- name: Create a pocketid group
  group:
    name: pocketid
    state: present
    gid: 1050 

- name: Create a pocketid user
  user:
    name: pocketid
    uid: 1050
    group: 1050
    comment: "pocketid user"
    shell: /bin/bash
    state: present
    create_home: yes

- name: Create pocketid directory
  file:
    path: /home/pocketid/pocketid
    state: directory
    mode: '0755'
    owner: pocketid
    group: pocketid

- name: Create encryption key file
  template:
    src: pocket_id_encryption_key.j2
    dest: /home/pocketid/pocketid/pocket_id_encryption_key
    owner: pocketid
    group: pocketid
    mode: '0600'  
  no_log: true    # Prevents secret from appearing in logs

- name: Create env file
  template:
    src: templates/pocketid.env.j2
    dest: /home/pocketid/pocketid/.env
    owner: pocketid
    group: pocketid
    mode: '0600'  
  no_log: true    # Prevents secret from appearing in logs

- name: Create or update docker-compose
  template:
    src: templates/docker-compose.yaml.j2
    dest: /home/pocketid/pocketid/docker-compose.yaml
    owner: pocketid
    group: pocketid
    mode: 0600

- name: Create and start pocketid
  community.docker.docker_compose_v2:
    project_src: /home/pocketid/pocketid/
    build: always
  register: output