Taskfile.yml

version: "3"

vars:
  PROJECT_ROOT:
    sh: git rev-parse --show-toplevel
  VENV_PATH: "{{ .PROJECT_ROOT }}/.venv"
  ANSIBLE_PROJECT_PATH: "{{ .PROJECT_ROOT }}/ansible"

tasks:
  op:vault:
    desc: |
      Ensure the op-ansible-vault.sh script is executable.
    internal: true
    dir: "{{ .ANSIBLE_PROJECT_PATH }}"
    cmds:
      - chmod +x op-ansible-vault.sh
    preconditions:
      - sh: test -f op-ansible-vault.sh
        msg: op-ansible-vault.sh file does not exist {{ .ANSIBLE_PROJECT_PATH }}.

  venv:build:
    desc: |
      Build Python virtual environment using uv.
    internal: true
    cmds:
      - uv venv {{ .VENV_PATH }}
      - uv pip install -r {{ .ANSIBLE_PROJECT_PATH }}/requirements.txt

  venv:
    desc: Create Python virtual environment in {{ .VENV_PATH }}
    cmds:
      - task: venv:build

  ansible:hosts:
    desc: List Ansible hosts configured in the inventory.
    dir: "{{ .ANSIBLE_PROJECT_PATH }}"
    cmds:
      - task: op:vault
      - uv run ansible all --list-hosts
    preconditions:
      - sh: command -v {{ .VENV_PATH }}/bin/ansible
        msg: ansible is not installed. Have you ran 'task venv'?

  ansible:adhoc:
    desc: |
      Run Ansible adhoc command.
      Example: task ansible:adhoc -- proxmox -m ping
    dir: "{{ .ANSIBLE_PROJECT_PATH }}"
    cmds:
      - task: op:vault
      - "uv run ansible {{ .CLI_ARGS }}"
    preconditions:
      - sh: command -v {{ .VENV_PATH }}/bin/ansible
        msg: ansible is not installed. Have you ran 'task venv'?

  ansible:play:
    desc: |
      Run Ansible playbook.
      Example: task ansible:play -- playbooks/minecraft-playbook.yml
    dir: "{{ .ANSIBLE_PROJECT_PATH }}"
    cmds:
      - task: op:vault
      - "uv run ansible-playbook {{ .CLI_ARGS }}"
    preconditions:
      - sh: command -v {{ .VENV_PATH }}/bin/ansible-playbook
        msg: ansible-playbook is not installed. Have you ran 'task venv'?

  ansible:encrypt:
    desc: |
      Encrypt Ansible variable.
      Example: task ansible:encrypt -- 'Secret!' --name 'my_secret'
    interactive: true
    dir: "{{ .ANSIBLE_PROJECT_PATH }}"
    cmds:
      - task: op:vault
      - "uv run ansible-vault encrypt_string {{ .CLI_ARGS }}"
    preconditions:
      - sh: command -v {{.VENV_PATH}}/bin/ansible-vault
        msg: ansible-vault is not installed. Have you ran 'task venv'?

  ansible:requirements:
    desc: Install Ansible requirements
    dir: "{{ .ANSIBLE_PROJECT_PATH }}"
    cmds:
      - "uv run ansible-galaxy install {{ .CLI_ARGS }} -r requirements.yml"
    preconditions:
      - sh: command -v {{ .VENV_PATH }}/bin/ansible-galaxy
        msg: ansible-galaxy is not installed. Have you ran 'task venv'?
      - sh: test -f requirements.yml
        msg: requirements.yml does not exist.