[Unit]
Description=FreeIPA Server
After=network-online.target

[Container]
Image=gitea.iot.cudanet.org/administrator/quadlets/freeipa-server:almalinux-9-4.12.2
ContainerName=freeipa-server
Network=podman-bridge0:ip=10.0.0.141

# Remove all IPA_DM_PASSWORD, IPA_ADMIN_PASSWORD, and Exec lines.
# We want the container to see the volume and say "Ah, I'm already done."
PodmanArgs=--systemd=always --hostname=ipa.iot.cudanet.org --cgroupns=host --security-opt label=disable --add-host ipa.iot.cudanet.org:10.0.0.141

Volume=/var/podman/freeipa/data:/data:Z
AddCapability=CAP_SYS_ADMIN
AddCapability=CAP_NET_ADMIN

[Service]
Notify=false
Restart=always
RestartSec=30

[Install]
WantedBy=multi-user.target