---
- name: Install nginx
  become: true
  ansible.builtin.dnf:
    name: nginx
    state: present

- name: Deploy nginx.conf
  become: true
  ansible.builtin.template:
    src: nginx.conf.j2
    dest: /etc/nginx/nginx.conf
    mode: "0644"
    owner: root
    group: root
  notify: Reload nginx

- name: Deploy server blocks configuration
  become: true
  ansible.builtin.template:
    src: nginx-server.conf.j2
    dest: /etc/nginx/conf.d/nginx-proxy.conf
    mode: "0644"
    owner: root
    group: root
  notify: Reload nginx

- name: Enable and start nginx
  become: true
  ansible.builtin.systemd:
    name: nginx
    state: started
    enabled: true
    daemon_reload: true

- name: Set SELinux context for Let's Encrypt certificates
  become: true
  ansible.builtin.command: >-
    semanage fcontext -a -t httpd_cert_t "/etc/letsencrypt(/.*)?"
  failed_when: false
  changed_when: false

- name: Restore SELinux context for Let's Encrypt directory
  become: true
  ansible.builtin.command: restorecon -Rv /etc/letsencrypt
  changed_when: false