---
- name: Verify forgejo role
  hosts: localhost
  gather_facts: false
  vars:
    forgejo_data_dir: /tmp/sovereign_test/forgejo
    forgejo_domain: git.test.example.com
    forgejo_version: latest
    forgejo_db_password: test_forgejo_db
    tenant_name: Test Corp
    forgejo_ssh_port: 2222

  tasks:
    - name: Check forgejo data directory exists
      ansible.builtin.stat:
        path: "/tmp/sovereign_test/forgejo"
      register: data_dir_stat

    - name: Assert forgejo data directory is present
      ansible.builtin.assert:
        that: data_dir_stat.stat.isdir
        fail_msg: "Data directory /tmp/sovereign_test/forgejo was not created"

    - name: Check data subdirectory exists
      ansible.builtin.stat:
        path: "/tmp/sovereign_test/forgejo/data"
      register: data_subdir_stat

    - name: Assert data subdirectory is present
      ansible.builtin.assert:
        that: data_subdir_stat.stat.isdir
        fail_msg: "Data subdirectory /tmp/sovereign_test/forgejo/data was not created"

    - name: Check gitea public img subdirectory exists
      ansible.builtin.stat:
        path: "/tmp/sovereign_test/forgejo/data/gitea/public/img"
      register: img_dir_stat

    - name: Assert gitea public img subdirectory is present
      ansible.builtin.assert:
        that: img_dir_stat.stat.isdir
        fail_msg: "Directory /tmp/sovereign_test/forgejo/data/gitea/public/img was not created"

    - name: Check config subdirectory exists
      ansible.builtin.stat:
        path: "/tmp/sovereign_test/forgejo/config"
      register: config_dir_stat

    - name: Assert config subdirectory is present
      ansible.builtin.assert:
        that: config_dir_stat.stat.isdir
        fail_msg: "Config directory /tmp/sovereign_test/forgejo/config was not created"

    - name: Check docker-compose.yml exists
      ansible.builtin.stat:
        path: "/tmp/sovereign_test/forgejo/docker-compose.yml"
      register: compose_stat

    - name: Assert docker-compose.yml was rendered
      ansible.builtin.assert:
        that: compose_stat.stat.exists
        fail_msg: "docker-compose.yml was not rendered for forgejo"

    - name: Read docker-compose.yml
      ansible.builtin.slurp:
        src: "/tmp/sovereign_test/forgejo/docker-compose.yml"
      register: compose_raw

    - name: Set compose content fact
      ansible.builtin.set_fact:
        compose: "{{ compose_raw.content | b64decode }}"

    - name: Assert forgejo image is present
      ansible.builtin.assert:
        that: "'codeberg.org/forgejo/forgejo' in compose"
        fail_msg: "codeberg.org/forgejo/forgejo image not found in docker-compose.yml"

    - name: Assert forgejo domain traefik rule is present
      ansible.builtin.assert:
        that: "'Host(`git.test.example.com`)' in compose"
        fail_msg: "Traefik rule for git.test.example.com not found in docker-compose.yml"

    - name: Assert app name env var is present
      ansible.builtin.assert:
        that: "'FORGEJO____APP_NAME: \"Test Corp\"' in compose"
        fail_msg: "FORGEJO____APP_NAME: \"Test Corp\" not found in docker-compose.yml"

    - name: Assert forgejo db password is present
      ansible.builtin.assert:
        that: "'test_forgejo_db' in compose"
        fail_msg: "forgejo_db_password not found in docker-compose.yml"

    - name: Assert GELF logging address is present
      ansible.builtin.assert:
        that: "'udp://127.0.0.1:12201' in compose"
        fail_msg: "GELF logging address udp://127.0.0.1:12201 not found in docker-compose.yml"

    - name: Assert sovereign network is external
      ansible.builtin.assert:
        that: "'external: true' in compose"
        fail_msg: "external: true not found in docker-compose.yml networks section"

    - name: Assert SSH port is present
      ansible.builtin.assert:
        that: "'2222' in compose"
        fail_msg: "forgejo_ssh_port 2222 not found in docker-compose.yml"