anchor.diff:          ExecStartPre=/usr/bin/docker pull mailgun/vulcand:v0.8.0-beta.3
           ExecStart=/usr/bin/docker run \
             --name vulcand \
  +          --link paus-frontend:paus-frontend \
             -p 80:80 \
             -p 443:443 \
             -p 8182:8182 \
  
positive.code:       restrict default nomodify nopeer noquery limited kod
        restrict 127.0.0.1
        restrict [::1]
    - path: /home/core/.docker/config.json
      permissions: 0644
      owner: core:core
      content: |
        {
  
negative.code:         RemainAfterExit=yes
          Type=oneshot
  <% if instance_type == :manager %>
      - name: paus-frontend.service
        command: start
        enable: true
        content: |
          [Unit]
          Description=Paus frontend
          After=docker.service
          Requires=docker.service
  
          [Service]
          TimeoutStartSec=0
          Restart=always
          User=core
          ExecStartPre=-/usr/bin/docker kill paus-frontend
          ExecStartPre=-/usr/bin/docker rm paus-frontend
          ExecStartPre=/usr/bin/docker pull quay.io/dtan4/paus-frontend:latest
          ExecStart=/usr/bin/docker run \
            --name paus-frontend \
            -e BASE_DOMAIN=<%= ENV["PAUS_BASE_DOMAIN"] %> \
            -e ETCD_ENDPOINT=http://$private_ipv4:2379 \
            -e URI_SCHEME=<%= ENV["PAUS_URI_SCHEME"] %> \
            -v /var/run/docker.sock:/var/run/docker.sock \
            -v /home/core/docker-compose.yml:/app/docker-compose.yml:ro \
            quay.io/dtan4/paus-frontend:latest
          ExecStop=/usr/bin/docker stop paus-frontend
  
          [Install]
          WantedBy=multi-user.target
      - name: vulcand.service
        command: start
        enable: true
        content: |
          [Unit]
          Description=Vulcand
          After=paus-frontend.service
          Requires=paus-frontend.service
  
          [Service]
          TimeoutStartSec=0
  