---
# tasks file for mastodon
- name: Add bitnami repository
  kubernetes.core.helm_repository:
    name: bitnami
    repo_url: https://charts.bitnami.com/bitnami

- name: Update Helm repos
  command: helm repo update

- name: Deploy Mastodon
  kubernetes.core.helm:
    name: mastodon
    chart_ref: bitnami/mastodon
    release_namespace: mastodon
    create_namespace: true
    timeout: 300s
    values:
      adminUser: "mastodon"
      adminEmail: "mastodon@mail.eom.dev"
      adminPassword: "{{ mastodon_admin_password }}"
      otpSecret: ""
      secretKeyBase: ""
      vapidPrivateKey: ""
      vapidPublicKey: ""
      activeRecordEncryptionDeterministicKey: ""
      activeRecordEncryptionKeyDerivationSalt: ""
      activeRecordEncryptionPrimaryKey: ""
      extraConfig:
        LDAP_ENABLED: "true"
        LDAP_HOST: openldap.auth.svc.cluster.local
        LDAP_PORT: "387"
        LDAP_METHOD: plain
        LDAP_BASE: dc=eom,dc=dev
        LDAP_BIND_DN: cn=readonly,dc=eom,dc=dev
        LDAP_PASSWORD: "{{ ldap_readonly_password }}"
        LDAP_UID: uid
        LDAP_SEARCH_FILTER: "(&(objectClass=posixAccount)(uid=%{uid}))"
        LDAP_MAIL: mail
      enableS3: false
      localDomain: "mastodon.eom.dev"
      smtp:
        server: "mail.eom.dev"
        port: 587
        from_address: "mastodon@mail.eom.dev"
        domain: "mail.eom.dev"
        reply_to: "mastodon@mail.eom.dev"
        delivery_method: smtp
        ca_file: /etc/ssl/certs/ca-certificates.crt
        openssl_verify_mode: none
        enable_starttls_auto: true
        tls: true
        auth_method: starttls
        login: "mastodon"
        password: "{{ mastodon_mail_password }}"
      persistence:
        enabled: true
        size: 128Gi
      initJob:
        precompileAssets:
          resourcesPreset: "micro"
      redis:
        auth:
          password: "{{ mastodon_redis_password }}"
      postgresql:
        auth:
          password: "{{ mastodon_postgres_password }}"
      minio:
        enabled: false
      apache:
        service:
          type: ClusterIP 
          ports:
            http: 80
        ingress:
          enabled: true
          hostname: "mastodon.eom.dev"
          annotations:
            kubernetes.io/ingress.class: nginx
            cert-manager.io/cluster-issuer: ca-issuer
          tls:
            - hosts:
              - mastodon.eom.dev
              secretName: mastodon-tls