Migrate Prometheus stack to Podman

ansible/roles/profile_server/handlers/main.yml

@@ -4,3 +4,8 @@
   ansible.builtin.service:
     name: "{{ server_sshd_service_name }}"
     state: reloaded
+
+- name: Reload systemd for Podman Compose
+  tags: [services]
+  ansible.builtin.systemd:
+    daemon_reload: true

ansible/roles/profile_server/tasks/main.yml

@@ -67,6 +67,10 @@
     label: "{{ item.dest }}"
   no_log: "{{ item.no_log | default(false) }}"
 
+- name: Manage Podman Compose stack
+  tags: [services, podman]
+  ansible.builtin.include_tasks: podman-compose.yml
+
 - name: Disable SSH root login on server
   tags: [services]
   ansible.builtin.lineinfile:
@@ -113,16 +117,3 @@
   loop_control:
     label: "{{ item }}"
   when: server_firewall_backend == 'firewalld'
-
-- name: Remove disabled server ports from firewalld
-  tags: [services, packages]
-  ansible.posix.firewalld:
-    port: "{{ item }}"
-    zone: "{{ server_firewalld_zone }}"
-    state: disabled
-    permanent: true
-    immediate: true
-  loop: "{{ server_firewalld_absent_ports | default([]) }}"
-  loop_control:
-    label: "{{ item }}"
-  when: server_firewall_backend == 'firewalld'

ansible/roles/profile_server/tasks/podman-compose.yml

@@ -0,0 +1,10 @@
+---
+- name: Render Podman Compose systemd unit
+  tags: [services, podman]
+  ansible.builtin.template:
+    src: podman-compose-server.service.j2
+    dest: /etc/systemd/system/podman-compose-server.service
+    owner: root
+    group: root
+    mode: "0644"
+  notify: Reload systemd for Podman Compose

ansible/roles/profile_server/templates/podman-compose-server.service.j2

@@ -0,0 +1,15 @@
+[Unit]
+Description=Podman Compose stack for {{ server_username }}
+Requires=network-online.target
+After=network-online.target
+
+[Service]
+Type=oneshot
+RemainAfterExit=yes
+WorkingDirectory={{ server_container_stack_dir }}
+ExecStart=/usr/bin/podman-compose up -d
+ExecStop=/usr/bin/podman-compose down
+ExecReload=/usr/bin/podman-compose up -d
+
+[Install]
+WantedBy=multi-user.target