---
- include_vars: vault.yml

- name: Install git
  become: true
  apt:
    name: git
    state: present

- name: Create git group
  become: true
  group:
    name: git
    system: true

- name: Create git user
  become: true
  user:
    name: git
    group: git
    append: true
    groups:
      - sudo
      - mail
    create_home: true
    home: /home/git
    shell: /bin/bash
    system: true

- name: Create /var/lib/gitea directory
  become: true
  file:
    path: /var/lib/gitea
    state: directory
    owner: git
    group: git
    mode: 0750
    recurse: true

- name: Create /var/lib/gitea subdirectories
  become: true
  file:
    path: "/var/lib/gitea/{{ item }}"
    state: directory
    owner: git
    group: git
    mode: 0750
    recurse: true
  with_items:
    - custom
    - data
    - log

- name: Create /etc/gitea directory
  become: true
  file:
    path: /etc/gitea
    state: directory
    owner: root
    group: git
    mode: 0750
    recurse: false

- name: Copy /etc/gitea/app.ini
  become: true
  template:
    src: app.ini.j2
    dest: /etc/gitea/app.ini
    owner: root
    group: git
    mode: 0640