# SPDX-License-Identifier: MIT-0
---
- name: Install Koji Utils package (which includes kojira)
  ansible.builtin.dnf:
    name: ["koji-utils"]
    state: present

- name: Configure kojira
  ansible.builtin.template:
    src: kojira.conf.j2
    dest: "{{ koji_remote_kojira_conf_path }}"
    mode: "0644"

- name: Copy Koji certificates for kojira
  ansible.builtin.copy:
    src: "{{ koji_pki_dir }}/{{ item.src }}"
    dest: "{{ item.dest }}"
    owner: root
    group: root
    mode: "{{ item.mode }}"
  loop:
    - { src: "{{ koji_ca_name }}_cert.crt", dest: "/etc/pki/koji/koji_ca_cert.crt", mode: "0644" }
    - { src: "kojira.crt", dest: "/etc/pki/koji/kojira.crt", mode: "0644" }
    - { src: "kojira.key", dest: "/etc/pki/koji/kojira.key", mode: "0600" }

- name: "Concatenate certificate and key into a PEM file"
  ansible.builtin.shell: cat /etc/pki/koji/kojira.crt /etc/pki/koji/kojira.key > {{ kojira_pem_path }}
  args:
    creates: "{{ kojira_pem_path }}"

- name: Set permissions on kojira PEM file
  ansible.builtin.file:
    path: "{{ kojira_pem_path }}"
    mode: "0600"

- name: Start and enable kojira service
  ansible.builtin.service:
    name: kojira
    state: started
    enabled: true