---

- name: Deploy letsencrypt certificate
  ansible.builtin.include_role:
    name: add_cert
  vars:
    add_cert_domain: "{{ forgejo_domain }}"
    add_cert_email: "{{ forgejo_server_admin }}"
    add_cert_post_hook: systemctl restart apache2

- name: Include apache2 tasks
  ansible.builtin.include_tasks: apache2.yml

- name: Include mariadb tasks
  ansible.builtin.include_tasks: mariadb.yml

- name: Include unix tasks
  ansible.builtin.include_tasks: unix.yml

- name: Include binary tasks
  tags: update-forgejo
  ansible.builtin.include_tasks:
    file: binary.yml
    apply:
      tags: update-forgejo

- name: Include backup tasks
  ansible.builtin.include_tasks: backup.yml

- name: Include start tasks
  ansible.builtin.include_tasks: start.yml

# fail2ban tasks need the forgejo log file, which should be created when forgejo runs
- name: Include fail2ban tasks
  ansible.builtin.include_tasks: fail2ban.yml

- name: Include logrotate tasks
  ansible.builtin.include_tasks: logrotate.yml

- name: Include repos tasks
  ansible.builtin.include_tasks: repos.yml
  when: forgejo_dump_path is defined

- name: Include ssh tasks
  ansible.builtin.include_tasks: ssh.yml