- name: IPv6 subnet for Docker
  debug:
    var: docker_ipv6_subnet

- name: Configure Docker daemon
  become: yes
  template:
    src: "daemon.json.j2"
    dest: "/etc/docker/daemon.json"
    owner: root
    group: root
    mode: "0644"
  register: docker_daemon_config

- name: Install Docker loki plugin for logs
  community.docker.docker_plugin:
    plugin_name: grafana/loki-docker-driver:latest
    alias: loki
    state: enable

- name: Remove docker0 from firewalld trusted zone
  become: yes
  firewalld:
    zone: trusted
    interface: docker0
    permanent: yes
    immediate: yes
    state: disabled
  register: docker0_firewalld

- name: Restart Docker daemon
  become: yes
  service:
    name: docker
    state: restarted
  when: docker_daemon_config.changed or docker0_firewalld.changed