From 0db8c59ea922676949c7e7b65ba061a228a30d39 Mon Sep 17 00:00:00 2001
From: ace <ace@0xace.cc>
Date: Sun, 19 Oct 2025 21:10:49 +0300
Subject: [PATCH] ddclient: fix selinux support

---
 roles/ddclient/handlers/main.yml | 12 ++++++------
 roles/ddclient/tasks/docker.yml  |  6 +++---
 roles/ddclient/tasks/podman.yml  |  6 +++---
 3 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/roles/ddclient/handlers/main.yml b/roles/ddclient/handlers/main.yml
index c9b8234..bf6b652 100644
--- a/roles/ddclient/handlers/main.yml
+++ b/roles/ddclient/handlers/main.yml
@@ -22,9 +22,9 @@
     detach: true
     restart_policy: unless-stopped
     volumes:
-      - "/opt/{{ ddclient_namespace }}/ddclient.conf:/config/ddclient.conf"
-      - "/opt/{{ ddclient_namespace }}/Kvps.key:/config/Kvps.key"
-      - "/opt/{{ ddclient_namespace }}/Kvps.private:/config/Kvps.private"
+      - "/opt/{{ ddclient_namespace }}/ddclient.conf:/config/ddclient.conf:Z"
+      - "/opt/{{ ddclient_namespace }}/Kvps.key:/config/Kvps.key:Z"
+      - "/opt/{{ ddclient_namespace }}/Kvps.private:/config/Kvps.private:Z"
   when: ddclient_container_engine == 'docker'
 
 - name: restart podman ddclient
@@ -36,8 +36,8 @@
     state: started
     restart: yes
     volumes:
-      - "/opt/{{ ddclient_namespace }}/ddclient.conf:/config/ddclient.conf"
-      - "/opt/{{ ddclient_namespace }}/Kvps.key:/config/Kvps.key"
-      - "/opt/{{ ddclient_namespace }}/Kvps.private:/config/Kvps.private"
+      - "/opt/{{ ddclient_namespace }}/ddclient.conf:/config/ddclient.conf:Z"
+      - "/opt/{{ ddclient_namespace }}/Kvps.key:/config/Kvps.key:Z"
+      - "/opt/{{ ddclient_namespace }}/Kvps.private:/config/Kvps.private:Z"
   when: ddclient_container_engine == 'podman'
 
diff --git a/roles/ddclient/tasks/docker.yml b/roles/ddclient/tasks/docker.yml
index c7b8351..9f48ed3 100644
--- a/roles/ddclient/tasks/docker.yml
+++ b/roles/ddclient/tasks/docker.yml
@@ -31,6 +31,6 @@
     container_default_behavior: no_defaults
     restart_policy: unless-stopped
     volumes:
-      - "/opt/{{ ddclient_namespace }}/ddclient.conf:/config/ddclient.conf"
-      - "/opt/{{ ddclient_namespace }}/Kvps.key:/config/Kvps.key"
-      - "/opt/{{ ddclient_namespace }}/Kvps.private:/config/Kvps.private"
+      - "/opt/{{ ddclient_namespace }}/ddclient.conf:/config/ddclient.conf:Z"
+      - "/opt/{{ ddclient_namespace }}/Kvps.key:/config/Kvps.key:Z"
+      - "/opt/{{ ddclient_namespace }}/Kvps.private:/config/Kvps.private:Z"
diff --git a/roles/ddclient/tasks/podman.yml b/roles/ddclient/tasks/podman.yml
index 50345dd..e803ca9 100644
--- a/roles/ddclient/tasks/podman.yml
+++ b/roles/ddclient/tasks/podman.yml
@@ -30,9 +30,9 @@
     image: "{{ ddclient_container_registry }}/{{ ddclient_image_name }}:{{ ddclient_image_tag }}"
     state: present
     volumes:
-      - "/opt/{{ ddclient_namespace }}/ddclient.conf:/config/ddclient.conf"
-      - "/opt/{{ ddclient_namespace }}/Kvps.key:/config/Kvps.key"
-      - "/opt/{{ ddclient_namespace }}/Kvps.private:/config/Kvps.private"
+      - "/opt/{{ ddclient_namespace }}/ddclient.conf:/config/ddclient.conf:Z"
+      - "/opt/{{ ddclient_namespace }}/Kvps.key:/config/Kvps.key:Z"
+      - "/opt/{{ ddclient_namespace }}/Kvps.private:/config/Kvps.private:Z"
 
 - name: Generate container systemd unit
   shell: "podman generate systemd {{ ddclient_container_name }}"