---
- name: CA install
  hosts: ca-host
  serial: 1
  any_errors_fatal: true
  gather_facts: false
  become: true
  vars_files:
    - defaults/main.yml
    - vars/common.yml
    - vars/{{ instance_name }}/common.yml
    - vars/{{ instance_name }}/ca/ca_conf.yml
    - vars/{{ instance_name }}/ca/ca_secret.yml
  pre_tasks:
    - { import_tasks: tasks/check_os_version.yml , tags: ["ca"] }
  roles:
    - { role: ca_service, tags: ["ca"], when: ansible_distribution == "Ubuntu" and ca_install == "yes" }

- name: DNS install
  hosts: dns-host
  serial: 1
  any_errors_fatal: true
  gather_facts: false
  become: true
  vars_files:
    - defaults/main.yml
    - vars/common.yml
    - vars/{{ instance_name }}/common.yml
    - vars/{{ instance_name }}/dns/dns_conf.yml
    - vars/{{ instance_name }}/dns/dns_zone.yml
  pre_tasks:
    - { import_tasks: tasks/check_os_version.yml , tags: ["dns"] }
  roles:
    - { role: dns_service, tags: ["dns"], when: ansible_distribution == "Ubuntu" and dns_install == "yes" }

- name: Base prepate Linux server
  hosts: all
  any_errors_fatal: true
  gather_facts: false
  become: true
  vars_files:
    - defaults/main.yml
    - vars/common.yml
    - vars/{{ instance_name }}/common.yml
    - vars/{{ instance_name }}/ssl_secret.yml
    - vars/{{ instance_name }}/prep/prep_conf.yml
    - vars/{{ instance_name }}/prep/prep_secret.yml
  pre_tasks:
    - { import_tasks: tasks/check_os_version.yml , tags: ["linux_prep"] }
  roles:
    - { role: ubuntu_prep, tags: ["linux_prep"], when: ansible_distribution == "Ubuntu" and prep_os == "yes" }

- name: LDAP install (Docker)
  hosts: ldap-host
  gather_facts: false
  become: true
  vars_files:
    - defaults/main.yml
    - vars/common.yml
    - vars/{{ instance_name }}/common.yml
    - vars/{{ instance_name }}/ssl_secret.yml
    - vars/{{ instance_name }}/ldap/ldap_conf.yml
    - vars/{{ instance_name }}/ldap/ldap_secret.yml
  pre_tasks:
    - { import_tasks: tasks/check_os_version.yml , tags: ["docker", "ldap"] }
  roles:
    - { role: docker_install, tags: ["docker"], when: ansible_distribution == "Ubuntu" and docker_install == "yes" and ldap_install == "yes"}
    - { role: ldap_service, tags: ["ldap"], when: ansible_distribution == "Ubuntu" and ldap_install == "yes" }

- name: IAM install (Docker)
  hosts: iam-host
  gather_facts: false
  become: true
  vars_files:
    - defaults/main.yml
    - vars/common.yml
    - vars/{{ instance_name }}/common.yml
    - vars/{{ instance_name }}/ssl_secret.yml
    - vars/{{ instance_name }}/iam/iam_conf.yml
    - vars/{{ instance_name }}/iam/iam_secret.yml
  pre_tasks:
    - { import_tasks: tasks/check_os_version.yml , tags: ["docker", "iam", "iam_prep"] }
  roles:
    - { role: docker_install, tags: ["docker"], when: ansible_distribution == "Ubuntu" and docker_install == "yes" and iam_install == "yes"}
    - { role: iam_service, tags: ["iam"], when: ansible_distribution == "Ubuntu" and iam_install == "yes" }
    - { role: iam_prep, tags: ["iam_prep"], when: ansible_distribution == "Ubuntu" and iam_install == "yes" }

- name: S3 install 
  hosts: s3-host
  gather_facts: false
  become: true
  vars_files:
    - defaults/main.yml
    - vars/common.yml
    - vars/{{ instance_name }}/common.yml
    - vars/{{ instance_name }}/ssl_secret.yml
    - vars/{{ instance_name }}/s3/s3_conf.yml
    - vars/{{ instance_name }}/s3/s3_secret.yml
  pre_tasks:
    - { import_tasks: tasks/check_os_version.yml , tags: ["s3", "s3_prep"] }
  roles:
    - { role: s3_service, tags: ["s3"], when: ansible_distribution == "Ubuntu" and s3_install == "yes" }
    - { role: s3_prep, tags: ["s3_prep"], when: ansible_distribution == "Ubuntu" and s3_install == "yes" }

- name: Livekit install (Docker)
  hosts: livekit-host
  gather_facts: false
  become: true
  vars_files:
    - defaults/main.yml
    - vars/common.yml
    - vars/{{ instance_name }}/common.yml
    - vars/{{ instance_name }}/ssl_secret.yml
    - vars/{{ instance_name }}/livekit/livekit_conf.yml
    - vars/{{ instance_name }}/livekit/livekit_secret.yml
  pre_tasks:
    - { import_tasks: tasks/check_os_version.yml , tags: ["docker", "livekit"] }
  roles:
    - { role: docker_install, tags: ["docker"], when: ansible_distribution == "Ubuntu" and docker_install == "yes" and livekit_install == "yes"}
    - { role: livekit_service, tags: ["livekit"], when: ansible_distribution == "Ubuntu" and livekit_install == "yes" }

- name: Backend install (Docker)
  hosts: docker-host
  gather_facts: false
  become: true
  vars_files:
    - defaults/main.yml
    - vars/common.yml
    - vars/{{ instance_name }}/common.yml
    - vars/{{ instance_name }}/ssl_secret.yml
    - vars/{{ instance_name }}/back/back_conf.yml
    - vars/{{ instance_name }}/back/back_secret.yml
    - vars/{{ instance_name }}/iam/iam_secret.yml
    - vars/{{ instance_name }}/livekit/livekit_secret.yml
    - vars/{{ instance_name }}/s3/s3_secret.yml
  pre_tasks:
    - { import_tasks: tasks/check_os_version.yml , tags: ["docker", "back"] }
  roles:
    - { role: docker_install, tags: ["docker"], when: ansible_distribution == "Ubuntu" and docker_install == "yes" and back_install == "yes" }
    - { role: back_service, tags: ["back"], when: ansible_distribution == "Ubuntu" and back_install == "yes" }