site.yml

---
# for installation options see https://github.com/CactuseSecurity/firewall-orchestrator/blob/master/documentation/installer/install-advanced.md

- hosts: all
  roles:
    - { role: common }
  tags:
    - backend
    - frontend
    - importer
    - ui
    - api

- hosts: databaseserver
  roles:
    - { role: database, when: "not installation_mode == 'uninstall'" }
  tags:
    - backend

- hosts: middlewareserver
  roles:
    - { role: openldap-server, when: "not installation_mode == 'uninstall'" }
    - { role: lib, when: "not installation_mode == 'uninstall'" }
    - { role: middleware, when: "not installation_mode == 'uninstall'" }
  tags:
    - backend
    - csharp

- hosts: apiserver
  roles:
    - { role: docker, when: "not installation_mode == 'uninstall'" }
  tags:
    - backend
    - api

# do not put this into the same play as docker (handler needs to run inbetween!)
- hosts: apiserver 
  roles:
    - { role: api, when: "not installation_mode == 'uninstall'" }
  tags:
    - backend
    - api

- hosts: frontends
  roles:
    - { role: lib, when: "not installation_mode == 'uninstall'"}
    - { role: ui, when: "not installation_mode == 'uninstall'"}
  tags:
    - frontend
    - csharp
    - ui

- hosts: sampleserver
  roles:
    - { role: sample-data, when: "add_demo_data|bool and not installation_mode == 'uninstall'" }
  tags:
    - samples
    - backend
    - importer

- hosts: middlewareserver
  roles:
    - { role: sample-auth-data, when: "add_demo_data|bool and not installation_mode == 'uninstall'" }
  tags:
    - samples
    - backend
  # todo: add a meta dependency on role sample-data

- hosts: importers
  roles:
    - { role: importer, when: "not installation_mode == 'uninstall'" }
  tags:
    - frontend
    - importer

- hosts: frontends
  tasks:
    - name: restart ui service to display new version
      service:
        name: "{{ ui_service_name }}"
        state: restarted
      become: true
      when: "not installation_mode == 'uninstall'"
  tags:
    - frontend
    - ui

- hosts: testservers
  roles:
    - { role: webhook, when: install_webhook|bool and not installation_mode == 'uninstall' }
  tags:
    - test

- hosts: all
  roles:
    - { role: finalize, when: "not installation_mode == 'uninstall'" }
  tags:
    - finalize
    - backend
    - frontend
    - importer
    - ui

- hosts: all
  roles:
    - { role: test, when: not installation_mode == 'uninstall' }
  tags:
    - test
    - quicktest

- hosts: all
  tasks:
    # display status & pwds
    - name: show listener status
      import_tasks: scripts/show-fworch-listeners.yml
      become: true

    - name: display secrets for this installation
      debug:
        msg:
          - "Your initial UI admin password is '{{ admin_password }}'"
          - "Your api hasura admin secret is '{{ api_hasura_admin_secret }}'"
      when: |
        admin_password is defined and 
        api_hasura_admin_secret is defined