---
# tasks file for discourse
- name: Deploy Discourse
  kubernetes.core.helm:
    name: discourse
    chart_ref: bitnami/discourse
    release_namespace: discourse
    create_namespace: true
    values:
      auth:
        email: discourse@eom.dev
        username: discourse_admin
        password: "{{ discourse_admin_password }}"
      host: "discourse.eom.dev"
      siteName: 'Discourse'
      smtp:
        enabled: true
        host: "postfix.eom.dev"
        port: "587"
        user: "discourse"
        password: "{{ discourse_admin_password }}"
      image:
        debug: true
      discourse:
        skipInstall: false
        command:
          - /bin/bash
        args:
          - -ec
          - |
            git clone https://github.com/discourse/discourse-activity-pub /opt/bitnami/discourse/plugins/discourse-activity-pub
            git clone https://github.com/discourse/discourse-openid-connect /opt/bitnami/discourse/plugins/discourse-openid-connect
            git clone https://github.com/jonmbake/discourse-ldap-auth /opt/bitnami/discourse/plugins/discourse-ldap-auth
            chmod -R 777 /opt/bitnami/discourse/plugins/discourse-ldap-auth
            /opt/bitnami/ruby/bin/gem install --install-dir /opt/bitnami/discourse/plugins/discourse-ldap-auth pyu-ruby-sasl rubyntlm net-ldap omniauth-ldap
            /opt/bitnami/scripts/discourse/entrypoint.sh /opt/bitnami/scripts/discourse/run.sh
        persistPlugins: false
        compatiblePlugins: true
        resourcesPreset: none
      persistence:
        size: 2Ti
      ingress:
        enabled: true
        ingressClassName: "nginx"
        hostname: discourse.eom.dev
        annotations: 
          cert-manager.io/cluster-issuer: ca-issuer
        tls: true
      postgresql:
        enabled: true
        auth:
          enablePostgresUser: true
          postgresPassword: "{{ discourse_admin_password }}"
          password: "{{ discourse_admin_password }}"
        primary:
          persistence:
            size: 2Ti
      redis:
        enabled: true
        auth:
          password: "{{ discourse_admin_password }}"