---
- name: Keycloak prepare realm
  block:
    - name: Configure realm "{{ iam_realm }}" cowork
      community.general.keycloak_realm:
        auth_client_id: admin-cli
        auth_keycloak_url: "https://{{ iam_fqdn }}"
        auth_realm: master
        auth_username: "{{ iam_admin_username }}"
        auth_password: "{{ iam_admin_pass }}"
        realm: "{{ iam_realm }}"
        id: "{{ iam_realm }}"
        enabled: true
        state: present
        sso_session_idle_timeout: 1209600
        sso_session_idle_timeout_remember_me: 15552000
        sso_session_max_lifespan: 2592000
        sso_session_max_lifespan_remember_me: 31622400
        remember_me: true
        reset_password_allowed: true
        password_policy: "length(12) and digits(1) and upperCase(1) and lowerCase(1) and specialChars(1) and notUsername(true) and notEmail(true)"
        admin_events_enabled: true
        admin_events_details_enabled: true
        attributes:
         adminEventsExpiration: 1209600
        events_expiration: 1209600
        events_enabled: true
        events_listeners:
          - jboss-logging
          - email
          - "{{ 'user-events-publisher' if user_event_publisher.enable == 'yes' else 'email' }}"
        internationalization_enabled: true
        supported_locales:  # ru, en
          - ru
          - en
        default_locale: "ru" # ru, en
        login_theme: product-login-theme # product-login-theme / base
        validate_certs: false
      retries: 7
      delay: 10
      register: realm_out
      when: instance_app == "cowork"

    - name: Configure realm "{{ iam_realm }}" gemteam
      community.general.keycloak_realm:
        auth_client_id: admin-cli
        auth_keycloak_url: "https://{{ iam_fqdn }}"
        auth_realm: master
        auth_username: "{{ iam_admin_username }}"
        auth_password: "{{ iam_admin_pass }}"
        realm: "{{ iam_realm }}"
        id: "{{ iam_realm }}"
        enabled: true
        state: present
        sso_session_idle_timeout: 1209600
        sso_session_idle_timeout_remember_me: 15552000
        sso_session_max_lifespan: 2592000
        sso_session_max_lifespan_remember_me: 31622400
        remember_me: true
        reset_password_allowed: true
        password_policy: "length(12) and digits(1) and upperCase(1) and lowerCase(1) and specialChars(1) and notUsername(true) and notEmail(true)"
        admin_events_enabled: true
        admin_events_details_enabled: true
        attributes:
         adminEventsExpiration: 1209600
        events_expiration: 1209600
        events_enabled: true
        events_listeners:
          - jboss-logging
          - email
          - "{{ 'user-events-publisher' if user_event_publisher.enable == 'yes' else 'email' }}"
        internationalization_enabled: true
        supported_locales:  # ru, en
          - en
        default_locale: "en" # ru, en
        login_theme: product-login-theme # product-login-theme / base
        validate_certs: false
      retries: 7
      delay: 10
      register: realm_out
      when: instance_app == "gemteam"

    # - name: Debug realm
    #   debug:
    #     msg: "{{ realm_out }}"

# - name: Get a Keycloak public key
#   community.general.keycloak_realm_info:
#     realm: "{{ iam_realm }}"
#     auth_keycloak_url: "{{ iam_fqdn }}"
#     validate_certs: false
#   delegate_to: localhost
#   register: keycloak_realm

# - name: Debug curl out
#   debug: 
#     msg:
#       - "{{ keycloak_realm }}"