---
- name: Download internal cert
  ansible.builtin.get_url:
    url: https://ca.internal.simponic.xyz/roots.pem
    validate_certs: false
    dest: /etc/roots.pem
    checksum: sha256:12a1d52af6f4073c339946e8c67bdd48fa85590480385fcce7f16b6b60d40831

- name: ensure uptimekuma docker/compose exist
  file:
    path: /etc/docker/compose/uptimekuma
    state: directory
    owner: root
    group: root
    mode: 0700

- name: build uptimekuma docker-compose.yml.j2
  template:
    src: ../templates/docker-compose.yml.j2
    dest: /etc/docker/compose/uptimekuma/docker-compose.yml
    owner: root
    group: root
    mode: u=rw,g=r,o=r

- name: daemon-reload and enable uptimekuma
  ansible.builtin.systemd_service:
    state: restarted
    enabled: true
    name: docker-compose@uptimekuma