- name: ensure unifi.container systemd unit exists
  template:
    src: unifi.container.j2
    dest: /etc/containers/systemd/unifi.container
    owner: root
    group: root
    mode: u=rw,go=r
  notify:
  - reload systemd
  - restart unifi
  tags:
  - container
- name: flush_handlers
  meta: flush_handlers

- name: ensure unifi.service is running
  systemd:
    name: unifi.service
    state: started
  tags:
  - service

- name: ensure firewall is configured for unifi
  firewalld:
    port: 8080/tcp
    permanent: true
    immediate: true
    state: enabled
  when: host_uses_firewalld|d(true)|bool
  tags:
  - firewalld

- name: ensure caddy is configured to proxy for unifi
  template:
    src: unifi.caddyfile.j2
    dest: /etc/caddy/Caddyfile.d/unifi.caddyfile
    owner: root
    group: root
    mode: u=rw,go=r
  notify:
  - reload caddy