---
# - name: Create Virtual Hosts
#  block:
#    - name: Create the nginx webroot if different from the default
#      ansible.builtin.file:
#        dest: '{{ nginx_webroot }}'
#        state: directory
#        mode: '0755'
#      when: nginx_webroot != '/usr/share/nginx/html'
#  tags: [ 'nginx', 'virtualhost' ]

- name: Install and enable the nginx virtualhost files on Deb based systems
  when: ansible_distribution_file_variety == "Debian"
  tags: [nginx, virtualhost]
  block:
    - name: Install the nginx virtualhost files
      ansible.builtin.template:
        src: nginx-virthost.j2
        dest: /etc/nginx/sites-available/{{ item.virthost_name }}
        owner: root
        group: root
        mode: "0444"
      loop: "{{ nginx_virthosts }}"
      notify: Reload nginx

    - name: Enable the nginx virtualhosts
      ansible.builtin.file:
        src: /etc/nginx/sites-available/{{ item.virthost_name }}
        dest: /etc/nginx/sites-enabled/{{ item.virthost_name }}
        state: link
      loop: "{{ nginx_virthosts }}"
      notify: Reload nginx

#- name: Create vhosts dirs
#  tags: [nginx, virtualhost]
#  ansible.builtin.file:
#    path: "{{ item.root }}"
#    state: directory
#    mode: "0755"
#  loop: "{{ nginx_virthosts }}"
#  when: "{{ root }} != {{ nginx_webroot }}"

- name: Install and enable the nginx virtualhost files on RH based systems
  when: ansible_distribution_file_variety == "RedHat"
  tags: [nginx, virtualhost]
  block:
    - name: Install the nginx virtualhost files
      ansible.builtin.template:
        src: nginx-virthost.j2
        dest: /etc/nginx/conf.d/{{ item.virthost_name }}.conf
        owner: root
        group: root
        mode: "0444"
      loop: "{{ nginx_virthosts }}"
      notify: Reload nginx

    - name: Nginx must be able to network connect when used as a proxy
      ansible.posix.seboolean:
        name: httpd_can_network_connect
        state: true
        persistent: true
      loop: "{{ nginx_virthosts }}"
      when: item.proxy_standard_setup is defined and item.proxy_standard_setup and nginx_selinux is true