- name: "install packages"
  apt:
    name: "{{ item }}"
  with_items:
    - git
    - haproxy
    - python3-bottle
    - python3-requests

- name: "create ickweb user"
  user:
    name: _ickweb
    comment: Ickweb user
    system: yes

- name: "create ickweb group"
  group:
    name: _ickweb
    system: yes

- name: "install ickweb code"
  shell: |
    rm -rf /var/lib/ickweb
    git clone git://git.liw.fi/ickweb /var/lib/ickweb
    chown -R root:root /var/lib/ickweb
    chmod -R ugo=rX /var/lib/ickweb

- name: "create /etc/ickweb"
  file:
    state: directory
    path: /etc/ickweb
    owner: _ickweb
    group: _ickweb
    mode: 0755

- name: "install ickweb config"
  copy:
    content: "{{ ickweb_secret }}"
    dest: /etc/ickweb/secret
    owner: _ickweb
    group: _ickweb
    mode: 0700

- name: "install ickweb script"
  template:
    src: start_ickweb
    dest: /usr/local/bin
    owner: root
    group: root
    mode: 0755

- name: "install ickweb systemd unit"
  template:
    src: ickweb.service
    dest: /lib/systemd/system/ickweb.service
    owner: root
    group: root
    mode: 0755

- name: "reload systemd"
  systemd:
    name: haproxy
    state: reloaded

- name: "enable and restart services"
  systemd:
    name: "{{ item }}"
    enabled: yes
    state: restarted
  with_items:
    - haproxy
    - ickweb