---
# The Monero block explorer, on the same box as the node.
#
# xmrblocks reads monerod's LMDB directly rather than going through RPC, which
# is why it lives here and not on its own VM. It is a 26 MB binary and 132 KB
# of templates; the expensive part is building it, and that happens elsewhere
# (scripts/build-xmrblocks.sh) because this box has 2 GB and a single monero
# translation unit needs ~3.2 GB. See roles/xmrblocks/README.md.
- name: Deploy the Monero blockchain explorer
  hosts: monero
  become: yes
  vars:
    healthcheck_push_url: "https://{{ subdomains.gatus }}.{{ root_domain }}/api/v1/endpoints/probe_xmrblocks/external"
    healthcheck_push_token: "{{ gatus_push_tokens[inventory_hostname] }}"
  roles:
    - xmrblocks

- name: Publish the explorer from the edge host
  hosts: edge
  become: yes
  tasks:
    # No basic auth: this is a public block explorer over public chain data,
    # which is what a block explorer is for. Caddy terminates TLS and proxies.
    # Note the explorer has NO authentication of its own, so everything it can
    # do is world-reachable - including the tx pusher, which relays a raw
    # transaction through our node. That is deliberate; see the role README.
    - name: Expose the Monero explorer over HTTPS
      ansible.builtin.include_role:
        name: caddy_site
      vars:
        caddy_site_name: monero-explorer
        caddy_site_domain: "{{ subdomains.monero_explorer }}.{{ root_domain }}"
        caddy_site_upstream: "{{ hostvars['monerod_box_local'].ansible_host }}:{{ hostvars['monerod_box_local'].xmrblocks_port }}"
        caddy_site_resolvers: "100.100.100.100"

    # The per-site validate cannot catch a conflict between sites.
    - name: Validate the whole Caddyfile
      ansible.builtin.command: caddy validate --config /etc/caddy/Caddyfile --adapter caddyfile
      changed_when: false