---

- name: Get latest lego version
  github_release:
    user: go-acme
    repo: lego
    action: latest_release
    token: "{{ vault_github_token }}"
  delegate_to: localhost
  run_once: true
  register: lego_version

- name: Set architecture alias
  set_fact:
    architecture_alias: "amd64"  # noqa: var-naming[no-role-prefix]
  when: ansible_architecture == "x86_64"

- name: Set architecture alias
  set_fact:
    architecture_alias: "arm64"  # noqa: var-naming[no-role-prefix]
  when: ansible_architecture == "aarch64"

- name: "Download lego from GitHub ({{ lego_version.tag }})"
  get_url:
    url: "https://github.com/go-acme/lego/releases/download/\
          {{ lego_version.tag }}/lego_{{ lego_version.tag }}\
          _linux_{{ architecture_alias }}.tar.gz"
    dest: "/var/tmp/lego.tar.gz"
    mode: "0644"
  register: lego_download_archive
  until: lego_download_archive is succeeded
  retries: 3
  delay: 5

- name: Unpack lego
  unarchive:
    remote_src: true
    src: "/var/tmp/lego.tar.gz"
    dest: "{{ lego_install_dir }}"
    extra_opts:
      - --one-top-level
    include:
      - lego

- name: Create lego config directory
  file:
    path: "{{ lego_config_dir }}"
    mode: "0755"
    state: directory

- name: Register lego and create cert
  command: |
    {{ lego_install_dir }}/lego --accept-tos
    {% for dns in certificate_domains %}
    --domains="{{ dns }}"
    {%   endfor %}
    {{ lego_cli_params | join(' ') }}
    run
  args:
    creates: "/var/lib/lego/accounts"
  environment: '{ "{{ lego_provider|upper }}_API_KEY": "{{ vault_ionos_token_dns }}" }'

- name: Copy lego systemd service
  template:
    src: "{{ item }}.j2"
    dest: "/etc/systemd/system/{{ item }}"
    mode: "0644"
  loop: [lego.service, lego.timer]
  notify: [Restart lego_service, Restart lego_timer]