name: Ansible Playbook lint & deploy
on: [push]

jobs:
  ansible-lint:
    runs-on: imgbuilder
    container:
      image: gitea.konchin.com/system/ansible-image
      credentials:
        username: ${{ secrets.REGISTRY_USERNAME }}
        password: ${{ secrets.REGISTRY_PASSWORD }}
    steps:
      - name: Check out repository code
        uses: actions/checkout@v4
      - name: Ansible Lint
        run: |
          ansible-lint roles/ playbooks/

  run-ansible-mongo:
    needs: ansible-lint
    runs-on: imgbuilder
    container:
      image: gitea.konchin.com/system/ansible-image
      credentials:
        username: ${{ secrets.REGISTRY_USERNAME }}
        password: ${{ secrets.REGISTRY_PASSWORD }}
      options: --dns 192.168.68.254 --dns-search konchin.com --dns-option ndots:15
    steps:
      - name: Check out repository code
        uses: actions/checkout@v4
      - name: Setup ssh key
        run: |
          printf '%s\n' "${{ secrets.ANSIBLE_ED25519 }}" > ~/.ssh/id_ed25519
          chmod 0600 ~/.ssh/id_ed25519                    
      - name: Setup ssh pubkey
        run: |
          printf '%s\n' "${{ secrets.ANSIBLE_ED25519_PUB }}" > ~/.ssh/id_ed25519_pub

      - name: Setup secret
        run: |
          mkdir -p group_vars/mongo/
          echo "${{ secrets.MONGO_SECRET }}" > group_vars/mongo/secret.yml
      - name: Run playbook
        run: ansible-playbook playbooks/mongo_users.yml

  run-ansible-postgres:
    needs: ansible-lint
    runs-on: imgbuilder
    container:
      image: gitea.konchin.com/system/ansible-image
      credentials:
        username: ${{ secrets.REGISTRY_USERNAME }}
        password: ${{ secrets.REGISTRY_PASSWORD }}
      options: --dns 192.168.68.254 --dns-search konchin.com --dns-option ndots:15
    steps:
      - name: Check out repository code
        uses: actions/checkout@v4
      - name: Setup ssh key
        run: |
          printf '%s\n' "${{ secrets.ANSIBLE_ED25519 }}" > ~/.ssh/id_ed25519
          chmod 0600 ~/.ssh/id_ed25519                    
      - name: Setup ssh pubkey
        run: |
          printf '%s\n' "${{ secrets.ANSIBLE_ED25519_PUB }}" > ~/.ssh/id_ed25519_pub

      - name: Setup secret
        run: |
          mkdir -p group_vars/mongo/
          echo "${{ secrets.MONGO_SECRET }}" > group_vars/mongo/secret.yml
      - name: Run playbook
        run: ansible-playbook playbooks/postgres_users.yml