- hosts: server_web
  vars:
    user: "smauro"
    root_password: "testtest"
  tasks:
    # 1. Passer à root et installer sudo (si pas déjà installé)
    - name: Passer à root et installer sudo
      become: yes
      become_user: root
      become_method: su
      command: apt install sudo -y
      vars:
        ansible_become_pass: "{{ root_password }}"
      register: result
      when: ansible_facts.packages['sudo'] is not defined

    - name: Afficher le résultat de l'installation de sudo
      debug:
        var: result

    # 2. Ajouter l'utilisateur au groupe sudo
    - name: Ajouter l'utilisateur au groupe sudo
      user:
        name: "{{ user }}"
        groups: sudo
        append: yes
      become: yes
      become_user: root
      when: ansible_facts.packages['sudo'] is defined

    # 3. Modifier le fichier sources.list
    - name: Modifier le fichier sources.list
      copy:
        dest: /etc/apt/sources.list
        content: |
          deb http://deb.debian.org/debian/ bookworm main non-free-firmware
          deb-src http://deb.debian.org/debian/ bookworm main non-free-firmware
          
          deb http://security.debian.org/debian-security bookworm-security main non-free-firmware
          deb-src http://security.debian.org/debian-security bookworm-security main non-free-firmware
          
          # bookworm-updates, to get updates before a point release is made;
          # see https://www.debian.org/doc/manuals/debian-reference/ch02.en.html#_updates_and_backports
          deb http://deb.debian.org/debian/ bookworm-updates main non-free-firmware
          deb-src http://deb.debian.org/debian/ bookworm-updates main non-free-firmware
      become: yes

    # 4. Mettre à jour les paquets
    - name: Mettre à jour les paquets
      apt:
        update_cache: yes
      become: yes

    # 5. Configurer le hostname
    - name: Configurer le hostname
      hostname:
        name: "Gitea"
      become: yes

    # 6. Changer le mot de passe root
    - name: Changer le mot de passe root
      user:
        name: root
        password: "{{ root_password | password_hash('sha512') }}"
      become: yes

    # 7. Configurer l'utilisateur smauro
    - name: Configurer l'utilisateur smauro
      user:
        name: "{{ user }}"
        password: "{{ root_password | password_hash('sha512') }}"
        shell: /bin/bash
        groups: sudo
        state: present
      become: yes

    - name: Installer les paquets nécessaires
      apt:
        name: ["sudo", "vim", "curl", "git", "htop", "gnupg", "apache2"]
        state: present
      become: yes

    # 8. Ajouter le dépôt Sury pour PHP 8.3
    #- name: Ajouter le dépôt Sury pour PHP 8.3
      #shell: echo "deb https://packages.sury.org/php/ bookworm main" | tee /etc/apt/sources.list.d/sury-php.list
        #become: yes

    # 9. Ajouter la clé GPG du dépôt Sury
    #- name: Ajouter la clé GPG du dépôt Sury via apt_key
    #  apt_key:
    #url: https://packages.sury.org/php/apt.gpg
         #state: present
         #become: yes

    - name: Mettre à jour et upgrader le système
      apt:
        update_cache: yes
        upgrade: dist
      become: yes

    # 10. Installer PHP 8.3 et ses extensions
    - name: Installer PHP 8.3 et modules requis
      apt:
        name:
          - php8.3-cli
          - php8.3-fpm
          - php8.3-common
          - php8.3-mbstring
          - php8.3-xml
          - php8.3-curl
          - php8.3-zip
          - php8.3-gd
          - php8.3-mysql
        state: present
      become: yes

    - name: Redémarrer PHP 8.3-FPM
      systemd:
        name: php8.3-fpm
        state: restarted
      become: yes

    # 11. Configurer Apache avec PHP 8.3
    #- name: Activer PHP 8.3 dans Apache
    #command: a2enmod php8.3
    #become: yes

    - name: Redémarrer Apache
      systemd:
        name: apache2
        state: restarted
      become: yes

    - name: Activer les modules rewrite et expires dans Apache
      command: a2enmod rewrite expires
      become: yes

    - name: Redémarrer Apache après activation des modules
      systemd:
        name: apache2
        state: restarted
      become: yes

    - name: Redémarrer la machine
      reboot:
        msg: "Redémarrage après configuration."
        pre_reboot_delay: 5
      become: yes