---
- name: install nginx-sso package
  apt:
    name: nginx-sso
    state: present

- name: create configuration directory
  file:
    path: /etc/nginx/auth/sso
    state: directory

- name: generate configuration file
  loop: "{{ nginx_sso_backend_configs | dict2items }}"
  loop_control:
    label: "{{ item.key }}"
  copy:
    content: |
      # ansible generated

      {{ item.value | to_nice_yaml }}
    dest: "/etc/nginx/auth/sso/{{ item.key }}.yml"
    mode: 0400
  notify: reload nginx-sso

- name: generate systemd service unit
  template:
    src: nginx-sso@.service.j2
    dest: /etc/systemd/system/nginx-sso@.service
  notify: restart nginx-sso

- name: make sure nginx-sso services are enabled and started
  loop: "{{ nginx_sso_backend_configs | list }}"
  systemd:
    name: "nginx-sso@{{ item }}.service"
    daemon_reload: yes
    state: started
    enabled: yes