---

- name: mealie
  containers.podman.podman_container:
    state: quadlet
    name: podman_mealie
    image: ghcr.io/mealie-recipes/mealie:latest
    network: bridge
    volumes:
      - /home/admin/podman/mealie:/app/data/
    ports:
      - 9091:9000
    quadlet_options:
      - "AutoUpdate=registry"
      - "Pull=newer"
      - |
        [Service]
        Restart=always
        TimeoutStartSec=900
        [Install]
        WantedBy=default.target

- name: ollama
  containers.podman.podman_container:
    state: quadlet
    name: podman_ollama
    image: docker.io/ollama/ollama:latest
    network: bridge
    device: "nvidia.com/gpu=all"
    volumes:
      - "/home/admin/podman/ollama:/root/.ollama"
    ports:
      - "11434:11434"
    env:
      OLLAMA_KEEP_ALIVE: "-1"
    quadlet_options:
      - "AutoUpdate=registry"
      - "Pull=newer"
      - |
        [Service]
        Restart=always
        TimeoutStartSec=900
        [Install]
        WantedBy=default.target

- name: open-webui
  containers.podman.podman_container:
    state: quadlet
    name: podman_open-webui
    image: ghcr.io/open-webui/open-webui:latest
    network: bridge
    volumes: 
      - "/home/admin/podman/open-webui:/app/backend/data"
    ports:
      - "3000:8080"
    env:
      ENABLE_RAG_WEB_SEARCH: "True"
      RAG_WEB_SEARCH_ENGINE: "searxng"
      RAG_WEB_SEARCH_RESULT_COUNT: 3
      RAG_WEB_SEARCH_CONCURRENT_REQUESTS: 10
      SEARXNG_QUERY_URL: "http://{{ ansible_ssh_host }}:8880/search?q=<query>"
    quadlet_options:
      - "AutoUpdate=registry"
      - "Pull=newer"
      - |
        [Service]
        Restart=always
        TimeoutStartSec=900
        [Install]
        WantedBy=default.target

- name: searxng
  containers.podman.podman_container:
    state: quadlet
    name: podman_searxng
    image: docker.io/searxng/searxng:latest
    network: bridge
    ports:
      - "8880:8080"
    volumes:
      - "/home/admin/podman/searxng:/etc/searxng"
    quadlet_options:
      - "AutoUpdate=registry"
      - "Pull=newer"
      - |
        [Service]
        Restart=always
        TimeoutStartSec=900
        [Install]
        WantedBy=default.target

- name: jellyfin
  containers.podman.podman_container:
    state: quadlet
    name: podman_jellyfin
    image: docker.io/jellyfin/jellyfin
    network: bridge
    device: "nvidia.com/gpu=all"
    volumes:
      - "/home/admin/podman/jellyfin:/config"
      - "/mnt/media/video/movies:/movies:ro"
      - "/mnt/media/video/tv:/tv:ro"
      - "/mnt/media/audio/music/flac:/music:ro"
      - "/mnt/media/video/family:/family:ro"
      - "/mnt/media/video/anime/tv:/anime-tv:ro"
      - "/mnt/media/video/anime/movies:/anime-movies:ro"
      - "/mnt/media/video/livetv:/livetv:ro"
    ports:
      - "8096:8096"
    quadlet_options:
      - "AutoUpdate=registry"
      - "Pull=newer"
      - |
        [Service]
        Restart=always
        TimeoutStartSec=900
        [Install]
        WantedBy=default.target

- name: freshrss
  containers.podman.podman_container:
    state: quadlet
    name: podman_freshrss
    image: lscr.io/linuxserver/freshrss:latest
    network: bridge
    volumes: 
      - "/home/admin/podman/freshrss:/config"
    ports:
      - "8555:80"
    env: 
      TZ: "Europe/London"
    quadlet_options:
      - "AutoUpdate=registry"
      - "Pull=newer"
      - |
        [Service]
        Restart=always
        TimeoutStartSec=900
        [Install]
        WantedBy=default.target

- name: eclipse-mosquitto
  containers.podman.podman_container:
    state: quadlet
    name: podman_eclipse-mosquitto
    image: docker.io/eclipse-mosquitto
    network: bridge
    volumes:
      - "/home/admin/podman/eclipse-mosquitto:/mosquitto"
    ports:
      - "1883:1883"
      - "9001:9001"
    quadlet_options:
      - "AutoUpdate=registry"
      - "Pull=newer"
      - |
        [Service]
        Restart=always
        TimeoutStartSec=900
        [Install]
        WantedBy=default.target

- name: frigate
  containers.podman.podman_container:
    state: quadlet
    name: podman_frigate
    image: "ghcr.io/blakeblackshear/frigate:{{ frigate_version }}"
    network: bridge
    device: "nvidia.com/gpu=all"
    privileged: true
    volumes:
      - /etc/localtime:/etc/localtime:ro
      - /home/admin/podman/frigate:/config
      - /mnt/services/cctv:/media/frigate
      - /usr/lib/x86_64-linux-gnu/libcuda.so:/usr/lib/x86_64-linux-gnu/libcuda.so:ro
    ports:
      - "5005:5000"
      - "5001:8971"
      - "1935:1935"
      - "8554:8554"
    env:
      FRIGATE_RTSP_PASSWORD: "{{ rtsp_password }}"
      YOLO_MODELS: "yolov7-320"
      USE_FP16: "false"
    quadlet_options:
      - "Tmpfs=/tmp/cache"
      - "ShmSize=128mb"
      - "AutoUpdate=registry"
      - "Pull=newer"
      - |
        [Service]
        Restart=always
        TimeoutStartSec=900
        [Install]
        WantedBy=default.target

- name: nginx-proxy-manager
  containers.podman.podman_container:
    state: quadlet
    name: podman_nginx-proxy-manager
    image: docker.io/jc21/nginx-proxy-manager:latest
    network: bridge
    #ip: 192.168.50.10
    privileged: true
    volumes:
      - "/home/admin/podman/nginx-proxy-manager:/data"
      - "/home/admin/podman/letsencrypt:/etc/letsencrypt"
    ports:
      - "80:80"
      - "443:443"
      - "81:81"
    env: 
      TZ: "Europe/London"
    quadlet_options:
      - "AutoUpdate=registry"
      - "Pull=newer"
      - |
        [Service]
        Restart=always
        TimeoutStartSec=900
        [Install]
        WantedBy=default.target

- name: ddclient
  containers.podman.podman_container:
    state: quadlet
    name: podman_ddclient
    image: lscr.io/linuxserver/ddclient:latest
    network: bridge
    env:
      TZ: "Europe/London"
    volumes:
      - "/home/admin/podman/ddclient:/config"
    quadlet_options:
      - "AutoUpdate=registry"
      - "Pull=newer"
      - |
        [Service]
        Restart=always
        TimeoutStartSec=900
        [Install]
        WantedBy=default.target

- name: gitea
  containers.podman.podman_container:
    state: quadlet
    name: podman_gitea
    image: docker.io/gitea/gitea:latest
    network: bridge
    #ip: 192.168.50.30
    env:
      TZ: "Europe/London"
      DISABLE_REGISTRATION: "true"
    volumes:
      - "/home/admin/podman/gitea:/data"
      - "/etc/timezone:/etc/timezone:ro"
      - "/etc/localtime:/etc/localtime:ro"
    ports:
      - "3001:3000"
      - "222:22"
    quadlet_options:
      - "AutoUpdate=registry"
      - "Pull=newer"
      - |
        [Service]
        Restart=always
        TimeoutStartSec=900
        [Install]
        WantedBy=default.target

- name: nginx-personal-site
  containers.podman.podman_container:
    state: quadlet
    name: podman_nginx-personal-site
    image: docker.io/nginx:latest
    network: bridge
    #ip: 192.168.50.20
    volumes:
      - "/home/admin/podman/nginx/nginx.conf:/etc/nginx/nginx.conf:ro"
      - "/home/admin/podman/nginx/html:/usr/share/nginx/html"
    ports:
      "888:80"
    env:
      NGINX_HOST: "{{ personal_site_host }}"
      NGINX_PORT: "80"
    quadlet_options:
      - "AutoUpdate=registry"
      - "Pull=newer"
      - |
        [Service]
        Restart=always
        TimeoutStartSec=900
        [Install]
        WantedBy=default.target

- name: joplin
  containers.podman.podman_container:
    state: quadlet
    name: podman_joplin
    image: docker.io/joplin/server:latest
    network: bridge
    ports:
      "22300:22300"
    env:
      APP_PORT: "22300"
      APP_BASE_URL: "http://{{ ansible_ssh_host }}:22300"
      DB_CLIENT: "pg"
      POSTGRES_PASSWORD: "{{ joplin_password }}"
      POSTGRES_DATABASE: "joplin-db"
      POSTGRES_USER: "joplin"
      POSTGRES_PORT: "5432"
      POSTGRES_HOST: "{{ ansible_ssh_host }}"
    quadlet_options:
      - "AutoUpdate=registry"
      - "Pull=newer"
      - |
        [Service]
        Restart=always
        TimeoutStartSec=900
        [Install]
        WantedBy=default.target

- name: joplin-db
  containers.podman.podman_container:
    state: quadlet
    name: podman_joplin-db
    image: docker.io/postgres:15
    network: bridge
    volumes:
      - "/home/admin/podman/joplin-db:/var/lib/postgresql/data"
    ports:
      "5432:5432"
    env:
      TZ: "Europe/London"
      POSTGRES_PASSWORD: "{{ joplin_password }}"
      POSTGRES_USER: "joplin"
      POSTGRES_DB: "joplin-db"
    quadlet_options:
      - "AutoUpdate=registry"
      - "Pull=newer"
      - |
        [Service]
        Restart=always
        TimeoutStartSec=900
        [Install]
        WantedBy=default.target

- name: wireguard
  containers.podman.podman_container:
    state: quadlet
    name: podman_wireguard
    image: lscr.io/linuxserver/wireguard:latest
    network: bridge
    privileged: true
    sysctl: net.ipv4.ip_forward=1
    sysctl: net.ipv4.conf.all.src_valid_mark=1
    cap_add:
      - NET_RAW
      - NET_ADMIN
      - SYS_MODULE
    volumes:
      - "/home/admin/podman/wireguard:/config"
      - "/lib/modules:/lib/modules" #optional
    ports:
      - "51820:51820/udp"
    env:
      TZ: "Europe/London"
      PEERDNS: "1.1.1.1"
      SERVERURL: "{{ public_ip }}"
      SERVERPORT: "51820"
      PEERS: "FarisIOS,FarisMacbook,SafaPhone"
      ALLOWEDIPS: "192.168.0.1/24"
      LOG_CONFS: "true"
    quadlet_options:
      - "AutoUpdate=registry"
      - "Pull=newer"
      - |
        [Service]
        Restart=always
        TimeoutStartSec=900
        [Install]
        WantedBy=default.target

- name: vaultwarden
  containers.podman.podman_container:
    state: quadlet
    name: podman_vaultwarden
    image: docker.io/vaultwarden/server:latest
    network: bridge
    volumes:
      - "/home/admin/podman/vaultwarden/:/data/"
    ports:
      - "8000:80"
      - "3012:3012"
    env:
      TZ: "Europe/London"
      DOMAIN: "https://{{ personal_site_host }}"
      SIGNUPS_ALLOWED: "false"
      EXPERIMENTAL_CLIENT_FEATURE_FLAGS: "ssh-key-vault-item,ssh-agent"
    quadlet_options:
      - "AutoUpdate=registry"
      - "Pull=newer"
      - |
        [Service]
        Restart=always
        TimeoutStartSec=900
        [Install]
        WantedBy=default.target

- name: homeassistant
  containers.podman.podman_container:
    state: quadlet
    name: podman_homeassistant
    image: ghcr.io/home-assistant/home-assistant:stable
    network: bridge
    volumes:
      - "/home/admin/podman/homeassistant:/config"
      - "/etc/localtime:/etc/localtime:ro"
    ports:
      - "8123:8123"
    env:
      TZ: "Europe/London"
    quadlet_options:
      - "AutoUpdate=registry"
      - "Pull=newer"
      - |
        [Service]
        Restart=always
        TimeoutStartSec=900
        [Install]
        WantedBy=default.target


- name: rutorrent
  containers.podman.podman_container:
    state: quadlet
    name: podman_rutorrent
    image: docker.io/crazymax/rtorrent-rutorrent:latest
    network: bridge
    volumes:
      - "/home/admin/podman/rutorrent/passwd:/passwd"
      - "/home/admin/podman/rutorrent/data:/data"
      - "/mnt/media/torrents:/downloads"
    ports:
      - "8888:8080"
      - "5000:8000"
      - "50000:50000"
    env:
      TZ: "Europe/London"
    quadlet_options:
      - "AutoUpdate=registry"
      - "Pull=newer"
      - |
        [Service]
        Restart=always
        TimeoutStartSec=900
        [Install]
        WantedBy=default.target

- name: prowlarr
  containers.podman.podman_container:
    state: quadlet
    name: podman_prowlarr
    image: lscr.io/linuxserver/prowlarr:latest
    network: bridge
    volumes:
      - "/home/admin/podman/prowlarr:/config"
    ports:
      - "9696:9696"
    env:
      TZ: "Europe/London"
    quadlet_options:
      - "AutoUpdate=registry"
      - "Pull=newer"
      - |
        [Service]
        Restart=always
        TimeoutStartSec=900
        [Install]
        WantedBy=default.target

- name: sonarr
  containers.podman.podman_container:
    state: quadlet
    name: podman_sonarr
    image: lscr.io/linuxserver/sonarr:latest
    network: bridge
    volumes:
      - "/home/admin/podman/sonarr:/config"
      - "/mnt/media/video/tv:/tv"
      - "/mnt/media/torrents:/downloads"
      - "/mnt/media/video/anime/tv:/anime-tv"
    ports:
      - "8989:8989"
    env:
      TZ: "Europe/London"
    quadlet_options:
      - "AutoUpdate=registry"
      - "Pull=newer"
      - |
        [Service]
        Restart=always
        TimeoutStartSec=900
        [Install]
        WantedBy=default.target

- name: radarr
  containers.podman.podman_container:
    state: quadlet
    name: podman_radarr
    image: lscr.io/linuxserver/radarr:latest
    network: bridge
    volumes:
      - "/home/admin/podman/radarr:/config"
      - "/mnt/media/video/movies:/movies"
      - "/mnt/media/torrents:/downloads"
      - "/mnt/media/video/anime/movies:/anime-movies"
    ports:
      - "7878:7878"
    env:
      TZ: "Europe/London"
    quadlet_options:
      - "AutoUpdate=registry"
      - "Pull=newer"
      - |
        [Service]
        Restart=always
        TimeoutStartSec=900
        [Install]
        WantedBy=default.target

- name: readarr
  containers.podman.podman_container:
    state: quadlet
    name: podman_readarr
    image: lscr.io/linuxserver/readarr:develop
    network: bridge
    volumes:
      - "/home/admin/podman/readarr:/config"
      - "/mnt/media/books:/books"
      - "/mnt/media/torrents:/downloads"
    ports:
      - "8787:8787"
    env:
      TZ: "Europe/London"
    quadlet_options:
      - "AutoUpdate=registry"
      - "Pull=newer"
      - |
        [Service]
        Restart=always
        TimeoutStartSec=900
        [Install]
        WantedBy=default.target

- name: lidarr
  containers.podman.podman_container:
    state: quadlet
    name: podman_lidarr
    image: lscr.io/linuxserver/lidarr:latest
    network: bridge
    volumes:
      - "/home/admin/podman/lidarr:/config"
      - "/mnt/media/audio/music/flac:/music"
      - "/mnt/media/torrents:/downloads"
    ports:
      - "8686:8686"
    env:
      TZ: "Europe/London"
    quadlet_options:
      - "AutoUpdate=registry"
      - "Pull=newer"
      - |
        [Service]
        Restart=always
        TimeoutStartSec=900
        [Install]
        WantedBy=default.target

- name: bazarr
  containers.podman.podman_container:
    state: quadlet
    name: podman_bazarr
    image: lscr.io/linuxserver/bazarr:latest
    network: bridge
    volumes:
      - "/home/admin/podman/lidarr:/config"
      - "/mnt/media/video/movies:/movies"
      - "/mnt/media/video/tv:/tv"
    ports:
      - "6767:6767"
    env:
      TZ: "Europe/London"
    quadlet_options:
      - "AutoUpdate=registry"
      - "Pull=newer"
      - |
        [Service]
        Restart=always
        TimeoutStartSec=900
        [Install]
        WantedBy=default.target

- name: kiwix
  containers.podman.podman_container:
    state: quadlet
    name: podman_kiwix
    image: ghcr.io/kiwix/kiwix-serve:latest
    network: bridge
    command: "*.zim"
    volumes:
      - "/mnt/media/kiwix:/data"
    ports:
      - "8088:8080"
    quadlet_options:
      - "AutoUpdate=registry"
      - "Pull=newer"
      - |
        [Service]
        Restart=always
        TimeoutStartSec=900
        [Install]
        WantedBy=default.target


- name: immich-server
  containers.podman.podman_container:
    state: quadlet
    name: podman_immich-server
    image: "ghcr.io/immich-app/immich-server:{{ immich_version }}"
    network: bridge
    device: "nvidia.com/gpu=all"
    volumes:
      - "/mnt/services/immich:/usr/src/app/upload"
      - "/etc/localtime:/etc/localtime:ro"
    ports:
      - "2283:2283"
    env_file:
      - "/home/admin/podman/.env"
    quadlet_options:
      - "AutoUpdate=registry"
      - "Pull=newer"
      - |
        [Service]
        Restart=always
        TimeoutStartSec=900
        [Install]
        WantedBy=default.target

- name: immich-machine-learning
  containers.podman.podman_container:
    state: quadlet
    name: podman_immich-machine-learning
    image: "ghcr.io/immich-app/immich-machine-learning:{{ immich_version }}-cuda"
    network: bridge
    device: "nvidia.com/gpu=all"
    volumes:
      - "/home/admin/podman/immich/cache:/cache"
    env_file:
      - "/home/admin/podman/.env"
    ports:
      - "3003:3003"
    quadlet_options:
      - "AutoUpdate=registry"
      - "Pull=newer"
      - |
        [Service]
        Restart=always
        TimeoutStartSec=900
        [Install]
        WantedBy=default.target

- name: immich-redis
  containers.podman.podman_container:
    state: quadlet
    name: podman_immich-redis
    image: registry.hub.docker.com/library/redis:6.2-alpine
    network: bridge
    ports:
      - "6379:6379"
    quadlet_options:
      - "AutoUpdate=registry"
      - "Pull=newer"
      - |
        [Service]
        Restart=always
        TimeoutStartSec=900
        [Install]
        WantedBy=default.target

- name: immich-db
  containers.podman.podman_container:
    state: quadlet
    name: podman_immich-db
    image: registry.hub.docker.com/tensorchord/pgvecto-rs:pg14-v0.2.0
    network: bridge
    env:
      POSTGRES_PASSWORD: "{{ immich_db_password }}"
      POSTGRES_USER: postgres
      POSTGRES_DB: immich
    volumes:
      - "/home/admin/podman/immich/db:/var/lib/postgresql/data"
    ports:
      - "5433:5432"
    quadlet_options:
      - "AutoUpdate=registry"
      - "Pull=newer"
      - |
        [Service]
        Restart=always
        TimeoutStartSec=900
        [Install]
        WantedBy=default.target

- name: metube
  containers.podman.podman_container:
    state: quadlet
    name: podman_metube
    image: ghcr.io/alexta69/metube:latest
    network: bridge
    volumes:
      - "/mnt/media/youtube-dl:/downloads"
      - "/mnt/media/audio/music/flac:/music"
    ports:
      - "8081:8081"
    env:
      AUDIO_DOWNLOAD_DIR: "/music"
    quadlet_options:
      - "AutoUpdate=registry"
      - "Pull=newer"
      - |
        [Service]
        Restart=always
        TimeoutStartSec=900
        [Install]
        WantedBy=default.target

- name: unifi-network-application
  containers.podman.podman_container:
    state: quadlet
    name: podman_unifi-network-application
    image: lscr.io/linuxserver/unifi-network-application:latest
    network: bridge
    volumes:
      - "/home/admin/podman/unifi-network-application:/config"
    ports:
      - "8443:8443"
      - "10001:10001/udp"
    env:
      TZ: "Europe/London"
      MONGO_INITDB_ROOT_USERNAME: "root"
      MONGO_INITDB_ROOT_PASSWORD: "{{ rtsp_password }}"
      MONGO_USER: "unifi"
      MONGO_PASS: "{{ rtsp_password }}"
      MONGO_HOST: "{{ ansible_ssh_host }}"
      MONGO_PORT: "27017"
      MONGO_DBNAME: "unifi"
      MONGO_AUTHSOURCE: "admin"
    quadlet_options:
      - "AutoUpdate=registry"
      - "Pull=newer"
      - |
        [Service]
        Restart=always
        TimeoutStartSec=900
        [Install]
        WantedBy=default.target

- name: unifi-network-application-db
  containers.podman.podman_container:
    state: quadlet
    name: podman_unifi-network-application-db
    image: docker.io/mongo:7.0
    network: bridge
    volumes:
      - "/home/admin/podman/unifi-network-application-db"
      - "/home/admin/init-mongo.sh:/docker-entrypoint-initdb.d/init-mongo.sh:ro"
    ports:
      - "27017:27017"
    env:
      MONGO_USER: "unifi"
      MONGO_PASS: "{{ rtsp_password }}"
      MONGO_HOST: "{{ ansible_ssh_host }}"
      MONGO_PORT: "27017"
      MONGO_DBNAME: "unifi"
      MONGO_AUTHSOURCE: "admin"
    quadlet_options:
      - "AutoUpdate=registry"
      - "Pull=newer"
      - |
        [Service]
        Restart=always
        TimeoutStartSec=900
        [Install]
        WantedBy=default.target

- name: tube-archivist
  containers.podman.podman_container:
    state: quadlet
    name: podman_tube-archivist
    image: docker.io/bbilly1/tubearchivist:latest
    network: bridge
    volumes:
      - "/mnt/media/video/youtube:/youtube"
      - "/home/admin/podman/tube-archivist/cache"
    ports:
      - "8001:8000"
    env:
      ES_URL: "http://{{ ansible_ssh_host }}:9200"
      REDIS_HOST: "{{ ansible_ssh_host }}"
      REDIS_PORT: "6380"
      TA_HOST: "{{ ansible_ssh_host }}"
      TA_USERNAME: "admin"
      TA_PASSWORD: "{{ rtsp_password }}"
      ELASTIC_PASSWORD: "{{ rtsp_password }}"
      TZ: "Europe/London"
    quadlet_options:
      - "AutoUpdate=registry"
      - "Pull=newer"
      - |
        [Service]
        Restart=always
        TimeoutStartSec=900
        [Install]
        WantedBy=default.target

- name: tube-archivist-es
  containers.podman.podman_container:
    state: quadlet
    name: podman_tube-archivist-es
    image: docker.io/bbilly1/tubearchivist-es:latest
    network: bridge
    volumes:
      - "/home/admin/podman/tube-archivist/es:/usr/share/elasticsearch/data"
    ports:
      - "9200:9200"
    env:
      ELASTIC_PASSWORD: "{{ rtsp_password }}"       # matching Elasticsearch password
      ES_JAVA_OPTS: "-Xms1g -Xmx1g"
      xpack.security.enabled: "true"
      discovery.type: "single-node"
      path.repo: "/usr/share/elasticsearch/data/snapshot"
    quadlet_options:
      - "AutoUpdate=registry"
      - "Pull=newer"
      - |
        [Service]
        Restart=always
        TimeoutStartSec=900
        [Install]
        WantedBy=default.target

- name: tube-archivist-redis
  containers.podman.podman_container:
    state: quadlet
    name: podman_tube-archivist-redis
    image: docker.io/redis/redis-stack-server
    network: bridge
    volumes:
      - "/home/admin/podman/tube-archivist/redis:/data"
    ports:
      - "6380:6379"
    quadlet_options:
      - "AutoUpdate=registry"
      - "Pull=newer"
      - |
        [Service]
        Restart=always
        TimeoutStartSec=900
        [Install]
        WantedBy=default.target

- name: archivebox
  containers.podman.podman_container:
    state: quadlet
    name: podman_archivebox
    image: docker.io/archivebox/archivebox:latest
    network: bridge
    volumes:
      - "/home/admin/podman/archivebox:/data"
    ports:
      - "8002:8000"
    env:
      ADMIN_USERNAME: "admin"
      ADMIN_PASSWORD: "{{ rtsp_password }}"
      PGID: "1000"
      PUID: "1000"
      SEARCH_BACKEND_ENGINE: "sonic"
      SEARCH_BACKEND_HOST_NAME: "sonic"
      SEARCH_BACKEND_PASSWORD: "{{ rtsp_password }}"
    quadlet_options:
      - "AutoUpdate=registry"
      - "Pull=newer"
      - |
        [Service]
        Restart=always
        TimeoutStartSec=900
        [Install]
        WantedBy=default.target

- name: zigbee2mqtt
  containers.podman.podman_container:
    state: quadlet
    name: podman_zigbee2mqtt
    image: docker.io/koenkk/zigbee2mqtt
    network: bridge
    device: "/dev/ttyACM0:/dev/ttyACM0"
    group_add: "keep-groups"
    volumes:
      - "/home/admin/podman/zigbee2mqtt:/app/data"
    ports:
      - "8808:8080"
    quadlet_options:
      - "AutoUpdate=registry"
      - "Pull=newer"
      - |
        [Service]
        Restart=always
        TimeoutStartSec=900
        [Install]
        WantedBy=default.target