---
# После переезда на OpenTofu (tofu/services.tf, VMID 151) обе play здесь —
# legacy: они таргетят СТАРЫЙ VMID 148 на боевом адресе 192.168.1.32.
# Пропускаем, пока реестр говорит provisioner: tofu. Конфигурация emergency-bot
# в этот плейбук не входит — она в playbooks/emergency-access.yml. Для
# намеренного legacy rollback: -e pve_emergency_bot_legacy_provisioning_enabled=true

- name: Create emergency-bot LXC on mini-pc
  hosts: localhost
  connection: local
  become: false
  gather_facts: false
  vars:
    ansible_become: false
    ansible_python_interpreter: "{{ ansible_playbook_python }}"
    pve_emergency_bot_legacy_provisioning_enabled: >-
      {{ homelab_services['emergency-bot'].provisioner != 'tofu' }}
    pve_lxc_vmid: 148
    pve_lxc_node: mini-pc
    pve_lxc_hostname: emergency-bot
    pve_lxc_ip: 192.168.1.32/24
    pve_lxc_gateway: 192.168.1.1
    pve_lxc_disk: local-lvm:4
    pve_lxc_cores: 1
    pve_lxc_memory: 512
    pve_lxc_swap: 256
    pve_lxc_startup: order=70
    pve_lxc_ostemplate: "{{ lookup('env', 'PVE_LXC_OSTEMPLATE') | default('local:vztmpl/debian-13-standard_13.1-2_amd64.tar.zst', true) }}"
  pre_tasks:
    - name: Skip legacy emergency-bot provisioning after cutover
      ansible.builtin.meta: end_play
      when: not (pve_emergency_bot_legacy_provisioning_enabled | bool)
  roles:
    - role: pve_lxc

- name: Wait for emergency-bot SSH
  hosts: emergency-bot
  gather_facts: false
  vars:
    pve_emergency_bot_legacy_provisioning_enabled: >-
      {{ homelab_services['emergency-bot'].provisioner != 'tofu' }}
  pre_tasks:
    - name: Skip legacy emergency-bot provisioning after cutover
      ansible.builtin.meta: end_play
      when: not (pve_emergency_bot_legacy_provisioning_enabled | bool)
  tasks:
    - name: Wait for emergency-bot to accept SSH connections
      ansible.builtin.wait_for_connection:
        timeout: 120