# ================================================================
# PLAY 0 — Bootstrap: install acl BEFORE any become_user is used.
# ================================================================
- name: Bootstrap – ensure acl is installed
  hosts: nextcloud
  become: true
  gather_facts: false

  tasks:
    - name: Update apt cache
      ansible.builtin.apt:
        update_cache: true
        cache_valid_time: 3600

    - name: Install acl (required for Ansible become_user on Linux)
      ansible.builtin.apt:
        name: acl
        state: present

# ================================================================
# PLAY 1 — Main Collabora Code installation
# ================================================================
- name: Add Collabore signing key and sources
  hosts: collabora_code
  become: true

  vars:
    collabora_code_version: ""
    collabora_code_domain: "office.test.local"

  tasks:
  - name: Ensure APT keyrings directory exists
    ansible.builtin.file:
      path: /etc/apt/keyrings
      state: directory
      mode: '0755'

  - name: Download CODE GPG key
    ansible.builtin.get_url:
      url: https://collaboraoffice.com/downloads/gpg/collaboraonline-release-keyring.gpg
      dest: /usr/share/keyrings/collaboraonline-release-keyring.gpg
      mode: '0644'

  - name: Add CODE repository
    ansible.builtin.apt_repository:
      repo: "deb https://www.collaboraoffice.com/repos/CollaboraOnline/CODE-ubuntu2004 ./"
      state: present
      filename: collabora
      update_cache: yes
  
  - name: Update apt cache
    ansible.builtin.apt:
      update_cache: true
      cache_valid_time: 3600