---

- name: Create oidc-test OpenID Connect client configuration
  template:
    src: hydra-client.json.j2
    dest: "/etc/hydra/clients.d/{{ item.client_id }}.json"
  with_items:
    - client_id: "{{ oidc_test_app_client_id }}"
      client_secret: "{{ oidc_test_app_client_secret }}"
      client_uri: "{{ oidc_test_app_public_base_url }}"
      client_name: "OIDC Test"
      redirect_uris: ["{{ oidc_test_app_public_base_url }}/oauth2/callback"]
      post_logout_redirect_uris: ["{{ oidc_test_app_public_base_url }}"]
      logo_uri: https://www.cadoles.com/images/logo.svg
  notify:
    - Reload hydra clients
  become: true

- name: Start oidc-test app
  containers.podman.podman_container:
    name: oidc-test
    image: docker.io/bornholm/oidc-test:v0.0.0-6-g96f1f8f
    state: started
    network: host
    restart_policy: on-failure
    recreate: yes
    timezone: local
    env:
      OIDC_CLIENT_ID: "{{ oidc_test_app_client_id }}"
      OIDC_CLIENT_SECRET: "{{ oidc_test_app_client_secret }}"
      LOG_LEVEL: 0
      OIDC_ISSUER_URL: "{{ hydra_urls_self_issuer_url }}/"
      OIDC_INSECURE_SKIP_VERIFY: true
      OIDC_REDIRECT_URL: "{{ oidc_test_app_public_base_url }}" 
      OIDC_POST_LOGOUT_REDIRECT_URL: "{{ oidc_test_app_public_base_url }}"
      HTTP_ADDRESS: 127.0.0.1:8080
      HTTP_PUBLIC_BASE_URL: "{{ oidc_test_app_public_base_url }}"
  become: true