From d8ad35b8e9e6209425f2cc53090d15f5e22f96ec Mon Sep 17 00:00:00 2001
From: Hermes Agent service account
 <hermes@carousel-of-progress.local.mk-labs.cloud>
Date: Thu, 28 May 2026 15:13:16 -0500
Subject: [PATCH] fix(semaphore): add dedicated network for legacy postgres
 deployment

---
 ansible/roles/semaphore/tasks/main.yml | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/ansible/roles/semaphore/tasks/main.yml b/ansible/roles/semaphore/tasks/main.yml
index c030352..d62fc9a 100644
--- a/ansible/roles/semaphore/tasks/main.yml
+++ b/ansible/roles/semaphore/tasks/main.yml
@@ -32,6 +32,14 @@
 - name: Legacy deployment with PostgreSQL
   when: semaphore_use_postgres | default(false)
   block:
+    - name: Create dedicated Podman network for Semaphore + PostgreSQL
+      ansible.builtin.command:
+        cmd: "podman network create semaphore-net"
+      become: true
+      register: net_result
+      changed_when: "'already exists' not in net_result.stderr"
+      failed_when: false
+
     - name: Create required Podman volumes
       ansible.builtin.command:
         cmd: "podman volume create {{ item }}"
@@ -47,6 +55,7 @@
       containers.podman.podman_container:
         name: "{{ semaphore_postgres_container_name }}"
         image: "{{ semaphore_postgres_image }}"
+        network: semaphore-net
         state: started
         recreate: true
         volumes:
@@ -61,6 +70,7 @@
       containers.podman.podman_container:
         name: "{{ semaphore_container_name }}"
         image: "{{ semaphore_image }}"
+        network: semaphore-net
         state: started
         recreate: true
         ports:
@@ -136,6 +146,7 @@
       containers.podman.podman_container:
         name: "{{ semaphore_container_name }}"
         image: "{{ semaphore_image }}"
+        network: semaphore-net
         state: started
         recreate: true
         ports: