---
# Ownership copied verbatim from the playbook this replaces and verified
# mechanically against `git show HEAD:`.
- name: Write DATUM Gateway config.json
  ansible.builtin.template:
    src: config.json.j2
    dest: "{{ datum_gateway_config_dir }}/config.json"
    owner: "{{ datum_gateway_user }}"
    group: "{{ datum_gateway_group }}"
    mode: '0640'
  # config.json carries the bitcoind RPC password, the API admin password and
  # the pool passwords. `--diff` prints rendered content, so running with --diff
  # put all of them on the terminal and into any log capturing it. Suppressed by
  # default; pass -e datum_reveal_config=true when you genuinely need the diff.
  diff: "{{ datum_reveal_config | default(false) | bool }}"
  notify: Restart datum-gateway

- name: Create datum-gateway systemd service
  ansible.builtin.template:
    src: datum-gateway.service.j2
    dest: /etc/systemd/system/datum-gateway.service
    owner: root
    group: root
    mode: '0644'
  notify: Restart datum-gateway