00_core.yml

---
- include_tasks: utils/once/flag.yml

- name: "🧩 load docker, db and proxy for {{ application_id }}"
  include_role:
    name: sys-stk-full
  vars:
    compose_handlers_flush: false

- name: "📄 Render KIX host-side config files (local + swarm peers)"
  ansible.builtin.include_tasks:
    file: "{{ lookup('path_absolute', 'roles/sys-svc-compose/tasks/utils/render_replicated_templates.yml') }}"
  vars:
    role_templates:
      - src: "zzz_auth_ldap.xml.j2"
        dest: "{{ KIX_AUTH_LDAP_HOST_PATH }}"
        mode: "0644"
        condition: "{{ KIX_LDAP_ENABLED | bool }}"
      - src: "kix-proxy.default.conf.j2"
        dest: "{{ KIX_PROXY_NGINX_HOST_PATH }}"
        mode: "0644"

- name: "🧹 Clear the stale conf.d link before the backend starts"
  ansible.builtin.include_tasks: utils/clear_stale_conf_link.yml

- name: "🔄 Flush handlers so '{{ KIX_PROXY_CONTAINER }}' is up before further config"
  meta: flush_handlers

- name: "🧩 Converge the backend-side state of {{ application_id }}"
  when: IS_STACK_HOST | bool
  block:
    - name: "🔑 Converge the administrator account of {{ application_id }}"
      ansible.builtin.include_tasks: 01_admin.yml

    - name: "🎨 Converge the corporate design of {{ application_id }}"
      ansible.builtin.include_tasks: 02_design.yml