# {{ ansible_managed }} PODMAN_ARGS="\ --name 'cadoles-pod-hydra-v1' \ --replace \ --network=slirp4netns:allow_host_loopback=true \ -p 127.0.0.1:4444:4444 \ -p 127.0.0.1:4445:4445 \ --tmpfs /tmp \ --tz=local \ -e 'HYDRA_DSN=mysql://{{ hydra_database_user }}:{{ hydra_database_password }}@tcp({{ hydra_database_host }}:{{ hydra_database_port }})/{{ hydra_database_name }}?parseTime=true' \ -e 'LOG_LEVEL={{ hydra_log_level }}' \ -e 'LOG_LEAK_SENSITIVE_VALUES={{ hydra_log_leak_sensitive_values }}' \ -e 'HYDRA_URLS_SELF_ISSUER={{ hydra_urls_self_issuer_url }}' \ -e 'HYDRA_URLS_CONSENT={{ hydra_urls_consent }}' \ -e 'HYDRA_URLS_LOGIN={{ hydra_urls_login }}' \ -e 'HYDRA_URLS_LOGOUT={{ hydra_urls_logout }}' \ -e 'HYDRA_ALLOW_INSECURE=yes' \ -e 'HYDRA_LEVEL={{ hydra_log_level }}' \ -e 'HYDRA_SECRETS_SYSTEM={{ lookup('ansible.builtin.password', '/dev/null length=32 seed=hydra_secrets_seed') }}' \ -e 'HYDRA_OIDC_SUBJECT_IDENTIFIERS_PAIRWISE_SALT={{ lookup('ansible.builtin.password', '/dev/null length=32 seed=hydra_secrets_seed') }}' \ -v /etc/hydra/clients.d:/etc/hydra/clients.d \ "