---
- name: Setup Caddy
  hosts: privfrontends
  vars_files:
    - ./blocked-ranges.yaml
  roles:
    - role: caddy-ansible
      caddy_systemd_capabilities_enabled: true
      caddy_config: "{{ lookup('template', './templates/Caddyfile.j2') }}"
      caddy_user: "caddy"
      caddy_home: "/var/lib/caddy"
      caddy_packages: ["github.com/caddy-dns/rfc2136@master"]
      # Static weekly builds of caddy with rfc2136 dns plugin
      caddy_url_base: "https://cb.projectsegfau.lt/api/download"