---
# - name: AUTHENTIK | Verzeichnisse erstellen und Berechtigungen setzen
#   ansible.builtin.file:
#     path: "/mnt/cephfs/authentik/data/{{ item }}"
#     state: directory
#     owner: 1000
#     group: 1000
#     mode: '0755'
#   loop:
#     - cache
#     - certs
#     - db
#     - media
#     - templates
#   run_once: true
#   delegate_to: "{{ groups['managers'][0] }}"

- name: AUTHENTIK | Generate Compose file
  ansible.builtin.template:
    src: docker-compose.yml.j2
    dest: /mnt/cephfs/authentik/authentik.yml
    mode: 0644
  run_once: true
  delegate_to: "{{ groups['managers'][0] }}"

- name: AUTHENTIK | Deploy app stack
  community.docker.docker_stack:
    state: present
    name: authentik
    compose:
      - /mnt/cephfs/authentik/authentik.yml
  delegate_to: "{{ groups['managers'][0] }}"
  run_once: true