# esh-docker-vm: persist + apply a /32 host route to Home Assistant (10.0.50.46) over macvlan-shim,
# as an ifupdown if-up.d hook (the file carries the why). Rerunnable; `ip route replace` is idempotent.
# /etc/network/interfaces is deliberately NOT edited.
#   scripts/elway infra-ops@10.0.50.45 --playbook playbooks/esh-docker-vm-macvlan-shim-route.yaml
steps:
  - name: Install the if-up.d hook
    upload:
      src: playbooks/files/esh-docker-vm-macvlan-shim-route.sh
      dest: /etc/network/if-up.d/macvlan-shim-routes
      mode: "0755"
    sudo: true

  - name: Apply the route now (same command the hook runs at ifup)
    shell: IFACE=macvlan-shim /etc/network/if-up.d/macvlan-shim-routes
    sudo: true
    changed_when: "false"

verify:
  - name: The host routes 10.0.50.46 over the shim
    shell: ip route get 10.0.50.46 | grep -q 'dev macvlan-shim'
    changed_when: "false"

  - name: The host reaches Home Assistant
    shell: ping -c2 -W2 10.0.50.46 >/dev/null
    changed_when: "false"

  - name: Home Assistant reaches the broker on this host (TCP 1883)
    shell: docker exec homeassistant python3 -c "import socket; socket.create_connection(('10.0.50.45', 1883), 3).close()"
    changed_when: "false"