- hosts:
    - kjell-ct-102
  vars:
    traefik_version: 3.4.1
    traefik_checksum: md5:f299230ea9f247a672b187a79f2e76e6719ccbee
    traefik_template: traefik-proxy.toml.j2
  tasks:
    - become: yes
      apt:
        name:
          - etckeeper
          - sudo
      tags: packages,never
  
    - import_role:
        name: timezone
      tags: timezone,never
  
    - name: Load values from sops.yml
      community.sops.load_vars:
        name: env
        file: ../../sops.yml
      tags: traefik-server,never

    - import_role:
        name: traefik-server
      vars:
        traefik_environment:
          LINODE_TOKEN: "{{ env.linode_token }}"
      tags: traefik-server,never

    - name: /etc/systemd/services/traefik.service
      become: true
      template:
        src: "{{ traefik_template }}"
        dest: /etc/traefik/traefik.toml
        owner: root
        group: root
        mode: 0644
      register: template

    - name: systemctl restart traefik
      become: true
      systemd:
        daemon_reload: true
        unit: traefik
        enabled: true
        state: restarted
      when: template.changed