---
# tasks file for authentik

- name: Set up directories
  ansible.builtin.file:
    state: directory
    path: "{{ item }}"
    mode: '0755'
    owner: "{{ ansible_effective_user_id }}"
    group: "{{ ansible_effective_group_id }}"
  with_items:
    - "{{ authentik_volume_media }}"
    - "{{ authentik_volume_certs }}"
    - "{{ authentik_volume_geoip }}"
    - "{{ authentik_volume_templates }}"
    - "{{ authentik_volume_config }}"
    - "{{ authentik_volume_redis }}"
    - "~/authentik"
  tags:
    - configuration
  become: false

- name: Set up the database directory.
  ansible.builtin.file:
    state: directory
    path: "{{ item }}"
    mode: 0755
    owner: 70
  with_items:
    - "{{ authentik_volume_db }}"
  tags:
    - configuration
  become: false

- name: Copy Authentik docker-compose template.
  ansible.builtin.template:
    src: templates/docker-compose.yml.j2
    dest: ~/authentik/docker-compose.yml
    mode: '0640'
  become: false
  notify: Restart authentik

- name: Copy Authentik configuration.
  ansible.builtin.template:
    src: templates/env.authentik.conf.j2
    dest: "{{ authentik_volume_config }}/env.authentik.conf"
    mode: '0640'
  become: false
  notify: Restart authentik

- name: Ensure Authentik is running.
  community.docker.docker_compose:
    project_src: ~/authentik/
    build: false
  become: false