---
- name: Pull the app image
  docker_image:
    name: '{{ image_name }}'
    tag: '{{ image_tag }}'
    source: pull
    force_source: yes

- name: Ensure the app root exists
  file:
    path: '{{ app_root }}'
    state: directory
    owner: '{{ app_uid }}'
    group: '{{ app_gid }}'
    mode: '0750'

- name: Ensure the data directory exists
  file:
    path: '{{ app_root }}/data'
    state: directory
    owner: '{{ app_uid }}'
    group: '{{ app_gid }}'
    mode: '0750'

- name: Look for the untracked site.env
  stat:
    path: '{{ app_root }}/site.env'
  register: menu_site_env

- name: Warn when the admin has no password yet
  debug:
    msg: >-
      {{ app_root }}/site.env is missing, so the admin is disabled: the public
      menu still serves. Run scripts/provision-site-env.sh {{ app_root }} on
      this host, then re-run this playbook.
  when: not menu_site_env.stat.exists

- name: Run the menu app
  docker_container:
    name: '{{ docker_container }}'
    image: '{{ image_name }}:{{ image_tag }}'
    state: started
    restart_policy: unless-stopped
    user: '{{ app_uid }}:{{ app_gid }}'
    env:
      MENU_ROOT: /data
      MENU_SITE_CONFIG: '/app/config/{{ site }}.site.json'
      SECURE_COOKIES: 'true'
      LOG_LEVEL: info
      PORT: '3000'
    volumes:
      - '{{ app_root }}:/data'
    networks:
      - name: '{{ docker_network }}'

- name: Keep site.env readable only by the app user
  file:
    path: '{{ app_root }}/site.env'
    owner: '{{ app_uid }}'
    group: '{{ app_gid }}'
    mode: '0600'
  when: menu_site_env.stat.exists

- name: Wait for the app to report healthy
  # The image's own HEALTHCHECK fetches /healthz inside the container. Polling
  # that is deliberate: a container name resolves only on the Docker network, so
  # the host cannot fetch http://{{ docker_container }}:3000/healthz.
  docker_container_info:
    name: '{{ docker_container }}'
  register: menu_health
  changed_when: false
  retries: 20
  delay: 5
  until: >-
    menu_health.container is defined and
    menu_health.container.State.Health is defined and
    menu_health.container.State.Health.Status == 'healthy'

- name: Fail when the app never becomes healthy
  fail:
    msg: >-
      {{ docker_container }} did not report healthy within 100s. Check
      `docker logs {{ docker_container }}`.
  when: menu_health.container.State.Health.Status | default('unknown') != 'healthy'

- name: Check the data directory for integrity problems
  # Reads the same directory the container writes, as the same user, so a
  # permissions mistake shows up here rather than at 8pm service.
  command:
    argv:
      - docker
      - run
      - --rm
      - --user
      - '{{ app_uid }}:{{ app_gid }}'
      - -e
      - MENU_ROOT=/data
      - -e
      - 'MENU_SITE_CONFIG=/app/config/{{ site }}.site.json'
      - --entrypoint
      - node
      - '{{ image_name }}:{{ image_tag }}'
      - src/cli/verify.ts
  register: menu_verify
  changed_when: false
  failed_when: false

- name: Report integrity problems
  debug:
    msg: '{{ menu_verify.stdout_lines | default([]) }}'
  when: menu_verify.rc != 0