---
# Supply friend_owncast_hostname and friend_owncast_cluster_issuer in inventory
# or an external vars file. Do not guess a domain or reuse eom.dev's ingress.
- name: Deploy an isolated Owncast instance for a friend
  hosts: localhost
  connection: local
  gather_facts: false
  vars:
    owncast_namespace: owncast-friend
    owncast_name: owncast-friend
    owncast_pvc_name: owncast-friend
    owncast_image: owncast/owncast:0.3.0
    owncast_storage_size: 128Gi
    owncast_resources:
      requests:
        cpu: "1.5"
    owncast_service_type: LoadBalancer
    owncast_external_traffic_policy: Local
    owncast_ingress_enabled: true
    owncast_hostname: "{{ friend_owncast_hostname | default('') }}"
    owncast_ingress_class: nginx
    owncast_tls_enabled: true
    owncast_cluster_issuer: "{{ friend_owncast_cluster_issuer | default('') }}"
    owncast_tls_secret_name: owncast-friend
    owncast_onion_enabled: false
  pre_tasks:
    - name: Require friend-specific settings before changing the cluster
      ansible.builtin.assert:
        that:
          - friend_owncast_hostname | default('') | length > 0
          - friend_owncast_hostname | default('') != 'owncast.eom.dev'
          - friend_owncast_cluster_issuer | default('') | length > 0
          - owncast_namespace != 'owncast'
          - owncast_hostname != 'owncast.eom.dev'
        fail_msg: Supply friend_owncast_hostname and friend_owncast_cluster_issuer for a separate instance.
  roles:
    - ansible-role-owncast