- name: Add mox group
  ansible.builtin.group:
    name: mox

- name: Add mox user
  ansible.builtin.user:
    name: mox
    group: mox
    groups:
      - tls
    append: false

- name: Assign mox as owner of ~mox home directory
  register: mox_home_dir
  ansible.builtin.file:
    path: ~mox
    owner: mox
    group: mox
    mode: "750"

- name: Create mox configuration directory
  register: mox_conf_dir
  ansible.builtin.file:
    path: ~mox/config/
    owner: mox
    group: mox
    mode: "770"

- name: Create DKIM private keys directory
  register: mox_dkim_dir
  ansible.builtin.file:
    path: ~mox/config/dkim
    owner: mox
    group: mox
    mode: "770"

- name: Install DKIM private key A
  register: mox_dkim_a
  ansible.builtin.copy:
    src: dkim/2026a._domainkey.mail.joeac.net.20260705T163220.rsa2048.privatekey.pkcs8.pem
    dest: ~mox/config/dkim/2026a._domainkey.mail.joeac.net.20260705T163220.rsa2048.privatekey.pkcs8.pem
    owner: mox
    group: mox
    mode: "660"

- name: Install DKIM private key B
  register: mox_dkim_b
  ansible.builtin.copy:
    src: dkim/2026b._domainkey.mail.joeac.net.20260705T163220.rsa2048.privatekey.pkcs8.pem
    dest: ~mox/config/dkim/2026b._domainkey.mail.joeac.net.20260705T163220.rsa2048.privatekey.pkcs8.pem
    owner: mox
    group: mox
    mode: "660"

- name: Install adminpasswd
  register: mox_adminpasswd
  ansible.builtin.copy:
    src: adminpasswd
    dest: ~mox/config/adminpasswd
    owner: mox
    group: mox
    mode: "660"

- name: Install mox configuration
  register: mox_conf
  ansible.builtin.template:
    src: mox.conf
    dest: ~mox/config/mox.conf
    owner: mox
    group: mox
    mode: "660"

- name: Install mox domain configuration
  register: mox_domain_conf
  ansible.builtin.template:
    src: domains.conf
    dest: ~mox/config/domains.conf
    owner: mox
    group: mox
    mode: "660"

- name: Create mox data directory
  ansible.builtin.file:
    path: ~mox/data
    state: directory
    owner: mox
    group: mox
    mode: "770"

- name: Create unbound configuration directory
  ansible.builtin.file:
    path: /etc/unbound/unbound.conf.d
    state: directory
    mode: "444"

- name: Install DNSSEC configuration
  register: dnssec_conf
  ansible.builtin.template:
    src: dnssec.conf
    dest: /etc/unbound/unbound.conf.d/dnssec.conf

- name: Install unbound binary
  community.general.apk:
    name: unbound
    state: present

- name: Restart unbound service and configure to start on boot
  when: dnssec_conf is changed
  ansible.builtin.service:
    name: unbound
    enabled: true
    state: restarted

- name: Start unbound service and configure to start on boot
  when: not ( dnssec_conf is changed )
  ansible.builtin.service:
    name: unbound
    enabled: true
    state: started

- name: Configure networking to point at unbound DNS resolver
  ansible.builtin.copy:
    content: "nameserver: 127.0.0.1"
    dest: /etc/resolv.conf
    backup: true
    mode: "444"

- name: Install mox binary
  register: mox_binary
  ansible.builtin.get_url:
    dest: /usr/bin/mox
    mode: "755"
    url: "{{ mox_url }}"

- name: Install mox service
  register: mox_service
  ansible.builtin.copy:
    src: openrc/mox
    dest: /etc/init.d/mox
    mode: "755"

- name: Restart mox service and configure to start on boot
  when:
    mox_home_dir is changed
      or mox_conf_dir is changed
      or mox_dkim_dir is change
      or mox_dkim_a is change
      or mox_dkim_b is change
      or mox_adminpasswd is change
      or mox_conf is change
      or mox_domain_conf is changed
      or mox_binary is changed
      or mox_service is changed
  ansible.builtin.service:
    name: mox
    enabled: true
    state: started

- name: Start mox service and configure to start on boot
  when: not (
    mox_home_dir is changed
      or mox_conf_dir is changed
      or mox_dkim_dir is change
      or mox_dkim_a is change
      or mox_dkim_b is change
      or mox_adminpasswd is change
      or mox_conf is change
      or mox_domain_conf is changed
      or mox_binary is changed
      or mox_service is changed )
  ansible.builtin.service:
    name: mox
    enabled: true
    state: started