---
# Supply kritomas_owncast_hostname and kritomas_owncast_cluster_issuer in inventory
# or an external vars file. Do not guess a domain or reuse eom.dev's ingress.
- name: Deploy an isolated Owncast instance for a kritomas
  hosts: alpha-control-plane
  become: true
  vars_files:
    - ../secrets.yaml
  vars:
    owncast_namespace: owncast-kritomas
    owncast_name: owncast-kritomas
    owncast_pvc_name: owncast-kritomas
    owncast_image: owncast/owncast:0.3.0
    owncast_storage_size: 128Gi
    owncast_resources:
      requests:
        cpu: "1.5"
    owncast_service_type: LoadBalancer
    owncast_external_traffic_policy: Local
    owncast_ingress_enabled: true
    owncast_hostname: kritomas.eom.dev
    owncast_ingress_class: nginx
    owncast_tls_enabled: true
    owncast_cluster_issuer: ca-issuer
    owncast_tls_secret_name: owncast-kritomas
    owncast_onion_enabled: false
  pre_tasks:
    - name: Require kritomas-specific settings before changing the cluster
      ansible.builtin.assert:
        that:
          - kritomas_owncast_hostname | default('') | length > 0
          - kritomas_owncast_hostname | default('') != 'owncast.eom.dev'
          - kritomas_owncast_cluster_issuer | default('') | length > 0
          - owncast_namespace != 'owncast'
          - owncast_hostname != 'owncast.eom.dev'
        fail_msg: Supply kritomas_owncast_hostname and kritomas_owncast_cluster_issuer for a separate instance.
  roles:
    - ansible-role-owncast