---
- name: Check if docker is already installed
  ansible.builtin.command: docker --version
  register: docker_check
  changed_when: false
  failed_when: false

- name: Install docker via convenience script
  ansible.builtin.shell: |
    set -o pipefail
    curl -fsSL https://get.docker.com | sh
  args:
    executable: /bin/bash
  when: docker_check.rc != 0

- name: Add deploy user to docker group
  ansible.builtin.user:
    name: "{{ deploy_user }}"
    groups: docker
    append: true

- name: Ensure docker is running and enabled
  ansible.builtin.service:
    name: docker
    state: started
    enabled: true