---

- name: Converge
  hosts: parameters-mandatory,parameters-optional
  become: true
  roles:
    - common

- name: Converge, test fixtures
  hosts: parameters-mandatory,parameters-optional
  become: true
  tasks:

    - name: Set-up directories for testing pip requirements upgrade checks script
      ansible.builtin.file:
        path: "{{ item }}"
        state: directory
        owner: root
        group: pipreqcheck
        mode: "0750"
      with_items:
        - "/tmp/pip_check_requirements_upgrades"
        - "/tmp/pip_check_requirements_upgrades/with_updates"
        - "/tmp/pip_check_requirements_upgrades/without_updates"

    - name: Deploy files for testing pip requirements upgrade checks script
      ansible.builtin.copy:
        src: "{{ item }}"
        dest: "/tmp/{{ item }}"
        owner: root
        group: pipreqcheck
        mode: "0640"
        directory_mode: "0750"
      with_items:
        - "pip_check_requirements_upgrades/with_updates/requirements.in"
        - "pip_check_requirements_upgrades/with_updates/requirements.txt"
        - "pip_check_requirements_upgrades/without_updates/requirements.in"
        - "pip_check_requirements_upgrades/without_updates/requirements.txt"

    - name: Install web server for testing connectivity
      ansible.builtin.apt:
        name: nginx
        state: present

    - name: Deploy firewall configuration file for the web server
      ansible.builtin.copy:
        src: ferm_http.conf
        dest: /etc/ferm/conf.d/99-http.conf
        owner: root
        group: root
        mode: "0640"
      notify:
        - Restart ferm

  handlers:

    - name: Restart ferm
      ansible.builtin.service:
        name: ferm
        state: restarted