- name: Install cgit
  community.general.apk:
    name: cgit

- name: Add git readonly group
  ansible.builtin.group:
    name: "{{ git_readonly_group }}"

- name: Configure read-write git user
  ansible.builtin.user:
    name: "{{ git_readwrite_user }}"
    group: "{{ git_readwrite_group }}"
    groups:
      - "{{ git_readonly_group }}"
    append: true

- name: Create git directory in attached storage
  ansible.builtin.file:
    path: /media/seagate/git
    state: directory
    owner: "{{ git_readwrite_user }}"
    group: "{{ git_readonly_group }}"
    mode: "750"

- name: Set owners recursively in git directory in attached storage
  ansible.builtin.file:
    path: /media/seagate/git
    state: directory
    owner: "{{ git_readwrite_user }}"
    group: "{{ git_readonly_group }}"
    recurse: true

- name: Symlink git directory to storage medium
  ansible.builtin.file:
    src: /media/seagate/git
    dest: "{{ git_directory }}"
    owner: "{{ git_readwrite_user }}"
    group: "{{ git_readonly_group }}"
    state: link
    mode: "750"

- name: Install git.joeac.net nginx site config
  register: cgit_nginx_site
  vars:
    fcgiwrap_socket: /run/fcgiwrap.sock
  ansible.builtin.template:
    src: nginx/git.joeac.net.conf
    dest: /etc/nginx/http.d/git.joeac.net.conf
    owner: "{{ git_readwrite_user }}"
    group: "{{ git_readwrite_group }}"
    mode: "660"

- name: Create git.joeac.net nginx log directory
  ansible.builtin.file:
    path: /var/log/nginx/git.joeac.net
    state: directory

- name: Restart nginx daemon and configure to start on boot
  when: cgit_nginx_site is changed
  ansible.builtin.service:
    name: nginx
    enabled: true
    state: restarted

- name: Install cgit config
  ansible.builtin.template:
    src: cgitrc
    dest: /etc/cgitrc
    mode: "+r"