06_patch_trusted_hosts.yml

---
- name: "🧭 Resolve host path to config.ini.php"
  ansible.builtin.include_tasks: utils/resolve/config_host.yml

- name: "🔧 Matomo | Set trusted hosts (domain + service + container reach host)"
  vars:
    application_id: "web-app-matomo"
  ansible.builtin.shell: sh -s
  args:
    stdin: "{{ lookup('file', role_path ~ '/files/shell/patch/trusted_hosts.sh') }}"
  environment:
    CFG: "{{ MATOMO_CONFIG_HOST }}"
    DOMAIN: "{{ lookup('domain', 'web-app-matomo') }}"
    SIBLINGS: "{{ lookup('network_siblings', lookup('domain', 'web-app-matomo')) | join(' ') }}"
    SERVICE: "{{ MATOMO_SERVICE }}"
    LOCAL: "{{ DOCKER_REACH_HOST }}:{{ http_port }}"
  delegate_to: "{{ MATOMO_HOST_NODE }}"
  register: matomo_trusted_hosts_patch
  changed_when: "'PATCHED' in matomo_trusted_hosts_patch.stdout"
  notify: compose-up