From b25959fdb7a36dc66583810194d5bb9740e93811 Mon Sep 17 00:00:00 2001
From: Ana Custura <ana@sr2.uk>
Date: Fri, 8 Aug 2025 17:01:31 +0100
Subject: [PATCH] Feat: allow defining extra nginx container vols, service
 prerequisites and group

---
 roles/podman_nginx/defaults/main.yml         |  5 ++++-
 roles/podman_nginx/templates/nginx.container | 15 +++++++++++++++
 2 files changed, 19 insertions(+), 1 deletion(-)

diff --git a/roles/podman_nginx/defaults/main.yml b/roles/podman_nginx/defaults/main.yml
index 5d6b76e..37e9391 100644
--- a/roles/podman_nginx/defaults/main.yml
+++ b/roles/podman_nginx/defaults/main.yml
@@ -3,4 +3,7 @@ podman_nginx_additional_hostnames: []
 podman_nginx_certbot_testing: false
 # podman_nginx_frontend_network:
 podman_nginx_podman_rootless_user: nginx
-# podman_nginx_primary_hostname:
\ No newline at end of file
+# podman_nginx_systemd_service_slice:
+# podman_nginx_primary_hostname:
+podman_nginx_systemd_service_requires: []
+podman_nginx_additional_volumes: []
diff --git a/roles/podman_nginx/templates/nginx.container b/roles/podman_nginx/templates/nginx.container
index fb8cafe..7ace6a4 100644
--- a/roles/podman_nginx/templates/nginx.container
+++ b/roles/podman_nginx/templates/nginx.container
@@ -7,10 +7,25 @@ PublishPort=443:443
 Volume=/home/{{ podman_nginx_podman_rootless_user }}/certbot/www:/var/www/certbot/:ro
 Volume=/home/{{ podman_nginx_podman_rootless_user }}/certbot/conf/:/etc/letsencrypt/:ro
 Volume=/home/{{ podman_nginx_podman_rootless_user }}/nginx:/etc/nginx/conf.d/:ro
+{% for item in podman_nginx_additional_volumes %}
+Volume={{ item.src }}:{{ item.dest }}:{{ item.options }}
+{% endfor %}
+
+{% if podman_nginx_systemd_service_requires is defined and podman_nginx_systemd_service_requires|length > 0 %}
+[Unit]
+{% for req in podman_nginx_systemd_service_requires %}
+Requires={{ req }}.service
+After={{ req }}.service
+{% endfor %}
+{% endif %}
 
 [Service]
 RuntimeMaxSec=604800
 Restart=always
+{% if podman_nginx_systemd_service_slice is defined %}
+Slice={{ podman_nginx_systemd_service_slice }}
+{% else %}
 
 [Install]
 WantedBy=default.target
+{% endif %}
\ No newline at end of file