Host:transmission-openvpn.{{ ansible_nas_domain }}"
      traefik.enable: "{{ transmission_with_openvpn_available_externally }}"
      traefik.port: "9091"