---
- hosts: dia.invidious.io
  handlers:
    - name: restart networking
      systemd:
        name: networking
        state: restarted

    - name: restart ssh
      systemd:
        name: sshd
        state: restarted

  tasks:
    - name: HE IPv6 network config
      copy:
        src: he-ipv6
        dest: /etc/network/interfaces.d/he-ipv6
        mode: 0644
      notify: restart networking

    - name: SSH config
      template:
        src: sshd_config.j2
        dest: /etc/ssh/sshd_config
        mode: 0644
      notify: restart ssh
      tags: [ssh, base]

    - name: SSH keys
      template:
        src: authorized_keys.j2
        dest: /root/.ssh/authorized_keys
        mode: 0600
      tags: [ssh, base]

    - name: Install packages
      apt:
        name: "{{ apt_packages }}"
        update_cache: true
      tags: [apt, base]

    - name: unattended-upgrades
      import_role:
        name: jnv.unattended-upgrades
      tags: [unattended-upgrades]

    - name: pip
      import_role:
        name: geerlingguy.pip
      tags: [pip,docker]

    - name: docker
      import_role:
        name: geerlingguy.docker
      tags: [dockerd, docker]

    - name: Deploy invidious api
      import_tasks: tasks/compose.yml
      vars:
        app: instances-api
      tags: [instances-api, api, docker]

    - name: Deploy invidious redirect
      import_tasks: tasks/compose.yml
      vars:
        app: redirect
      tags: [redirect, docker]

    - name: Deploy invidious website
      import_tasks: tasks/compose.yml
      vars:
        app: invidious.io
      tags: [website, docker]

    - name: Deploy gitea
      import_tasks: tasks/compose.yml
      vars:
        app: gitea
      tags: [gitea, docker]

    - name: Deploy docs
      import_tasks: tasks/compose.yml
      vars:
        app: "docs.invidious.io"
      tags: [docs, docker]

    - name: Deploy watchtower
      import_tasks: tasks/compose.yml
      vars:
        app: "watchtower"
      tags: [watchtower, docker]

    - name: caddy
      import_role:
        name: caddy_ansible.caddy_ansible
      tags: [caddy]