ansible-collection-conference/roles/pretix/tasks/install.yml

---

- name: Install dependencies
  ansible.builtin.package:
    name:
      - acl
      - podman
      - postgresql
      - python3-psycopg2

- name: Create pretix group
  ansible.builtin.group:
    name: "{{ pretix_system_group }}"

- name: Create pretix user
  ansible.builtin.user:
    name: "{{ pretix_system_user }}"
    group: "{{ pretix_system_group }}"
    home: "{{ pretix_system_home }}"
    password: '!'
    shell: /usr/sbin/nologin
    comment: Pretix

- name: Create subuid entry
  ansible.builtin.lineinfile:
    path: /etc/subuid
    line: "{{ pretix_system_user }}:{{ pretix_subuid_begin }}:{{ pretix_subuid_count }}"
    regexp: "^{{ pretix_system_user }}:"
    create: true
    owner: root
    group: root
    mode: "0644"

- name: Create subgid entry
  ansible.builtin.lineinfile:
    path: /etc/subgid
    line: "{{ pretix_system_user }}:{{ pretix_subgid_begin }}:{{ pretix_subgid_count }}"
    regexp: "^{{ pretix_system_user }}:"
    create: true
    owner: root
    group: root
    mode: "0644"

- name: Create pretix data directory
  ansible.builtin.file:
    path: "{{ pretix_system_home }}/data"
    state: directory
    owner: "{{ pretix_subuid_begin + pretix_container_uid }}"
    group: "{{ pretix_subgid_begin + pretix_container_gid }}"
    mode: "0700"

- name: Collect PostgreSQL version and extensions
  become: true
  become_user: postgres
  community.postgresql.postgresql_info:
    filter: ver*,ext*
  register: pretix_register_postgresql_info

- name: Create pg_hba entry
  community.postgresql.postgresql_pg_hba:
    dest: "/etc/postgresql/{{ pretix_register_postgresql_info.version.major }}/main/pg_hba.conf"
    owner: postgres
    group: postgres
    mode: "0644"
    contype: local
    databases: "{{ pretix_postgresql_database }}"
    users: "{{ pretix_postgresql_username }}"
    method: scram-sha-256
    comment: "Ansible managed"
  register: pretix_register_pg_hba

- name: Restart PostgreSQL
  ansible.builtin.systemd_service:
    name: postgresql.service
    state: reloaded
  when: pretix_register_pg_hba.changed  # noqa no-handler

- name: Create PostgreSQL user
  become: true
  become_user: postgres
  community.postgresql.postgresql_user:
    name: "{{ pretix_postgresql_username }}"
    password: "{{ pretix_postgresql_password }}"
    no_password_changes: true

- name: Create PostgreSQL database
  become: true
  become_user: postgres
  community.postgresql.postgresql_db:
    name: "{{ pretix_postgresql_database }}"
    owner: "{{ pretix_postgresql_username }}"

- name: Create Pretix configuration directory
  ansible.builtin.file:
    path: /etc/pretix
    owner: "{{ pretix_system_user }}"
    group: "{{ pretix_system_group }}"
    mode: "0755"
    state: directory

- name: Render Pretix configuration
  ansible.builtin.template:
    src: etc/pretix/pretix.cfg.j2
    dest: /etc/pretix/pretix.cfg
    owner: "{{ pretix_subuid_begin + pretix_container_uid }}"
    group: "{{ pretix_subgid_begin + pretix_container_gid }}"
    mode: "0700"
  notify: Restart Pretix

- name: Create pretix network
  containers.podman.podman_network:
    name: pretix
    ipv6: true

- name: Create pretix-cache container
  containers.podman.podman_container:
    name: pretix-cache
    image: "{{ pretix_cache_image }}:{{ pretix_cache_image_tag }}"
    network:
      - pretix
    subuidname: "{{ pretix_system_user }}"
    subgidname: "{{ pretix_system_user }}"
    generate_systemd:
      path: /etc/systemd/system

- name: Create pretix container
  containers.podman.podman_container:
    name: pretix
    image: "{{ pretix_image }}:{{ pretix_image_tag }}"
    command: "all"
    network:
      - pretix
    ports:
      - "{{ pretix_http_hostaddr }}:{{ pretix_http_hostport }}:80"
    volumes:
      - "/etc/pretix:/etc/pretix:ro"
      - "{{ pretix_system_home }}/data:/data"
      - "/run/postgresql:/run/postgresql"
    subuidname: "{{ pretix_system_user }}"
    subgidname: "{{ pretix_system_user }}"
    generate_systemd:
      path: /etc/systemd/system
      after: container-pretix-cache.service
      requires: container-pretix-cache.service

- name: Run Pretix upgrade
  containers.podman.podman_container_exec:
    name: pretix
    command: pretix upgrade

# TODO: Replace with Quadlets on Debian 13
- name: Start and enable systemd-managed podman containers
  ansible.builtin.systemd_service:
    name: "container-{{ item }}.service"
    state: started
    enabled: true
    daemon_reload: true
  loop:
    - pretix-cache
    - pretix

- name: Render Pretix cronjob
  ansible.builtin.template:
    src: etc/cron.d/pretix.j2
    dest: /etc/cron.d/pretix
    owner: root
    group: root
    mode: "0644"