---
- name: Ensure apt keyring directory exists
  ansible.builtin.file:
    path: /etc/apt/keyrings
    state: directory
    owner: root
    group: root
    mode: "0755"
  tags: [docker, packages]

- name: Install Docker repository signing key
  ansible.builtin.get_url:
    url: "{{ docker_apt_key_url }}"
    dest: "{{ docker_apt_key_path }}"
    owner: root
    group: root
    mode: "0644"
  tags: [docker, packages]

- name: Configure Docker apt repository
  ansible.builtin.deb822_repository:
    name: docker
    types:
      - deb
    uris:
      - "{{ docker_apt_uri }}"
    suites:
      - "{{ ansible_distribution_release }}"
    components:
      - stable
    architectures:
      - "{{ docker_apt_architecture }}"
    signed_by: "{{ docker_apt_key_path }}"
    state: present
    enabled: true
    install_python_debian: true
  tags: [docker, packages]

- name: Install Docker Engine and plugins
  ansible.builtin.apt:
    name: "{{ docker_packages }}"
    state: present
    update_cache: true
  tags: [docker, packages]

- name: Configure Docker daemon
  ansible.builtin.copy:
    dest: /etc/docker/daemon.json
    owner: root
    group: root
    mode: "0644"
    content: "{{ docker_daemon_config | to_nice_json }}\n"
  notify: restart docker
  tags: [docker, config]

- name: Add users to docker group
  ansible.builtin.user:
    name: "{{ item }}"
    groups: docker
    append: true
  loop: "{{ docker_users }}"
  tags: [docker, users]

- name: Enable Docker service
  ansible.builtin.service:
    name: docker
    enabled: "{{ docker_service_enabled }}"
    state: "{{ docker_service_state }}"
  tags: [docker, services]