---
- block:
    - name: Add docker group
      group:
        name: docker
        state: present
      notify: __docker_restart
      when: dockerengine_docker_group_enabled | bool

    - name: Add namespace group
      group:
        name: "{{ dockerengine_nsremap_user }}"
        state: present
      when: dockerengine_usernamespace_enabled | bool

    - name: Setup namespace user
      user:
        name: "{{ dockerengine_nsremap_user }}"
        group: "{{ dockerengine_nsremap_user }}"
        shell: /sbin/nologin
        state: "{{ 'present' if dockerengine_usernamespace_enabled | bool else 'absent' }}"

    - name: Remove namespace group
      group:
        name: "{{ dockerengine_nsremap_user }}"
        state: absent
      when: not dockerengine_usernamespace_enabled | bool

    - name: Configure namespace id range
      lineinfile:
        dest: "{{ item }}"
        regexp: "^{{ dockerengine_nsremap_user }}:"
        line: "{{ dockerengine_nsremap_user }}:{{ dockerengine_nsremap_range_start }}:{{ dockerengine_nsremap_range_length }}"
        state: "{{ 'present' if dockerengine_usernamespace_enabled | bool else 'absent' }}"
      loop:
        - /etc/subuid
        - /etc/subgid

    - name: Create required directories
      loop:
        - name: /etc/systemd/system/docker.service.d
          mode: "0755"
        - name: /etc/docker
          mode: "0755"
      loop_control:
        label: "{{ item.name }}"
      file:
        path: "{{ item.name }}"
        state: directory
        mode: "{{ item.mode }}"

    - name: Write service override
      template:
        src: etc/systemd/system/docker.service.d/override.j2
        dest: /etc/systemd/system/docker.service.d/override.conf
        mode: 0644
      notify: __docker_restart

    - name: Deploy daemon config
      copy:
        content: "{{ (dockerengine_daemon_config | combine(dockerengine_daemon_config_extra)) | to_nice_json }}"
        dest: /etc/docker/daemon.json
        mode: 0600
      notify: __docker_restart

    - name: Ensure docker engine is up and running
      service:
        name: "{{ dockerengine_service }}"
        enabled: True
        state: started

    - name: Handle registry logins
      docker_login:
        registry: "{{ item.url | default(omit) }}"
        username: "{{ item.username }}"
        password: "{{ item.password }}"
        reauthorize: "{{ item.reauthorize | default(False) }}"
        state: '{{ item.state | default("present") }}'
      loop: "{{ dockerengine_registries }}"
      loop_control:
        label: "{{ item.url | default('DockerHub') }}"

    - name: Create docker networks
      docker_network:
        name: "{{ item.name }}"
        driver: "{{ item.driver | default('bridge') }}"
        enable_ipv6: "{{ item.enable_ipv6 | default(False) }}"
        ipam_config: "{{ item.ipam_config | default(omit) }}"
        force: "{{ item.force | default(omit) }}"
        state: "{{ item.state | default('present') }}"
      loop: "{{ dockerengine_networks + dockerengine_networks_extra }}"
      loop_control:
        label: "{{ item.name }}"
      notify: __docker_restart
  become: True
  become_user: root