---
- name: 'Grab docker group id.'
  shell: grep docker /etc/group | cut -d ':' -f 3
  register: docker_group

- name: 'Create NetData container.'
  docker_container:
    name: netdata
    image: 'netdata/netdata:v1.15.0'
    restart_policy: 'always'
    published_ports:
      - '127.0.0.1:19999:19999'
    volumes:
      - '/proc:/host/proc:ro'
      - '/sys:/host/sys:ro'
      - '/var/run/docker.sock:/var/run/docker.sock:ro'
    capabilities:
      - 'SYS_PTRACE'
    security_opts:
      - 'apparmor:unconfined'
    env:
      PGID: '{{ docker_group.stdout|default(999) }}'