#SPDX-License-Identifier: MIT-0
---
# tasks file for configuring Collabora in Nextcloud
- name: Read current richdocuments config values
  community.docker.docker_container_exec:
    container: "{{ nextcloud_docker_compose_dir | basename }}-nextcloud-1"
    command: php /var/www/html/occ config:app:get richdocuments {{ item }}
  loop:
    - wopi_url
    - public_wopi_url
    - disable_certificate_verification
    - wopi_allowlist
  register: _richdocuments_current
  changed_when: false
  failed_when: false

- name: Build map of current richdocuments config
  ansible.builtin.set_fact:
    _richdocuments_cfg: "{{ _richdocuments_cfg | default({}) | combine({item.item: (item.stdout | default('')).strip()}) }}"
  loop: "{{ _richdocuments_current.results }}"
  loop_control:
    label: "{{ item.item }}"

- name: Configure Collabora WOPI URL (server-to-server)
  community.docker.docker_container_exec:
    container: "{{ nextcloud_docker_compose_dir | basename }}-nextcloud-1"
    command: php /var/www/html/occ config:app:set richdocuments wopi_url --value=https://{{ nextcloud_collabora_domain }}
  when: _richdocuments_cfg.wopi_url != ('https://' ~ nextcloud_collabora_domain)

- name: Configure Collabora public WOPI URL (browser-facing)
  community.docker.docker_container_exec:
    container: "{{ nextcloud_docker_compose_dir | basename }}-nextcloud-1"
    command: php /var/www/html/occ config:app:set richdocuments public_wopi_url --value=https://{{ nextcloud_collabora_public_domain }}
  when:
    - nextcloud_collabora_public_domain is defined
    - nextcloud_collabora_public_domain != nextcloud_collabora_domain
    - _richdocuments_cfg.public_wopi_url != ('https://' ~ nextcloud_collabora_public_domain)

- name: Configure certificate verification for Collabora
  community.docker.docker_container_exec:
    container: "{{ nextcloud_docker_compose_dir | basename }}-nextcloud-1"
    command: php /var/www/html/occ config:app:set richdocuments disable_certificate_verification --value={{ nextcloud_collabora_disable_cert_verification | ternary('yes', 'no') }}
  when: _richdocuments_cfg.disable_certificate_verification != (nextcloud_collabora_disable_cert_verification | ternary('yes', 'no'))

- name: Set Collabora WOPI allowlist
  community.docker.docker_container_exec:
    container: "{{ nextcloud_docker_compose_dir | basename }}-nextcloud-1"
    command: php /var/www/html/occ config:app:set richdocuments wopi_allowlist --value=''
  when: _richdocuments_cfg.wopi_allowlist | default('') != ''

- name: Activate richdocuments configuration (fetch discovery from Collabora)
  community.docker.docker_container_exec:
    container: "{{ nextcloud_docker_compose_dir | basename }}-nextcloud-1"
    command: php /var/www/html/occ richdocuments:activate-config
  changed_when: false