---

- name: Install Coolify using official installer
  ansible.builtin.shell: |
    curl -fsSL https://cdn.coollabs.io/coolify/install.sh | sudo bash
  args:
    creates: /coolify/docker-compose.yml  # adjust if needed to prevent reruns


# @note securely connect to coolify webui using SSH tunneling.
# ssh -L 8000:localhost:8000 root@our


# @see https://coolify.io/docs/knowledge-base/server/firewall
- name: Allow UFW ports
  community.general.ufw:
    rule: allow
    port: "{{ item }}"
    proto: tcp
  loop:
    - 8000 # coolify UI
    - 6001 # real-time comms
    - 6002 # terminal
    - 80
    - 443