---
# The service's directories and its runtime environment file.
#
# The .env is the source of truth for the container's secrets (PocketBase
# superuser, Shopify credentials, Sentry) and is read by systemd through the
# unit's EnvironmentFile, not by Ansible.
- name: Confirm the podman user's uid still matches the pinned one
  ansible.builtin.assert:
    that: ansible_user_uid | int == podman_uid | int
    fail_msg: >-
      {{ podman_user }} is uid {{ ansible_user_uid }} on this host, but
      vars/default.yml pins podman_uid={{ podman_uid }} (used to build the
      play-level XDG_RUNTIME_DIR). Update the pin.
    quiet: true

- name: Ensure the mozimo data, unit and analytics directories exist
  ansible.builtin.file:
    path: "{{ item }}"
    state: directory
    mode: "0755"
  loop:
    - "{{ podman_data }}"
    - "{{ host_directory }}"
    - "{{ host_directory }}/pb_data"
    - "{{ vince_directory }}"
    - "{{ quadlet_dir }}"
    - "{{ caddy_dropin_dir }}"

- name: Upload the runtime environment file
  ansible.builtin.template:
    src: "files/.env"
    dest: "{{ host_directory }}/.env"
    mode: "0600"
  notify: Restart Mozimo