# vim: ai et ts=2 st=2 sw=2 :
---
- name: Check if we are running supported os
  ansible.builtin.assert:
    fail_msg: "{{ role_name }} only supports ubuntu versions 20, 22, 24, centos versions 7, and RHEL version 8!"
    success_msg: "{{ role_name }} supports {{ ansible_distribution }} version {{ ansible_distribution_version }}"
    quiet: "{{ not ansible_check_mode }}"
    that: ( ansible_distribution|lower == "ubuntu" and ansible_distribution_version|int in [20, 22, 24] ) or ( ansible_distribution|lower == "fedora" and ansible_distribution_major_version|int in [41] ) or ( ansible_os_family|lower == "redhat" and ansible_distribution_major_version|int in [7, 8, 9, 10] )

- name: Chrony variables for ubuntu
  ansible.builtin.set_fact:
    chrony_path: /etc/chrony/
    chrony_service: chrony
    ntp_service: ntp
  when: ansible_os_family|lower == "debian"

- name: Chrony variables for redhat related oses
  ansible.builtin.set_fact:
    chrony_path: /etc/
    chrony_service: chronyd.service
    ntp_service: ntpd
  when: ansible_os_family|lower == "redhat"

## Install chrony

- name: Install chrony on ubuntu
  ansible.builtin.apt:
    name: chrony
    cache_valid_time: 3600
    update_cache: true
  when: ansible_os_family|lower == "debian"

- name: Install chrony on redhat related oses, except fedora distribution
  ansible.builtin.dnf:
    name: chrony
  when:
    - ansible_os_family|lower == "redhat" and ansible_distribution|lower != "fedora"

## Disable old ntpd

- name: Check ntpd is running
  ansible.builtin.shell: |
    pgrep ntpd
  register: ntpd_running
  changed_when: ntpd_running.rc == 0
  failed_when: false
  when: chrony_disable_ntpd and ansible_distribution|lower != "fedora"

- name: Disable ntpd
  ansible.builtin.service:
    name: "{{ ntp_service }}"
    state: stopped
    enabled: false
  when:
    - ntpd_running is changed
    - not ansible_check_mode

## Config chrony

- name: Chrony config
  ansible.builtin.template:
    src: chrony.conf.j2
    dest: "{{ chrony_path }}/chrony.conf"
    mode: "0644"
  register: chrony_conf_file

- name: Enable chrony service and start
  ansible.builtin.service:
    name: "{{ chrony_service }}"
    state: '{{ "started" if chrony_enable else "stopped" }}'
    enabled: "{{ chrony_enable }}"
  when: not ansible_check_mode

- name: Restart chrony when config is changed
  ansible.builtin.service:
    name: "{{ chrony_service }}"
    state: restarted
  when: chrony_conf_file is changed and not ansible_check_mode

## Set timezone

- name: Set timezone
  community.general.timezone:
    name: "{{ chrony_timezone }}"

- name: Permit NTP traffic in firewalld
  ansible.posix.firewalld:
    service: ntp
    permanent: true
    state: enabled
    immediate: true