---

- name: set APT keyring
  ansible.builtin.set_fact:
    lxc_apt_keyring_dir: /etc/apt/trusted.gpg.d

- name: "{{ lxc_php_version }} - Install dependency packages"
  community.general.lxc_container:
    name: "{{ lxc_php_version }}"
    container_command: "DEBIAN_FRONTEND=noninteractive apt install -y wget apt-transport-https gnupg"

- name: "{{ lxc_php_version }} - fix bullseye repository"
  ansible.builtin.replace:
    dest: "{{ lxc_rootfs }}/etc/apt/sources.list"
    regexp: 'bullseye/updates'
    replace: 'bullseye-security'

- name: "{{ lxc_php_version }} - Add sury repo"
  ansible.builtin.lineinfile:
    dest: "{{ lxc_rootfs }}/etc/apt/sources.list.d/sury.list"
    line: "{{ item }}"
    state: present
    create: yes
    mode: "0644"
  loop:
    - "deb [signed-by={{ apt_keyring_dir }}/sury.gpg] https://packages.sury.org/php/ bullseye main"
    - "deb [signed-by={{ apt_keyring_dir }}/pub_evolix.asc] http://pub.evolix.org/evolix bullseye-php82 main"

- name: copy pub.evolix.net GPG key
  ansible.builtin.copy:
    src: pub_evolix.asc
    dest: /var/lib/lxc/{{ lxc_php_version }}/rootfs{{ apt_keyring_dir }}/pub_evolix.asc
    mode: "0644"
    owner: root
    group: root

- name: copy packages.sury.org GPG Key
  ansible.builtin.copy:
    src: sury.gpg
    dest: /var/lib/lxc/{{ lxc_php_version }}/rootfs{{ apt_keyring_dir }}/sury.gpg
    mode: "0644"
    owner: root
    group: root

- name: "{{ lxc_php_version }} - Update APT cache"
  community.general.lxc_container:
    name: "{{ lxc_php_version }}"
    container_command: "DEBIAN_FRONTEND=noninteractive apt update"

- name: "{{ lxc_php_version }} - Install PHP packages"
  community.general.lxc_container:
    name: "{{ lxc_php_version }}"
    container_command: "DEBIAN_FRONTEND=noninteractive apt install -y php-fpm php-cli php-gd php-intl php-imap php-ldap php-mysql php-pgsql php-sqlite3 php-curl php-zip php-mbstring php-xml php-zip composer libphp-phpmailer"

- name: "{{ lxc_php_version }} - Copy evolinux PHP configuration"
  ansible.builtin.template:
    src: z-evolinux-defaults.ini.j2
    dest: "{{ line_item }}"
    mode: "0644"
  notify: "Reload {{ lxc_php_version }}-fpm"
  loop:
    - "{{ lxc_rootfs }}/etc/php/8.2/fpm/conf.d/z-evolinux-defaults.ini"
    - "{{ lxc_rootfs }}/etc/php/8.2/cli/conf.d/z-evolinux-defaults.ini"
  loop_control:
    loop_var: line_item

- ansible.builtin.include: "mail_opensmtpd.yml"