# Pulling needs to have git access; root does not.
- name: Include stroopwafel vault
  include_vars:
    dir: stroopwafel
    files_matching: vault.yml
- name: Create stroopwafel directory
  file:
    path: "{{ stroopwafel_dir }}"
    state: directory
    owner: root
    group: "{{ service_group | default('aurbis') }}"
    mode: "0775"
- name: Check out stroopwafel source
  ansible.builtin.git:
    repo: "{{ stroopwafel_repo }}"
    dest: "{{ stroopwafel_dir }}"
    version: "{{ stroopwafel_version }}"
    update: "{{ stroopwafel_update | default(false) }}"
    accept_hostkey: true
    force: false
  become_user: "{{ stroopwafel_git_user | default(omit) }}"
- name: Deploy stroopwafel .env
  copy:
    content: "{{ stroopwafel_env_b64 | b64decode }}"
    dest: "{{ stroopwafel_dir }}/.env"
    owner: root
    group: "{{ service_group | default('aurbis') }}"
    mode: "0640"
  when: stroopwafel_env_b64 is defined
  no_log: true
- name: Copy docker-compose file
  template:
    src: stroopwafel/docker-compose.yml.j2
    dest: "{{ stroopwafel_dir }}/docker-compose.yml"
    owner: root
    group: "{{ service_group | default('aurbis') }}"
    mode: "0664"
- name: Start stroopwafel
  community.docker.docker_compose_v2:
    project_src: "{{ stroopwafel_dir }}"
    build: policy