---
- name: "Configure remembos application"
  hosts: all

  vars:
    app_name: "remembos"
    app_user: "{{ app_name }}"
    app_owner_uid: 1103
    app_owner_gid: 1103
    base_dir: "{{ (application_dir, app_name) | path_join }}"
    config_dir: "{{ (base_dir, 'config') | path_join }}"
    data_dir: "{{ (base_dir, 'data') | path_join }}"
    config_file: "{{ (config_dir, 'config.toml') | path_join }}"

  tasks:
    # Образ собирается на control-хосте самим репозиторием remembos (контракт —
    # `task image`) и едет на сервер через docker save/load, без реестра.
    # Роль выставляет факт app_image_tag — его подхватывает docker-compose.
    - name: "Build and deliver application image"
      ansible.builtin.import_role:
        name: "app_image"
      vars:
        app_image_name: "{{ app_name }}"
        app_image_src_dir: '{{ (playbook_dir, "..", "remembos") | path_join }}'

    - name: "Create user and environment"
      ansible.builtin.import_role:
        name: owner
      vars:
        owner_name: "{{ app_user }}"
        owner_uid: "{{ app_owner_uid }}"
        owner_gid: "{{ app_owner_gid }}"
        owner_extra_groups: ["docker"]

    - name: "Create application internal directories"
      ansible.builtin.file:
        path: "{{ item }}"
        state: "directory"
        owner: "{{ app_user }}"
        group: "{{ app_user }}"
        mode: "0750"
      loop:
        - "{{ base_dir }}"
        - "{{ data_dir }}"
        - "{{ config_dir }}"

    - name: "Copy config"
      ansible.builtin.template:
        src: "./files/{{ app_name }}/config.template.toml"
        dest: "{{ config_file }}"
        owner: "{{ app_user }}"
        group: "{{ app_user }}"
        mode: "0640"
      # Файл содержит секреты из vault — без no_log их печатает --diff.
      no_log: true
      notify: "Restart application"

    - name: "Copy docker compose file"
      ansible.builtin.template:
        src: "./files/{{ app_name }}/docker-compose.template.yml"
        dest: "{{ base_dir }}/docker-compose.yml"
        owner: "{{ app_user }}"
        group: "{{ app_user }}"
        mode: "0640"

    - name: "Run application with docker compose"
      community.docker.docker_compose_v2:
        project_src: "{{ base_dir }}"
        state: "present"
        remove_orphans: true
      tags:
        - run-app

  handlers:
    # Приложение читает конфиги только при старте, а `state: present` не
    # пересоздаёт контейнер, если docker-compose.yml не изменился, — поэтому
    # правку конфига применяет только явный рестарт.
    - name: "Restart application"
      community.docker.docker_compose_v2:
        project_src: "{{ base_dir }}"
        state: "restarted"
      tags:
        - run-app