become: true

  gather_facts: false

  tasks:

    - name: Install python for Ansible

      ansible.builtin.raw: test -e /usr/bin/python3 || (apt -y update && apt install -y python3-minimal)

      become: true

      changed_when: false

    - name: Update all caches to avoid errors due to missing remote archives

      ansible.builtin.apt:

        update_cache: true

      changed_when: false

    - name: Install tools for testing

      ansible.builtin.apt:

        name:

          - gnutls-bin

          - nmap

        state: present

    - name: Use name provided via CLI when running STARTTLS handshake for XMPP via nmap

      ansible.builtin.replace:

        path: "/usr/share/nmap/nselib/sslcert.lua"

        regexp: "host\\.name\\)"

        replace: "host.targetname)"

- name: Prepare, test fixtures

  hosts: bookworm

  become: true

  tasks:

    - name: Set-up the hosts file

      ansible.builtin.lineinfile:

        path: /etc/hosts

        regexp: "^{{ item.key }}"

        line: "{{ item.key }} {{ item.value }}"

        owner: root

        group: root

        mode: "0644"

        state: present

      with_dict:

        192.168.56.11: "ldap-server backup-server"

        192.168.56.21: "client-bookworm"

        192.168.56.31: "parameters-mandatory domain1 proxy.domain1 conference.domain1 upload.domain1"

        192.168.56.32: "parameters-optional domain2 proxy.domain2 conference.domain2 upload.domain2 domain3 proxy.domain3 conference.domain3 upload.domain3"

        fd00::192:168:56:21: "client-bookworm"

        fd00::192:168:56:31: "parameters-mandatory domain1 proxy.domain1 conference.domain1 upload.domain1"

- name: Prepare, helpers

  hosts: clients

  become: true

  tasks:

    - name: Deploy CA certificate

      ansible.builtin.copy:

        src: tests/data/x509/ca/level1.cert.pem

        dest: /usr/local/share/ca-certificates/testca.crt

        owner: root

        group: root

        mode: "0644"

      notify:

        - Update CA certificate cache

    - name: Install console-based XMPP client (for interactive testing)

      ansible.builtin.apt:

        name: mcabber

        state: present

    - name: Install console-based XMPP tool (for non-interactive testing)

      ansible.builtin.apt:

        name: go-sendxmpp

        state: present

    - name: Create dedicated group for testing

      ansible.builtin.group:

        name: user

        state: present

    - name: Create dedicated user for testing

      ansible.builtin.user:

        name: user

        group: user

        shell: /bin/bash

    - name: Deploy mcabber configuration files

      ansible.builtin.template:

        src: tests/data/mcabber.cfg.j2

        dest: "~user/{{ item.jid }}.cfg"

        owner: user

        group: user

        mode: "0600"

      with_items:

        - jid: john.doe@domain1

          password: johnpassword

          server: domain1