---

  become: true

  roles:

    - backup

---

  become: true

  roles:

    - backup_client

# Deploy a dummy pre-backup script for testing purposes.

  become: true

  tasks:

    - name: Deploy pre-backup script

      copy:

        src: tests/data/10-test-pre-backup.sh

        dest: /etc/duply/main/pre.d/10-test-pre-backup.sh

        owner: root

        group: root

        mode: 0700

---

  become: true

  roles:

    - backup_server

---

  become: true

  roles:

    - bootstrap

---

  become: true

  roles:

    - common

  become: true

  tasks:

    - name: Set-up directories for testing pip requirements upgrade checks script

      file:

        path: "{{ item }}"

        state: directory

        owner: root

        group: pipreqcheck

        mode: 0750

      with_items:

        - "/tmp/pip_check_requirements_upgrades"

---

  become: true

  roles:

    - database

---

  become: true

  roles:

    - database_server

---

  become: true

  roles:

    - ldap_client

---

  become: true

  roles:

    - ldap_server

---

  become: true

  roles:

    - mail_forwarder

---

  become: true

  roles:

    - mail_server

---

  become: true

  vars:

    # common

    ca_certificates:

      testca: "{{ lookup('file', 'tests/data/x509/ca/level1.cert.pem') }}"

    # web_server

    default_https_tls_certificate: "{{ lookup('file', 'tests/data/x509/server/php-website_https.cert.pem') }}"

    default_https_tls_key: "{{ lookup('file', 'tests/data/x509/server/php-website_https.key.pem') }}"

  roles:

    - role: php_website

        - ^/rewrite2/(.*)$ /rewrite.myphp?url=$1 last

      http_header_overrides:

        Accept-Encoding: 'donotencode'

      rewrites:

        - '^/rewrite_to_index1/(.*) /myindex.php last'

        - '^/rewrite_to_index2/(.*) /myindex.php last'

      packages:

        - "php-ldap"

        - "php-json"

      uid: 5001

      website_mail_recipients: user

  become: true

  tasks:

    # parameters-mandatory application

    - name: Set-up directory where PHP files are hosted at

      file:

        path: /var/www/parameters-mandatory/htdocs

        state: directory

        owner: admin-parameters-mandatory

        group: web-parameters-mandatory

        mode: 0750

    - name: Deploy a couple of PHP pages for testing purposes

---

  roles:

    - preseed

---

  become: true

  roles:

    - web_server

---

  become: true

  vars:

    # common

    ca_certificates:

      testca: "{{ lookup('file', 'tests/data/x509/ca/level1.cert.pem') }}"

    # web_server

    default_https_tls_certificate: "{{ lookup('file', 'tests/data/x509/server/wsgi-website_https.cert.pem') }}"

    default_https_tls_key: "{{ lookup('file', 'tests/data/x509/server/wsgi-website_https.key.pem') }}"

  roles:

        - click==8.1.7

        - importlib-metadata==7.0.1

        - itsdangerous==2.1.2

        - six==1.16.0

        - zipp==3.17.0

      wsgi_application: config.ini

      wsgi_requirements:

        - gunicorn==21.1.0

        - packaging==23.2

      https_tls_certificate: "{{ lookup('file', 'tests/data/x509/server/parameters-paste-req_https.cert.pem') }}"

      https_tls_key: "{{ lookup('file', 'tests/data/x509/server/parameters-paste-req_https.key.pem') }}"

  become: true

  tasks:

    # parameters-mandatory application

    - name: Set-up directories where application files are hosted at

      file:

        path: "/var/www/parameters-mandatory/{{ item }}"

        state: directory

        owner: admin-parameters-mandatory

        group: web-parameters-mandatory

        mode: 02750

      with_items:

        - htdocs/static

---

  become: true

  roles:

    - xmpp_server