---
- name: Install dns dependencies
  ansible.builtin.apt:
    update_cache: true
    install_recommends: false
    name:
      - python3-iso8601
      - python3-jinja2
      - python3-ldap
  register: apt_result
  retries: 3
  until: apt_result is succeeded

- name: Create dns directory
  ansible.builtin.file:
    path: /var/local/dns
    state: directory
    mode: "2775"
    owner: root
    group: _nounou

- name: Set ACL for dns directory
  ansible.posix.acl:
    path: /var/local/dns
    default: true
    entity: _nounou
    etype: group
    permissions: rwx
    state: query

- name: Clone dns repository
  ansible.builtin.git:
    repo: http://gitlab.adm.crans.org/nounous/dns.git
    dest: /var/local/dns
    version: main
    umask: "002"

- name: Deploy re2o config
  ansible.builtin.template:
    src: dns/re2o-config.ini.j2
    dest: /var/local/dns/re2o-config.ini
    mode: 0600
    owner: root
    group: root

- name: Create generated directory
  ansible.builtin.file:
    path: /var/cache/bind/generated
    state: directory
    mode: 0655
    owner: bind
    group: bind

- name: Create symbolic link to generated
  ansible.builtin.file:
    src: /var/cache/bind/generated
    dest: /var/local/dns/generated
    owner: root
    group: root
    state: link

- name: Deploy cron for dns
  ansible.builtin.template:
    src: cron.d/dns.j2
    dest: /etc/cron.d/dns