---
- block:
    - name: Deploy compose file to '{{ freshrss_service_directory }}'
      template:
        src: "services/freshrss-compose.yml.j2"
        dest: "{{ freshrss_service_directory }}/docker-compose.yml"
        owner: root
        group: root
        mode: 0644
        validate: /bin/docker-compose -f %s config -q
      notify: __freshrss_restart

    - name: Create systemd unit files
      template:
        src: "etc/systemd/system/freshrss.service.j2"
        dest: "/etc/systemd/system/freshrss.service"
        mode: 0644
      notify: __freshrss_restart

    - name: Open ports in iptables
      iptables_raw:
        name: "{{ item.name }}"
        rules: "{{ item.rules }}"
        state: "{{ item.state }}"
        weight: "{{ item.weight | default(omit) }}"
        table: "{{ item.table | default(omit) }}"
      loop: "{{ freshrss_open_ports }}"
      loop_control:
        label: "{{ item.name }}"
      when: freshrss_iptables_enabled | bool
  become: True
  become_user: root