---

- name: "Install dependencies"
  ansible.builtin.apt:
    pkg:
      - docker-ce
      - apparmor

- name: "Create directory for Authentik with Docker"
  ansible.builtin.file:
    path: "{{ item }}"
    state: directory
    owner: root
    group: root
    mode: '0750'
  with_items:
    - "{{ docker_volumes_dir }}/authentik"

- name: "Create directories for Authentik Docker"
  ansible.builtin.file:
    path: "{{ item }}"
    state: directory
    owner: 1000
    group: 1000
    mode: '0750'
  with_items:
    - "{{ docker_volumes_dir }}/authentik/media"
    - "{{ docker_volumes_dir }}/authentik/custom-templates"
    - "{{ docker_volumes_dir }}/authentik/certs"

- name: "Create Redis directory for Authentik with Docker"
  ansible.builtin.file:
    path: "{{ docker_volumes_dir }}/authentik/redis"
    state: directory
    owner: 999
    group: root
    mode: '0750'

- name: "Create Database directory for Authentik with Docker"
  ansible.builtin.file:
    path: "{{ docker_volumes_dir }}/authentik/database"
    state: directory
    owner: '70'
    group: root
    mode: '0700'

- name: "Template .env file for Authentik with Docker"
  ansible.builtin.template:
    src: "authentik.env.j2"
    dest: "{{ docker_volumes_dir }}/authentik/authentik.env"
    force: true
    owner: root
    group: root
    mode: '0660'
  notify: restart-authentik-docker

- name: "Create Docker network authentik_net"
  docker_network:
    name: authentik_net

- name: "Template systemd units for Authentik with Docker"
  ansible.builtin.template:
    src: "{{ item }}.j2"
    dest: "/etc/systemd/system/{{ item }}"
    force: true
    owner: root
    group: root
    mode: '0664'
  with_items:
    - authentik-server-docker.service
    - authentik-worker-docker.service
    - authentik-redis-docker.service
    - authentik-db-docker.service
  register: units
  notify: restart-authentik-docker

- name: "Reload systemd units"
  ansible.builtin.systemd:
    daemon_reload: yes
  when: units.changed

- name: "Enable systemd units for Authentik with Docker"
  ansible.builtin.systemd:
    state: started
    enabled: true
    name: "{{ item }}"
  with_items:
    - authentik-db-docker.service
    - authentik-redis-docker.service
    - authentik-server-docker.service
    - authentik-worker-docker.service