{{ ansible_managed | comment }}

[Unit]
Description = Grafana Image Renderer service

[Service]
Restart = always
RestartSec = 5s

[Container]
Image={{ monitoring_image_renderer_containerimage }}:{{ monitoring_image_renderer_image_tag }}
ContainerName = image-renderer

Exec = ""

AutoUpdate = registry
LogDriver = journald

NoNewPrivileges = true
ReadOnly = true
DropCapability = all
UserNS = auto:size=65535
{% if monitoring_grafana_selinux_level != omit %}
SecurityLabelLevel = {{ monitoring_grafana_selinux_level }}
{% endif %}

Network = caddy.network

ExposeHostPort = 8081

PodmanArgs = --memory={{ monitoring_image_renderer_memory_high }}
PodmanArgs = --memory-swap={{ monitoring_image_renderer_swap_max }}
PodmanArgs = --memory-reservation={{ monitoring_image_renderer_memory_low }}

[Install]
WantedBy = default.target