---
- name: "set local variables from overrides and defaults"
  set_fact:
    authentik: "{{ (authentik_defaults | combine(authentik_override, recursive=True)) if authentik_override else authentik_defaults }}"

- name: ensure that path exists
  file:
    path: "{{ path }}/config/authentik"
    state: directory

- name: Template .env
  template:
    src: .env.j2
    dest: "{{ path }}/.env"

- name: Template compose
  template:
    src: compose.yml.j2
    dest: "{{ path }}/compose.yml"

- name: ensure containers are running
  community.docker.docker_compose_v2:
    project_src: "{{ path }}"
    project_name: "{{ role_name }}"
    state: "present"
    pull: "always"
    wait: true
    services: >-
      {{ ['postgresql', 'authentik-proxy', 'authentik-worker'] +
         (['radius_outpost'] if authentik.radius.enabled else []) }}
  register: _compose_result