---
- name: Deploy .env file
  ansible.builtin.template:
    src: env.j2
    dest: "{{ services_root }}/.env"
    owner: "{{ deploy_user }}"
    group: "{{ deploy_group }}"
    mode: "0600"
  notify: Restart stack

- name: Deploy docker-compose.yml
  ansible.builtin.template:
    src: docker-compose.yml.j2
    dest: "{{ services_root }}/docker-compose.yml"
    owner: "{{ deploy_user }}"
    group: "{{ deploy_group }}"
    mode: "0644"
  notify: Restart stack

- name: Deploy Traefik static config
  ansible.builtin.template:
    src: traefik/traefik.yml.j2
    dest: "{{ services_root }}/traefik/traefik.yml"
    owner: "{{ deploy_user }}"
    group: "{{ deploy_group }}"
    mode: "0644"
  notify: Restart stack

- name: Deploy Traefik dynamic routes
  ansible.builtin.template:
    src: traefik/dynamic/routes.yml.j2
    dest: "{{ services_root }}/traefik/dynamic/routes.yml"
    owner: "{{ deploy_user }}"
    group: "{{ deploy_group }}"
    mode: "0644"
  notify: Restart stack

- name: Deploy act_runner config
  ansible.builtin.template:
    src: act_runner_config.yaml.j2
    dest: "{{ services_root }}/act_runner/config.yaml"
    owner: "{{ deploy_user }}"
    group: "{{ deploy_group }}"
    mode: "0644"
  notify: Restart stack

- name: Create acme.json for Let's Encrypt certificates
  ansible.builtin.file:
    path: "{{ services_root }}/traefik/acme.json"
    state: touch
    owner: "{{ deploy_user }}"
    group: "{{ deploy_group }}"
    mode: "0600"
    modification_time: preserve
    access_time: preserve