- name: Setup matrix server
  hosts: berliet.medicenlutte.fr
  tasks:

    - name: Setup Continuwuity repository key
      ansible.builtin.copy:
        src: matrix/forgejo-continuwuation.asc
        dest: /etc/apt/keyrings/forgejo-continuwuation.asc
        owner: root
        group: root
        mode: u=rw,g=rw,o=r
      become: true

    - name: Setup Continuwuity repository
      ansible.builtin.copy:
        src: matrix/continuwuation.list
        dest: /etc/apt/sources.list.d/continuwuation.list
        owner: root
        group: root
        mode: u=rw,g=rw,o=r
      become: true

    - name: Install Continuwuity
      ansible.builtin.apt:
        name: continuwuity
        state: present
        update_cache: yes
      become: true

    - name: Setup Continuwuity config
      ansible.builtin.copy:
        src: matrix/conduwuit.toml
        dest: /etc/conduwuit/conduwuit.toml
        owner: root
        group: root
        mode: u=rw,g=rw,o=r
      become: true

    - name: Create conduwuit user
      ansible.builtin.user:
        name: conduwuit
        state: present
        create_home: false
        home: /var/lib/conduwuit
        shell: /usr/sbin/nologin
        password: '!'
        system: true
      become: true
      
    - name: Start and Enable Continuwuity
      ansible.builtin.systemd_service:
        name: conduwuit
        state: reloaded
        enabled: true
      become: true

- name: Setup NGINX
  ansible.builtin.import_playbook: nginx.yaml

- name: Setup NGINX config for matrix server
  hosts: berliet.medicenlutte.fr
  tasks:

    - name: Setup matrix.medicenlutte.fr site
      ansible.builtin.copy:
        src: matrix/matrix.medicenlutte.fr.conf
        dest: /etc/nginx/sites-available/matrix.medicenlutte.fr.conf
        owner: root
        group: root
        mode: u=rw,g=rw,o=r
      become: true

    - name: Add www-data to conduwuit group
      ansible.builtin.user:
        name: www-data
        groups: conduwuit
        append: true
      become: true

    - name: Enable matrix.medicenlutte.fr site
      ansible.builtin.file:
        path: /etc/nginx/sites-enabled/matrix.medicenlutte.fr.conf
        state: link
        src: ../sites-available/matrix.medicenlutte.fr.conf
      become: true
      
    - name: Reload NGINX
      ansible.builtin.systemd_service:
        name: nginx
        state: reloaded
      become: true