---
- name: install packages
  pkgng:
    name:
      - git
      - cgit
      - uwsgi
      - highlight
      - gitolite
    state: present

- name: check user group existence
  command: pw groupshow {{ git.user.name }}
  register: pw_cmd
  ignore_errors: true
  changed_when: false

- name: create user group
  command: pw groupadd {{ git.user.name }} -g {{ git.user.id }}
  when: pw_cmd.rc != 0

- name: check user existence
  command: pw usershow {{ git.user.name }}
  register: pw_cmd
  ignore_errors: true
  changed_when: false

- name: create user
  command: >
    pw useradd {{ git.user.name }}
    -u {{ git.user.id }} -g {{ git.user.name }}
    -d {{ git.user.home }} -m -M 0700
    -c "Git Repositories Owner"
  when: pw_cmd.rc != 0

#
# gitolite
#

- name: gitolite - copy the admin ssh key to the server
  copy:
    src: "{{ ansible_ssh_private_key_file }}.pub"
    dest: "{{ git.user.home }}/admin.pub"
    mode: 0644
  tags: gitolite

- name: gitolite - setup
  become_user: "{{ git.user.name }}"
  command: gitolite setup -pk "{{ git.user.home }}/admin.pub"
  args:
    chdir: "{{ git.user.home }}"
    creates: "{{ git.user.home }}/.gitolite.rc"
  tags: gitolite

- name: gitolite - copy config
  copy:
    src: gitolite.rc
    dest: "{{ git.user.home }}/.gitolite.rc"
    mode: 0644
  tags: gitolite

- name: (local) gitolite - check local admin repo existence
  become: false
  stat:
    path: "{{ playbook_dir }}/gitolite-admin"
  delegate_to: localhost
  register: stat_result
  tags: gitolite

- name: (local) gitolite - clone admin repo to local
  become: false
  command: >
    env GIT_SSH_COMMAND="ssh -F /dev/null -p {{ ansible_ssh_port }} -i {{ ansible_ssh_private_key_file }} -o IdentitiesOnly=yes"
    git clone
    "{{ git.user.name }}@{{ domains[0].name }}:gitolite-admin.git"
    "{{ playbook_dir }}/gitolite-admin"
  delegate_to: localhost
  when: not stat_result.stat.exists
  tags: gitolite

- name: (local) gitolite - note about the push command
  become: false
  copy:
    content: >
      env GIT_SSH_COMMAND="ssh -F /dev/null -p {{ ansible_ssh_port }} -i {{ ansible_ssh_private_key_file }} -o IdentitiesOnly=yes"
      git push
    dest: "{{ playbook_dir }}/gitolite-admin/GIT_PUSH_CMD.sh"
  delegate_to: localhost
  tags: gitolite

#
# Github sync
#

- name: (local) github sync - check ssh key existence
  become: false
  stat:
    path: "{{ git.github.keyfile }}"
  delegate_to: localhost
  register: stat_result

- name: (local) github sync - generate new ssh key pair
  become: false
  command: >
    ssh-keygen -t ed25519 -C "git:github-sync" -N ""
    -f "{{ git.github.keyfile }}"
  delegate_to: localhost
  when: not stat_result.stat.exists

- name: github sync - create .ssh directory on the server
  file:
    path: "{{ git.user.home }}/.ssh"
    state: directory
    owner: "{{ git.user.name }}"
    group: "{{ git.user.name }}"
    mode: 0700

- name: github sync - copy public key to the server
  copy:
    src: "{{ git.github.keyfile }}"
    dest: "{{ git.user.home }}/.ssh/id_{{ git.github.keytype }}"
    owner: "{{ git.user.name }}"
    mode: 0400

#
# cgit
#

- name: cgit - create root directory
  file:
    path: "{{ git.cgit.root }}"
    state: directory

- name: cgit - create static directory (allow git checkout)
  file:
    path: "{{ git.cgit.root }}/static"
    state: directory
    owner: "{{ git.user.name }}"
    group: "{{ git.user.name }}"

- name: cgit - generate config file
  template:
    src: cgitrc.j2
    dest: "{{ git.cgit.root }}/cgitrc"
  notify: restart-cgit

- name: cgit - copy scripts
  copy:
    src: cgit/syntax-highlighting.sh
    dest: "{{ git.cgit.root }}/syntax-highlighting.sh"
    mode: 0755

- name: uwsgi - setup cgit
  blockinfile:
    path: /etc/rc.conf
    marker: "# {mark} ANSIBLE MANAGED - uwsgi/cgit"
    block: |
      uwsgi_profiles="${uwsgi_profiles} cgit"
      uwsgi_cgit_uid="git"
      uwsgi_cgit_gid="git"
      uwsgi_cgit_socket_owner="git:www"
      uwsgi_cgit_flags="-L --log-reopen --logfile-chown --cgi /usr/local/www/cgit/cgit.cgi --env CGIT_CONFIG={{ git.cgit.root }}/cgitrc"
  notify: restart-cgit

- name: uwsgi - enable and start service
  command: rcenable uwsgi

- name: uwsgi - restart to make sure cgit is started
  service:
    name: uwsgi
    state: restarted

- name: (local) cgit - generate deploy hook for cgit-static repo
  become: false
  template:
    src: cgit-static-deploy.j2
    dest: "{{ playbook_dir }}/gitolite-admin/local/hooks/repo-specific/cgit-static-deploy"
    mode: 0755
  delegate_to: localhost

- debug:
    msg:
      - "NOTE:"
      - "Need to set the post-preceive hook for 'cgit-static' repo:"
      - "gitolite-admin/local/hooks/repo-specific/cgit-static-deploy"