# ------------------------------------------------------------------------------
# FILE: roles/traefik/tasks/main.yml
# DESCRIPTION: Deploys Traefik from boilerplate-generated files in the repo.
#              The compose.yaml and dynamic config live in boilerplates/traefik/
#              and are copied to the host. Only the .env file is templated
#              to inject secrets from Ansible vault.
# ------------------------------------------------------------------------------

- name: Create Traefik directory structure
  file:
    path: "{{ item }}"
    state: directory
    owner: "{{ ansible_user }}"
    group: docker
    mode: '0775'
  loop:
    - "{{ traefik_base_dir }}"
    - "{{ traefik_base_dir }}/dynamic"

- name: Copy compose.yaml from boilerplate
  copy:
    src: "{{ playbook_dir }}/../../boilerplates/traefik/compose.yaml"
    dest: "{{ traefik_base_dir }}/compose.yaml"
    owner: "{{ ansible_user }}"
    group: docker
    mode: '0644'
  notify: restart traefik

- name: Copy dynamic configuration from boilerplate
  copy:
    src: "{{ playbook_dir }}/../../boilerplates/traefik/dynamic/"
    dest: "{{ traefik_base_dir }}/dynamic/"
    owner: "{{ ansible_user }}"
    group: docker
    mode: '0644'
  notify: restart traefik

- name: Deploy .env with secrets from vault
  template:
    src: env.j2
    dest: "{{ traefik_base_dir }}/.env"
    owner: "{{ ansible_user }}"
    group: docker
    mode: '0600'
  notify: restart traefik

- name: Create Traefik Docker network
  docker_network:
    name: proxy
    state: present

- name: Start Traefik
  community.docker.docker_compose_v2:
    project_src: "{{ traefik_base_dir }}"
    state: present