---
- name: Download oauth2-proxy
  become: true
  ansible.builtin.get_url:
    url: "https://github.com/oauth2-proxy/oauth2-proxy/releases/download/v{{ nginx_proxy_oauth2_proxy_version }}/oauth2-proxy-v{{ nginx_proxy_oauth2_proxy_version }}.linux-amd64.tar.gz"
    dest: /tmp/oauth2-proxy.tar.gz
    mode: "0644"

- name: Extract oauth2-proxy binary
  become: true
  ansible.builtin.unarchive:
    src: /tmp/oauth2-proxy.tar.gz
    dest: /tmp/
    remote_src: true

- name: Install oauth2-proxy binary
  become: true
  ansible.builtin.copy:
    src: >-
      /tmp/oauth2-proxy-v{{ nginx_proxy_oauth2_proxy_version }}.linux-amd64/oauth2-proxy
    dest: /usr/local/bin/oauth2-proxy
    mode: "0755"
    owner: root
    group: root
    remote_src: true

- name: Create oauth2-proxy config directory
  become: true
  ansible.builtin.file:
    path: /etc/oauth2-proxy
    state: directory
    mode: "0755"
    owner: root
    group: root

- name: Deploy oauth2-proxy configuration
  become: true
  ansible.builtin.template:
    src: oauth2-proxy.cfg.j2
    dest: /etc/oauth2-proxy/oauth2-proxy.cfg
    mode: "0640"
    owner: root
    group: nginx

- name: Create oauth2-proxy log file
  become: true
  ansible.builtin.file:
    path: "{{ nginx_proxy_oauth2_proxy_log_file }}"
    state: touch
    mode: "0644"
    owner: nginx
    group: nginx

- name: Deploy oauth2-proxy systemd service
  become: true
  ansible.builtin.template:
    src: oauth2-proxy.service.j2
    dest: /etc/systemd/system/oauth2-proxy.service
    mode: "0644"
    owner: root
    group: root

- name: Enable and start oauth2-proxy
  become: true
  ansible.builtin.systemd:
    name: oauth2-proxy
    state: started
    enabled: true
    daemon_reload: true