services/_ansible/roles/watchtower/tasks/main.yml

---
- name: Deploy {{ svc.name }}
  tags:
    - watchtower
    - container
  block:
    - import_tasks: deploy-common-service.yml
    
    - name: Copy the run-once script
      ansible.builtin.copy:
        src: run-once.sh
        dest: "{{ (service_path, 'run-once.sh') | path_join }}"
        mode: '0755'