Fix hermes deployment

Author: bensofficial

roles/hermes/handlers/main.yml

@@ -0,0 +1,6 @@
+---
+- name: Restart hermes
+  community.docker.docker_compose_v2:
+    project_src: "{{ hermes_working_directory }}"
+    state: present
+  become: true

roles/hermes/tasks/main.yml

@@ -11,6 +11,7 @@
     src: "docker-compose.yml.j2"
     dest: "{{ hermes_working_directory }}/docker-compose.yml"
     mode: '0600'
+  notify: Restart hermes
 
 - name: Create Google certificate file
   ansible.builtin.copy:
@@ -20,6 +21,7 @@
     owner: "root"
     group: "root"
   become: true
+  notify: Restart hermes
 
 - name: Create Apple certificate file
   ansible.builtin.copy:
@@ -28,4 +30,5 @@
     mode: "0600"
     owner: "root"
     group: "root"
-  become: true
+  become: true
+  notify: Restart hermes

roles/hermes/templates/docker-compose.yml.j2

@@ -1,15 +1,15 @@
 services:
   hermes:
-    image: ghcr.io/ls1intum/hermes:"{{ hermes_version }}"
+    image: ghcr.io/ls1intum/hermes:{{ hermes_version }}
     container_name: hermes
     ports:
       - "{{ hermes_port }}:8080"
     environment:
-      - APNS_CERTIFICATE_PWD="{{ hermes_apns_certificate_password }}"
-      - APNS_PROD_ENVIRONMENT="{{ hermes_apns_prod_environment }}"
-      - APNS_CERTIFICATE_PATH="{{ hermes_working_directory }}/{{ hermes_apns_certificate_path }}"
-      - GOOGLE_APPLICATION_CREDENTIALS="{{ hermes_working_directory }}/{{ hermes_google_application_credentials_json_path }}"
+      - APNS_CERTIFICATE_PWD={{ hermes_apns_certificate_password }}
+      - APNS_PROD_ENVIRONMENT={{ hermes_apns_prod_environment }}
+      - APNS_CERTIFICATE_PATH=/key/artemis-apns.p12
+      - GOOGLE_APPLICATION_CREDENTIALS=/firebase.json
     volumes:
-      - ${APNS_CERT_PATH}:/key/artemis-apns.p12
-      - ${GOOGLE_APPLICATION_CREDENTIALS_JSON}:/firebase.json
-    restart: on-failure
+      - {{ hermes_working_directory }}/{{ hermes_apns_certificate_path }}:/key/artemis-apns.p12:ro
+      - {{ hermes_working_directory }}/{{ hermes_google_application_credentials_json_path }}:/firebase.json:ro
+    restart: on-failure