---
- name: Create Netbird docker network
  community.docker.docker_network:
    name: netbird_net
    state: present

- name: Create Netbird configuration directories
  ansible.builtin.file:
    path: "/var/lib/netbird/{{ item }}"
    state: directory
    mode: "0755"
  loop:
    - server/etc
    - server/data

- name: Deploy Netbird server configuration
  ansible.builtin.template:
    src: config.yaml.j2
    dest: /var/lib/netbird/server/etc/config.yaml
    mode: "0644"
    force: false

- name: Start Netbird Server Container
  community.docker.docker_container:
    name: netbird-server
    image: netbirdio/netbird-server:latest
    state: started
    restart_policy: always
    network_mode: netbird_net
    ports:
      - "{{ netbird_mgmt_api_port }}:80/tcp"
    volumes:
      - "/var/lib/netbird/server/etc:/etc/netbird"
      - "/var/lib/netbird/server/data:/var/lib/netbird"
    command: "--config /etc/netbird/config.yaml"

- name: Start Netbird Dashboard Container
  community.docker.docker_container:
    name: netbird-dashboard
    image: netbirdio/dashboard:latest
    state: started
    restart_policy: always
    network_mode: netbird_net
    env:
      NETBIRD_MGMT_API_ENDPOINT: "https://{{ netbird_domain }}"
      NETBIRD_MGMT_GRPC_API_ENDPOINT: "https://{{ netbird_domain }}"
      AUTH_AUDIENCE: "netbird-dashboard"
      AUTH_CLIENT_ID: "netbird-dashboard"
      AUTH_CLIENT_SECRET: ""
      AUTH_AUTHORITY: "https://{{ netbird_domain }}/oauth2"
      USE_AUTH0: "false"
      AUTH_SUPPORTED_SCOPES: "openid profile email groups"
      AUTH_REDIRECT_URI: "/nb-auth"
      AUTH_SILENT_REDIRECT_URI: "/nb-silent-auth"