# ================================================================
# PLAY 0 — Bootstrap: install acl BEFORE any become_user is used.
# ================================================================
- name: Bootstrap – ensure acl is installed
  hosts: collabora_code
  become: true
  gather_facts: false

  tasks:
    - name: Update apt cache
      ansible.builtin.apt:
        update_cache: true
        cache_valid_time: 3600

    - name: Install acl (required for Ansible become_user on Linux)
      ansible.builtin.apt:
        name: acl
        state: present

# ================================================================
# PLAY 1 — Main Collabora Code installation
# ================================================================
- name: Add Collabore signing key and sources
  hosts: collabora_code
  become: true

  vars:
    collabora_code_version: ""
    collabora_code_domain: "office.test.local"

  tasks:
  - name: Ensure the apt keyrings directory exists
    ansible.builtin.file:
      path: /etc/apt/keyrings
      state: directory
      mode: '0755'

  - name: Download Collabora CODE GPG signing key
    ansible.builtin.get_url:
      url: https://collaboraoffice.com/downloads/gpg/collaboraonline-release-keyring.gpg
      dest: /etc/apt/keyrings/collaboraonline-release-keyring.gpg
      mode: '0644'

  - name: Add Collabora CODE APT repository (DEB822 format)
    ansible.builtin.deb822_repository:
      name: collaboraonline
      types: [deb]
      uris: [https://www.collaboraoffice.com/repos/CollaboraOnline/CODE-deb]
      suites: ['./']
      signed_by: /etc/apt/keyrings/collaboraonline-release-keyring.gpg
      state: present

  - name: Update apt cache and install Collabora packages
    ansible.builtin.apt:
      name:
        - coolwsd
        - code-brand
      state: present
      update_cache: yes