# Deploy Miniflux + bundled Postgres to ana-docker.
#
# Usage:
#   scripts/elway ana-docker --playbook playbooks/deploy-miniflux.yaml
#
# Idempotent — every step is creates-/when-gated; rerun is safe.
#
# After this playbook runs once, fill in the two CHANGE_ME passwords
# in /opt/docker/compose/miniflux/.env on the host (see README) and
# re-run `docker compose up -d` to start the stack with the real
# passwords. The first-run CREATE_ADMIN=1 then bootstraps the admin
# user on the empty DB.

vars:
  compose_dir: /opt/docker/compose/miniflux
  host_port: "8080"

steps:
  - name: Ensure compose dir exists
    shell: mkdir -p {{ compose_dir }}
    creates: "{{ compose_dir }}"

  - name: Upload compose.yaml
    upload:
      src: stacks/miniflux/compose.yaml
      dest: "{{ compose_dir }}/compose.yaml"
      mode: "0644"

  - name: Upload starter-feeds.opml (for in-UI import)
    upload:
      src: stacks/miniflux/starter-feeds.opml
      dest: "{{ compose_dir }}/starter-feeds.opml"
      mode: "0644"

  - name: Seed .env from template (only if absent)
    upload:
      src: stacks/miniflux/.env.example
      dest: "{{ compose_dir }}/.env"
      mode: "0644"
    when: "[ ! -f {{ compose_dir }}/.env ]"

  # ── compose pull + bring up ─────────────────────────────────────────

  - name: docker compose pull (~250 MB total — postgres + miniflux)
    shell: |
      set -o pipefail
      cd {{ compose_dir }} && docker compose pull --quiet 2>&1 \
        | grep -vE '^\s*[0-9a-f]{8,16}\s+(Extracting|Pull complete|Pulling fs layer|Verifying Checksum|Download complete|Waiting|Already exists|Downloading|Pulling from)'

  - name: docker compose up -d
    shell: cd {{ compose_dir }} && docker compose up -d

  - name: Wait for /healthcheck to respond (or report .env passwords still placeholder)
    shell: |
      for i in $(seq 1 30); do
        # Miniflux returns 200 on /healthcheck once running.
        if curl -sf -o /dev/null --max-time 3 http://localhost:{{ host_port }}/healthcheck; then
          exit 0
        fi
        sleep 5
      done
      # Don't fail hard — first run with placeholder passwords will
      # never come up healthy. Tell the operator what to do.
      echo
      echo "Miniflux didn't come healthy in 150 s — likely cause:"
      echo "  /opt/docker/compose/miniflux/.env still has CHANGE_ME passwords."
      echo "  Edit them (see stacks/miniflux/README.md) and re-run docker compose up -d."
      exit 0
    changed_when: "false"

verify:
  - name: Container miniflux exists
    shell: docker inspect miniflux --format '{{.State.Status}}' | grep -qE 'running|created|restarting'
    changed_when: "false"

  - name: Container miniflux-db exists
    shell: docker inspect miniflux-db --format '{{.State.Status}}' | grep -qE 'running|created|restarting'
    changed_when: "false"

  - name: Both containers on traefik-net
    shell: docker inspect miniflux miniflux-db --format '{{json .NetworkSettings.Networks}}' | grep -q traefik-net
    changed_when: "false"