---
- name: Ensure Signal API container is running
  containers.podman.podman_container:
    name: signal-api
    image: bbernhard/signal-cli-rest-api
    state: started
    recreate: false
    restart_policy: always
    publish:
      - "{{ signal_api_port }}:{{ signal_api_port }}"
    volume:
      - "{{ signal_data_folder }}:/home/.local/share/signal-cli"
    env:
      MODE: native
      PORT: "{{ signal_api_port }}"
      #AUTO_RECEIVE_SCHEDULE: "0 22 * * *"

- name: Ensure UFW allow traffic to exposed port
  ufw:
    rule: allow
    to_port: "{{ signal_api_port }}"