[Unit]
Description=FreeIPA Server
After=network-online.target

[Container]
Image=docker.io/freeipa/freeipa-server:almalinux-9-4.12.2
ContainerName=freeipa-server
Network=podman-bridge0:ip=10.0.0.141

Environment=IPA_DM_PASSWORD=mysupersecurepassword
Environment=IPA_ADMIN_PASSWORD=mysupersecurepassword

PodmanArgs=--systemd=always --hostname=ipa.iot.cudanet.org --cgroupns=host --security-opt label=disable --add-host ipa.iot.cudanet.org:10.0.0.141

# THE CRITICAL CHANGE: Added --no-host-dns and --no-ntp
Exec=ipa-server-install -U -r IOT.CUDANET.ORG -p mysupersecurepassword -a mysupersecurepassword --no-ntp --no-host-dns

Volume=/var/podman/freeipa/data:/data:Z
AddCapability=CAP_SYS_ADMIN
AddCapability=CAP_NET_ADMIN

[Service]
Notify=false
Restart=on-failure
RestartSec=30
TimeoutStartSec=1800

[Install]
WantedBy=multi-user.target