---
- name: Create and verify Gitea backup before update
  hosts: cloud-pc
  gather_facts: false
  tasks:
    - name: Create a fresh Gitea offsite backup
      ansible.builtin.command:
        argv:
          - systemctl
          - start
          - --wait
          - homelab-restic-offsite-gitea.service
      changed_when: true

    - name: Run Gitea offsite backup audit
      ansible.builtin.command:
        argv:
          - systemctl
          - start
          - --wait
          - homelab-backup-audit-gitea.service
      changed_when: true

- import_playbook: pve-gitea.yml

- name: Verify Gitea public endpoints after update
  hosts: ru-vps
  gather_facts: false
  tasks:
    - name: Check Gitea HTTPS endpoint
      ansible.builtin.uri:
        url: https://git.ada-dev.ru/
        status_code: 200
        return_content: false
      register: gitea_https_check
      retries: 24
      delay: 5
      until: gitea_https_check.status == 200

    - name: Check Gitea SSH port from ru-vps
      ansible.builtin.wait_for:
        host: 192.168.1.25
        port: 2222
        state: started
        timeout: 30