# Vince (first-party analytics, Plausible protocol) — rootless Podman Quadlet.
# Managed by Ansible. Do not edit by hand.
#
# The image's ENTRYPOINT is the bare /vince binary (prints help and exits with
# no args), so the `serve` subcommand is required.
#
# Reachable only on {{ network_quadlet }}.network: Caddy proxies /stats/* on
# the apex host here (prefix stripped) and publishes the dashboard on
# {{ stats_host }}. There is no published port.

[Unit]
Description=Vince analytics
After=network-online.target
Wants=network-online.target

[Container]
ContainerName={{ vince_container }}
Image={{ vince_image }}

# Vince runs as root in the image and writes /data; mapping container root
# onto {{ podman_user }} keeps {{ vince_directory }} host-owned.
UserNS=keep-id:uid=0,gid=0

Exec=serve
Environment=VINCE_DATA=/data
Environment=VINCE_LISTEN=0.0.0.0:{{ vince_port }}
# serve (re)creates the admin account from these on every boot — the playbook
# vars are the source of truth, like the PocketBase superuser.
Environment=VINCE_ADMIN_NAME={{ vince_admin_name }}
Environment=VINCE_ADMIN_PASSWORD={{ vince_admin_password }}
# create the tracked site on startup (CSV list)
Environment=VINCE_DOMAINS={{ vince_site_domain }}
Environment=VINCE_URL=https://{{ stats_host }}

Volume={{ vince_directory }}:/data
Network={{ network_quadlet }}.network

[Service]
Restart=on-failure

[Install]
WantedBy=default.target