---
# IPMI power control for truenas.localdomain (Dell R415, iDRAC6).
# WOL is not an option there: bce0 advertises no WOL capability and is an
# LACP lagg member, so IPMI is the only remote power-on path.

- name: deploy iDRAC credential
  become: true
  ansible.builtin.copy:
    content: "{{ idrac_password }}\n"
    dest: /etc/ups/idrac.pw
    owner: root
    group: nut
    mode: '0640'
  no_log: true
  tags: ups

- name: deploy truenas power helper
  become: true
  ansible.builtin.template:
    src: truenas-power.sh.j2
    dest: /usr/local/bin/truenas-power.sh
    owner: root
    group: root
    mode: '0755'
    setype: bin_t
  tags: ups

- name: deploy truenas restore script
  become: true
  ansible.builtin.template:
    src: ups-restore.sh.j2
    dest: /usr/local/bin/ups-restore.sh
    owner: root
    group: root
    mode: '0755'
    setype: bin_t
  tags: ups

- name: deploy upssched command dispatcher
  become: true
  ansible.builtin.template:
    src: ups-sched-cmd.sh.j2
    dest: /usr/local/bin/ups-sched-cmd.sh
    owner: root
    group: root
    mode: '0755'
    setype: bin_t
  tags: ups

# Covers the deep-drain case: if the battery ran out, this host was itself
# powered off when mains returned, so nothing was running to restore TrueNAS.
- name: deploy boot-time truenas restore unit
  become: true
  ansible.builtin.template:
    src: ups-restore.service.j2
    dest: /etc/systemd/system/ups-restore.service
    owner: root
    group: root
    mode: '0644'
  tags: ups

- name: enable boot-time truenas restore unit
  become: true
  ansible.builtin.systemd:
    name: ups-restore.service
    enabled: true
    daemon_reload: true
  tags: ups