---
 
 - become: yes
   block:
 
     - name: "Install gitolite"
       apt:
         name: 'gitolite3'
         state: 'present'

       # https://docs.ansible.com/ansible/latest/user_guide/become.html#risks-of-becoming-an-unprivileged-user
     - name: "Install acl"
       apt:
         name: 'acl'
         state: 'present'
 

     - name: "Create gitolite user '{{ gitolite_user_name }}'"
       user:
         name: "{{ gitolite_user_name }}"

         group: "{{ gitolite_user_group }}"

         home: "{{ gitolite_user_home }}"
         shell: "/bin/bash"

     - name: "Add '{{ gitolite_webserver_user_name }}' to the '{{ gitolite_user_group }}' group"
       user:
         name: "{{ gitolite_webserver_user_name }}"
         groups: "{{ gitolite_user_group }}"
         append: yes
 

 - become: yes
   become_user: "{{ gitolite_user_name }}"
   vars:
     default_repos:
       - "gitolite-admin"
       - "testing"
   block:
 
     - name: "Run dummy setup"
       command:
         cmd: "gitolite setup -a dummy"
         creates: "{{ gitolite_user_home }}/.gitolite"
 
     - name: "Remove directories of default repos"
       file:
         path: "{{ gitolite_user_home }}/repositories/{{ item }}.git"
         state: 'absent'
       notify: 'gitolite compile'
       loop: "{{ default_repos }}"
 
     - name: "Remove config of default repos"
       replace:
         path: "{{ gitolite_user_home }}/.gitolite/conf/gitolite.conf"
         regexp: '^[ \t\n]*repo[ \t]+{{ item }}((?!^repo)(.|\n))*'
       notify: 'gitolite compile'
       loop: "{{ default_repos }}"
 
     - name: "Create keydir"
       file:
         path: "{{ gitolite_user_home }}/.gitolite/keydir"
         state: 'directory'
       notify: 'gitolite compile'

 
     - name: "Write gitolite.rc"
       copy:
         src: "gitolite.rc"
         dest: "{{ gitolite_user_home }}/.gitolite.rc"
       notify: 'gitolite compile'

 
     - name: "Allow user created repos"
       blockinfile:
         path: "{{ gitolite_user_home }}/.gitolite/conf/gitolite.conf"
         marker: "# {mark} User created repos"
         block: |

           repo CREATOR/[^/]+

               C = @all
               RW+ = CREATOR

               RW+ = OWNERS

               RW+ user/USER/ = USERS

               RW = WRITERS
               R = READERS

 
     - name: "Allow group read access to gitolite files"
       file:
         path: "{{ item }}"
         mode: 'g+rX'
         recurse: yes
         state: 'directory'
       loop:
         - "{{ gitolite_user_home }}/repositories"
         - "{{ gitolite_user_home }}/.gitolite"

 
     - name: "Set SETGID on gitolite logs directory"
       file:
         path: "{{ gitolite_user_home }}/.gitolite/logs"
         mode: 'g+s'
         state: 'directory'
 
     - name: "Allow group write access to existing gitolite logs"
       file:
         path: "{{ gitolite_user_home }}/.gitolite/logs"
         mode: 'g+rwX'
         recurse: yes
         state: 'directory'
 
     - name: "Allow group write access to future gitolite logs"
       acl:
         path: "{{ gitolite_user_home }}/.gitolite/logs"
         etype: 'group'
         permissions: 'rwX'
         default: yes
         state: 'present'

 
     - name: "Get local custom code directory"
       command: "gitolite query-rc LOCAL_CODE"
       register: gitolite_query_local_code
       changed_when: False
 
     - name: "Set local code direcory facts"
       set_fact:
         gitolite_post_compile_dir: "{{ gitolite_query_local_code.stdout }}/triggers/post-compile"
         gitolite_hooks_dir: "{{ gitolite_query_local_code.stdout }}/hooks/common"
 
     - name: "Create local code directories"
       file:
         path: "{{ item }}"
         state: 'directory'
       loop:
         - "{{ gitolite_post_compile_dir }}"
         - "{{ gitolite_hooks_dir }}"