- hosts:
    - numquam
  roles:
    - role: timezone
      tags: timezone
    - role: lusers
      tags: lusers
    - role: superusers
      tags: superusers
    - role: apt-repos
      tags: apt-repos
      become: yes
    - role: unattended-upgrades
      tags: unattended-upgrades
    - role: postgresql-server
      tags: postgresql-server
      become: yes
    - role: rosin
      tags: rosin
      become: yes

- hosts:
    - numquam
  handlers:
    - name: reload nginx
      become: yes
      service:
        name: nginx
        state: reloaded
  tasks:
    - become: yes
      apt:
        name:
          - docker-ce
          - docker-ce-cli
        install_recommends: no
      tags: packages
    - become: yes
      systemd:
        unit: docker.service
        enabled: yes
        state: started

    - become: yes
      tags: nginx
      copy:
        dest: /etc/nginx/sites-enabled/odoo.trygvis.io
        content: |
          # Managed by Ansible

          server {
              server_name odoo.trygvis.io;
              access_log /var/log/nginx/odoo.trygvis.io-access;
              error_log /var/log/nginx/odoo.trygvis.io-error error;

              listen 443 ssl; # managed by Certbot
              ssl_certificate /etc/letsencrypt/live/odoo.trygvis.io/fullchain.pem; # managed by Certbot
              ssl_certificate_key /etc/letsencrypt/live/odoo.trygvis.io/privkey.pem; # managed by Certbot
              include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
              ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot

              location / {
                  proxy_set_header Host $host;
                  # proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                  # proxy_set_header X-Forwarded-Proto $scheme;
                  proxy_pass http://127.0.0.1:8069;
                  proxy_connect_timeout 10s;
                  proxy_read_timeout 300s;
                  proxy_send_timeout 300s;
              }

              location /longpolling {
                  proxy_pass http://127.0.0.1:8070;
              }

          #    # cache some static data in memory for 60mins
          #     location ~* /web/static/ {
          #         proxy_cache_valid 200 60m;
          #         proxy_buffering on;
          #         expires 864000;
          #         proxy_pass http://127.0.0.1:8069;
          #     }
          }

          server {
              if ($host = odoo.trygvis.io) {
                  return 301 https://$host$request_uri;
              }

              server_name odoo.trygvis.io;
              listen 80;
              return 404;
          }
      notify: reload nginx