---
# =============================================================================
# day1_deploy_hermes.yml
# Deploy Hermes Agent (Nous Research) on carousel-of-progress (10.1.71.131)
#
# FIRST-RUN WORKFLOW:
#   1. Run this playbook:
#        ansible-playbook playbooks/day1_deploy_hermes.yml
#
#   2. SSH to the host and run the setup wizard as the hermes user:
#        ssh wed@carousel-of-progress.local.mk-labs.cloud
#        sudo -u hermes hermes setup
#
#   3. Once configured, start and verify the service:
#        sudo systemctl start hermes
#        sudo systemctl status hermes
#        sudo journalctl -u hermes -f
#
# VARIABLES:
#   hermes_skip_browser: true   — set to skip Playwright/Chromium install
#                                 (saves ~300MB if browser automation not needed)
# =============================================================================

- name: Deploy Hermes Agent on carousel-of-progress
  hosts: carousel-of-progress
  gather_facts: true

  pre_tasks:
    - name: Verify target is carousel-of-progress
      ansible.builtin.assert:
        that:
          - inventory_hostname == "carousel-of-progress"
        fail_msg: >
          This playbook is scoped to carousel-of-progress only.
          Got: {{ inventory_hostname }}

    - name: Confirm OS is Ubuntu
      ansible.builtin.assert:
        that:
          - ansible_distribution == "Ubuntu"
        fail_msg: >
          This playbook requires Ubuntu. Found: {{ ansible_distribution }}.
          (If running Fedora, swap apt tasks for dnf and adjust Playwright deps.)

  roles:
    - role: hermes
      vars:
        hermes_skip_browser: false   # set true to skip Chromium install

  post_tasks:
    - name: Verify hermes binary is accessible system-wide
      ansible.builtin.command: hermes --version
      register: hermes_version_check
      changed_when: false
      failed_when: hermes_version_check.rc != 0

    - name: Print hermes version
      ansible.builtin.debug:
        msg: "{{ hermes_version_check.stdout }}"

    - name: Print post-install instructions
      ansible.builtin.debug:
        msg:
          - "============================================================"
          - "Hermes installed on carousel-of-progress (10.1.71.131)"
          - "============================================================"
          - "Next steps:"
          - "  1. SSH to the host:"
          - "       ssh wed@carousel-of-progress.local.mk-labs.cloud"
          - "  2. Run the setup wizard as the hermes user:"
          - "       sudo -u hermes hermes setup"
          - "  3. After config, start the service:"
          - "       sudo systemctl start hermes"
          - "  4. Verify:"
          - "       sudo systemctl status hermes"
          - "       sudo journalctl -u hermes -f"
          - "============================================================"
          - "Service is ENABLED but NOT STARTED — config required first."
          - "============================================================"