- name: Configure hatoria.banananet.work
  hosts: hatoria.banananet.work
  vars:
    bnet_cloud_domain: "cloud.banananet.work"
    bnet_cloud_username: "{{ bnet_cloud_domain | domain_to_username }}"
  roles:
    - role: nginx/default_server # Would not be configurable otherwise
    # Git Server
    - role: server/gitea
      tags:
        - git.banananet.work
      domain: git.banananet.work
      gitea_system_user: git
      database_user: gitea
    - role: server/drone.io/server
      domain: ci.git.banananet.work
      bind_port: 12824
      gitea_server_url: https://git.banananet.work
      gitea_client_id: "{{ drone_ci_gitea_main_oauth2_client_id }}"
      gitea_client_secret: "{{ drone_ci_gitea_main_oauth2_client_secret }}"
    - role: server/drone.io/runner
      drone_server_host: ci.git.banananet.work
    # Banananet.work
    - role: server/static
      tags:
        - banananet.work
      domain: banananet.work
      repo: git@git.banananet.work:banananetwork/main-static.git
    - role: nginx/forward
      tags:
        - banananet.work
      domain: www.banananet.work
      dest: banananet.work
    # SpotMe Server
    - role: server/spotme
      tags:
        - spotme.banananet.work
      domain: spotme.banananet.work
      bind_port: 12820
    # Firefox Sync Server
    - role: server/firefox-sync
      tags:
        - firefox.banananet.work
      domain: firefox.banananet.work
    # RSS Server
    # TODO Manual initialization of database required
    - role: server/tt-rss
      tags:
        - rss.banananet.work
      domain: rss.banananet.work
    # Linx Server
    - role: server/linx
      tags:
        - drop.banananet.work
      domain: drop.banananet.work
      bind_port: 12840
      use_hdd_directory: yes
      site_name: "BananaNetwork Drop Server"
#    # Admin Panel
#    - role: server/php
#      domain: nvak.banananet.work
#      repo: PHPMYADMIN # TODO
    # BananaNetwork Keys
#    - role: server/node
#      domain: keys.banananet.work
#      repo: https://git.banananet.work/banananetwork/keys.git
#      bind_port: 12822
#      system_user: keys-banananet-work
    # Nextcloud Server
    - role: server/nextcloud
      tags:
        - cloud.banananet.work
      domain: "{{ bnet_cloud_domain }}"
      system_user: "{{ bnet_cloud_username }}"
      nextcloud_admin_user: "{{ global_username }}"
      enabled_apps_list:
        - accessibility
        - activity
        - admin_audit
        - apporder
        - bruteforcesettings
        - calendar
        - checksum
        - cloud_federation_api
        - comments
        - contacts
        - contactsinteraction
        - cospend
        - dav
        - deck
        - external
        - federatedfilesharing
        - federation
        - files
        - files_automatedtagging
        - files_external
        - files_markdown
        - files_pdfviewer
        - files_rightclick
        - files_sharing
        - files_trashbin
        - files_versions
        - files_videoplayer
        - firstrunwizard
        - logreader
        - lookup_server_connector
        - mail
        - metadata
        - nextcloud_announcements
        - notes
        - notifications
        - oauth2
        - ocdownloader
        - password_policy
        - phonetrack
        - photos
        - polls
        - privacy
        - provisioning_api
        - quota_warning
        - ransomware_protection
        - serverinfo
        - settings
        - sharebymail
        - sociallogin
        - socialsharing_email
        - support
        - suspicious_login
        - systemtags
        - tasks
        - text
        - theming
        - twofactor_admin
        - twofactor_backupcodes
        - twofactor_gateway
        - twofactor_nextcloud_notification
        - twofactor_totp
        - twofactor_u2f
        - updatenotification
        - viewer
        - workflowengine
      disabled_apps_list:
        - encryption
        - files_readmemd
        - recommendations
        - spreed
        - survey_client
        - user_ldap
    # Forum der Schande
    - role: server/php
      tags:
        - forumderschan.de
      domain: forumderschan.de
      repo: git@git.banananet.work:strichliste/strichliste-php.git
      root: html
      installation_includes:
        - includes
    - role: nginx/forward
      tags:
        - forumderschan.de
      domain: www.forumderschan.de
      dest: forumderschan.de
    # Monitors
    - role: misc/tg_monitor_cmd
      tags: tg-monitor-cmd
      monitor_name: forumderschan.de-NS
      description: "NS entries of forumderschan.de"
      command_str: >-
        /usr/bin/dig
        @a.nic.de.
        forumderschan.de. NS
        | grep --only-matching --perl-regexp '(?<=\s)(\S+\.)+(?=$)'
        | sort
      use_shell: yes
    # WG Nextcloud
    - role: server/nextcloud
      tags:
        - wg.banananet.work
      domain: wg.banananet.work
      nextcloud_admin_user: felix
      enabled_apps_list:
        - accessibility
        - activity
        - apporder
        - bruteforcesettings
        - calendar
        - checksum
        - cloud_federation_api
        - comments
        - contacts
        - cookbook
        - cospend
        - dav
        - deck
        - encryption
        - external
        - federatedfilesharing
        - federation
        - files
        - files_automatedtagging
        - files_external
        - files_pdfviewer
        - files_rightclick
        - files_sharing
        - files_trashbin
        - files_versions
        - files_videoplayer
        - firstrunwizard
        - logreader
        - lookup_server_connector
        - metadata
        - nextcloud_announcements
        - notes
        - notifications
        - oauth2
        - ocdownloader
        - password_policy
        - photos
        - polls
        - privacy
        - provisioning_api
        - quota_warning
        - ransomware_protection
        - serverinfo
        - settings
        - sharebymail
        - side_menu
        - sociallogin
        - socialsharing_email
        - support
        - suspicious_login
        - systemtags
        - tasks
        - text
        - theming
        - twofactor_admin
        - twofactor_backupcodes
        - twofactor_gateway
        - twofactor_nextcloud_notification
        - twofactor_totp
        - twofactor_u2f
        - updatenotification
        - viewer
        - workflowengine
      disabled_apps_list:
        - admin_audit
        - recommendations
        - spreed
        - survey_client
        - user_ldap
    # WG Minecraft
    - role: server/minecraft
      tags:
        - mc.wg.banananet.work
      domain: mc.wg.banananet.work
      minecraft_version: "1.16.4"
      minecraft_ram: "16G"
      minecraft_port: 25566
      config:
        difficulty: normal
        motd: ChaosCraft
        view-distance: 16
#    # Stadtpiraten
#    - role: server/typo3
#      domain: piraten.dev.banananet.work
#    - role: server/php
#      domain: forum.piraten.dev.banananet.work
#      repo: PHPBB # TODO
#      version: master
#    # Stadtpiraten (prod)
#    - role: nginx/forward
#      domain: www.stadtpiraten-karlsruhe.de
#      dest: stadtpiraten-karlsruhe.de
    # SMD/SFC HST 2020
    - role: nginx/forward
      tags:
        - proj-hst
        - hst21.banananet.work
      domain: hst20.banananet.work
      dest: hst21.banananet.work
    - role: server/nextcloud
      tags:
        - proj-hst
        - hst21.banananet.work
      domain: hst21.banananet.work
      system_user: nc-hst21
      nextcloud_admin_user: felix
      enabled_apps_list:
        - accessibility
        - activity
        - apporder
        - bruteforcesettings
        - calendar
        - checksum
        - cloud_federation_api
        - comments
        - contacts
        - contactsinteraction
        - cospend
        - dav
        - deck
        - encryption
        - external
        - federatedfilesharing
        - federation
        - files
        - files_automatedtagging
        - files_linkeditor
        - files_mindmap
        - files_pdfviewer
        - files_rightclick
        - files_sharing
        - files_trashbin
        - files_versions
        - files_videoplayer
        - firstrunwizard
        - forms
        - logreader
        - lookup_server_connector
        - mail
        - maps
        - metadata
        - nextcloud_announcements
        - notes
        - notifications
        - oauth2
        - password_policy
        - photos
        - polls
        - privacy
        - provisioning_api
        - quota_warning
        - ransomware_protection
        - serverinfo
        - settings
        - sharebymail
        - socialsharing_email
        - spreed
        - support
        - suspicious_login
        - systemtags
        - tasks
        - text
        - theming
        - twofactor_admin
        - twofactor_backupcodes
        - twofactor_gateway
        - twofactor_totp
        - twofactor_u2f
        - updatenotification
        - viewer
        - whiteboard
        - workflowengine
      disabled_apps_list:
        - admin_audit
        - dashboard
        - files_external
        - recommendations
        - sociallogin
        - survey_client
        - user_ldap
        - user_status
        - weather_status
  tasks:
    - name: Configure custom archive Nextcloud directory on hdd for personal usages
      tags:
        - cloud.banananet.work
        - custom_archive_directory
      vars:
        archive_directory: "{{ global_hdd_directory }}/{{ bnet_cloud_domain }}~personal-archive"
      block:
        - name: Create archive directory
          file:
            state: directory
            path: "{{ archive_directory }}"
            owner: "{{ bnet_cloud_username }}"
            group: "{{ bnet_cloud_username }}"
            mode: "u=rwx,g=rx,o="
          register: archive_directory_task
        - name: Show message to user about path on changes
          debug:
            msg: >-
              Changed custom archive directory: Please ensure you (re-)configure this directory properly on your Nextcloud instance: {{ archive_directory | quote }}
          when: archive_directory_task.changed