# Passwords and license keys in /etc/iiab/local_vars.yml are not a healthy
# precedent :/  (Going forward let's try to keep credentials in their own apps)

- name: Copy OPTIONAL remoteit_license_key, e.g. from /etc/iiab/local_vars.yml to /etc/remoteit/registration, if remoteit_license_key is defined
  # shell: echo {{ remoteit_license_key }} > /etc/remoteit/registration
  template:
    src: registration.j2
    dest: /etc/remoteit/registration
  when: remoteit_license_key is defined

- name: Redact OPTIONAL remoteit_license_key from /etc/iiab/local_vars.yml, if remoteit_license_key is defined
  # shell: sed -i '/^remoteit_license_key:/d' {{ iiab_local_vars_file }}
  lineinfile:
    path: "{{ iiab_local_vars_file }}"
    regexp: '^remoteit_license_key:.*'
    state: absent
  when: remoteit_license_key is defined


# 2022-04-07 FYI: connectd (below) never deletes /etc/remoteit/registration

- name: Enable & Restart remote.it "parent" service connectd, which exits after spawning 2 "child" services/daemons below
  systemd:
    name: connectd
    daemon_reload: yes
    enabled: yes
    state: restarted
  when: remoteit_enabled

- name: Enable remote.it daemon schannel ("Remote tcp command service") -- try to avoid contention with connectd which auto-spawns it as nec (just above)
  systemd:
    name: schannel
    enabled: yes
    state: started
  when: remoteit_enabled


- name: Disable & Stop remote.it services {connectd, schannel}
  systemd:
    name: "{{ item }}"
    enabled: no
    state: stopped
  with_items:
    - connectd
    - schannel
  when: not remoteit_enabled

- name: Stop & Disable "Remote tcp connection services" remoteit@* found in /etc/systemd/system/multi-user.target.wants/ e.g. remoteit@80:00:01:7F:7E:00:56:36.service
  shell: |
    systemctl stop $(ls /etc/systemd/system/multi-user.target.wants/ | grep remoteit@*)
    systemctl disable $(ls /etc/systemd/system/multi-user.target.wants/ | grep remoteit@*)
  ignore_errors: yes
  when: not remoteit_enabled

# - name: Identify remoteit "Remote tcp connection service" unit file name, including uuid, e.g. remoteit@80:00:01:7F:7E:00:56:36.service
#   shell: ls /etc/systemd/system/multi-user.target.wants/ | grep remoteit@
#   register: remoteit_service
#   ignore_errors: yes

# - name: "Disable & Stop the actual service: {{ remoteit_service.stdout }}"
#   systemd:
#     name: "{{ remoteit_service.stdout }}"
#     enabled: no
#     state: stopped
#   when: not remoteit_enabled and remoteit_service.stdout != ""
#   ignore_errors: yes