---
- name: Attendre la fin de cloud-init
  ansible.builtin.command: cloud-init status --wait
  changed_when: false
  failed_when: false

- name: Installer les paquets de base
  ansible.builtin.apt:
    name:
      - qemu-guest-agent
      - ca-certificates
      - curl
      - gnupg
      - jq
      - python3-yaml
      - python3-debian   # requis par deb822_repository
      - chrony
    state: present
    update_cache: true
    cache_valid_time: 3600

- name: Activer l'agent QEMU
  ansible.builtin.systemd_service:
    name: qemu-guest-agent
    state: started
    enabled: true
  failed_when: false   # inactif hors Proxmox

- name: Fuseau horaire Europe/Paris
  ansible.builtin.file:
    src: /usr/share/zoneinfo/Europe/Paris
    dest: /etc/localtime
    state: link
    force: true

- name: Résolution locale des sites du PoC (vers le WAF)
  ansible.builtin.blockinfile:
    path: /etc/hosts
    marker: "# {mark} PoC BunkerWeb"
    block: |
      {{ waf_ip }} www.{{ poc_domain }} shop.{{ poc_domain }} api.{{ poc_domain }} bwui.{{ poc_domain }}

- name: Vérifier la présence du modèle hosts de cloud-init
  ansible.builtin.stat:
    path: /etc/cloud/templates/hosts.debian.tmpl
  register: ci_hosts_tmpl

- name: Persister la résolution si cloud-init gère /etc/hosts
  ansible.builtin.blockinfile:
    path: /etc/cloud/templates/hosts.debian.tmpl
    marker: "# {mark} PoC BunkerWeb"
    block: |
      {{ waf_ip }} www.{{ poc_domain }} shop.{{ poc_domain }} api.{{ poc_domain }} bwui.{{ poc_domain }}
  when: ci_hosts_tmpl.stat.exists