---
- hosts: all
  become: yes
  remote_user: ansible
  gather_facts: false

  vars:
    docker_compose_definition: |
      volumes:
          db-data:

      services:
        db:
          image: postgres:16
          volumes:
            - db-data:/var/lib/postgresql/data
          environment:
            - POSTGRES_DB=$DB_NAME
            - POSTGRES_PASSWORD=$DB_PASSWORD
        web:
          image: healthchecks/healthchecks:latest
          env_file:
              - docker-compose.env
          ports:
              - "8000:8000"
              # To enable SMTP on port 2525, set SMTPD_PORT=2525 in .env
              # and uncomment the following line:
              # - "2525:2525"
          depends_on:
              - db
          command: bash -c 'while !</dev/tcp/db/5432; do sleep 1; done; uwsgi /opt/healthchecks/docker/uwsgi.ini'


  tasks:
    - name: set-debcache.yml - Setup apt proxy debcache
      include: ../../lib/set-debcache.yml
      
    - name: Upgrade-packages.yml - update packages
      include: ../../lib/upgrade-packages.yml
    
    - name: Install-docker.yml - setting up docker
      include: ../../lib/install-docker.yml

    - name: Install Restic and setup 
      include:  ../../lib/setup-restic.yml

    - name: Setup Restic Cron jobs
      include: ../../lib/setup-restic-cron.yml

    - name: Setup Service
      copy:
        dest: /etc/systemd/system/healthcheck.service
        content: |
          [Unit]
          Description=healthcheck
          After=network.target

          [Service]
          User=healthcheck
          WorkingDirectory=/home/docker/
          ExecStart=docker compose up -d 
          Restart=always

          [Install]
          WantedBy=multi-user.target
        owner: root
        group: root
        mode: '0644'
 
    # docker image is broken using manual install method 
    - name: Write docker-compose.yml 
      ansible.builtin.copy:
        content: "{{ docker_compose_definition }}"
        dest: /home/docker/docker-compose.yml
        owner: docker
        group: docker
        mode: u=rw,g=r,o=r

    - name: Check if healthcheck's data directory exists
      stat:
        path: /data/data
      register: healthcheck_stat

    - name: Restore healthcheck Dir
      shell: |
        restic --password-file /home/restic/.resticpassword -r sftp:misamisa://home/restic/$(hostname) --target / restore latest
      args:
        chdir: /home/restic
        creates: /data/healthcheck
      when: not healthcheck_stat.stat.exists or not healthcheck_stat.stat.isdir

    - name: Reload systemd daemon
      systemd:
        daemon_reload: yes
        
    - name: Start healthcheck Service
      systemd:
        name: healthcheck
        state: started
        enabled: yes