---
- name: "set local variables from overrides and defaults"
  set_fact:
    vaultwarden: "{{ (vaultwarden_defaults | combine(vaultwarden_override, recursive=True)) if vaultwarden_override else vaultwarden_defaults }}"

- name: ensure that path exists
  file:
    path: "{{ path }}/config/vaultwarden"
    state: directory

- name: install argon2 util for generating admin_token_hash
  apt:
    name: argon2

- name: set admin_token hash
  shell:
    cmd: "argon2 {{ lookup('ansible.builtin.password', '/dev/null', seed=inventory_hostname) }} -e -id -k 19456 -t 2 -p 1"
    stdin: "{{ vaultwarden.admin_token }}"
    stdin_add_newline: false
  register: vaultwarden_admin_token_hash

- name: template docker-compose
  template:
    src: compose.yaml.j2
    dest: "{{ path }}/compose.yaml"
  notify: restart container


- name: ensure containers are running
  community.docker.docker_compose_v2:
    project_src: "{{ path }}"
    project_name: "{{ role_name }}"
    state: "present"
    pull: "always"
    wait: true
    services: [ 'vaultwarden' ]
  register: _compose_result