---
# Génère les fichiers compose dans build/<mode>/ sans rien déployer,
# pour les relire ou les utiliser à la main : ansible-playbook playbooks/render.yml
- name: Rendu local des fichiers compose
  hosts: bunkerweb:apps
  connection: local
  gather_facts: false
  vars:
    ansible_become: false
    render_dir: "{{ playbook_dir }}/../build/{{ poc_mode }}"
    ansible_default_ipv4: { interface: ens18 }
  tasks:
    - name: Répertoires de sortie
      ansible.builtin.file:
        path: "{{ render_dir }}/{{ item }}"
        state: directory
        mode: "0755"
      loop: [bunkerweb, apps]
      run_once: true

    - name: Compose BunkerWeb
      ansible.builtin.template:
        src: ../roles/bunkerweb/templates/compose.yml.j2
        dest: "{{ render_dir }}/bunkerweb/compose.yml"
        mode: "0600"
      when: inventory_hostname in groups['bunkerweb']

    - name: Compose applis et filtrage
      ansible.builtin.template:
        src: "../roles/apps/templates/{{ item.src }}"
        dest: "{{ render_dir }}/apps/{{ item.dest }}"
        mode: "0644"
      loop:
        - { src: compose.yml.j2, dest: compose.yml }
        - { src: bwpoc-firewall.sh.j2, dest: bwpoc-firewall.sh }
      when: inventory_hostname in groups['apps']