# Installs the base system, builds & installs 50ohm server from source
- name: Install 50ohm server
  hosts: webservers
  become: true
  vars_files:
    - vars.yml
    - users.yml
  pre_tasks:
    - name: Kontrollera att platshållarvärden i vars.yml är utbytta
      ansible.builtin.assert:
        that:
          - site_domain != "example.se"
          - "'example.invalid' not in fiftyohm_repo"
          - "'example.invalid' not in fiftyohm_contents_dl_repo"
          - site_admin_email != "admin@example.se"
        fail_msg: "Redigera vars.yml (site_domain, site_admin_email, fiftyohm_repo, fiftyohm_contents_dl_repo) och inventory.yml."
  roles:
    - base
    - install-sources
    - build-50ohm
  tags:
    - base
    - build

# Obtain a TLS certificate for {{ site_domain }} using geerlingguy.certbot & configure nginx using geerlingguy.nginx
- name: Configure TLS for {{ site_domain }}
  hosts: webservers
  become: true
  vars_files:
    - vars.yml
  roles:
    - geerlingguy.certbot
    - geerlingguy.nginx
  tags:
    - webserver

# Setup systemd-timer for 50ohm-contents-dl renewal & build of 50ohm
- name: Setup systemd timer for 50ohm-contents-dl renewal & build
  hosts: webservers
  become: true
  vars_files:
    - vars.yml
  roles:
    - refresh-50ohm
  tags:
    - build
    - timer