---
- name: Install OpenQA worker packages
  ansible.builtin.dnf:
    name: "{{ openqa_worker_packages }}"
    state: present
  tags:
    - packages

- name: Create openQA group
  ansible.builtin.group:
    name: "{{ openqa_group }}"
    system: true

- name: Create openQA user
  ansible.builtin.user:
    name: "{{ openqa_user }}"
    groups: "{{ openqa_group }}"
    append: true
    system: true

- name: Configure firewalld for openQA worker connections
  ansible.builtin.template:
    src: etc/firewalld/services/{{ item }}.xml.j2
    dest: /etc/firewalld/services/{{ item }}.xml
    owner: root
    group: root
    mode: "0644"
  loop:
    - openqa-socket
    - openqa-vnc
  tags:
    - configure
  notify: Reload firewalld

- name: Write openQA configuration file
  ansible.builtin.template:
    src: etc/openqa/{{ item }}.j2
    dest: /etc/openqa/{{ item }}
    owner: "{{ openqa_user }}"
    group: "{{ openqa_group }}"
    mode: "0444"
  loop:
    - client.conf
    - workers.ini
  tags:
    - configure
  notify: Restart openQA workers

- name: Start openQA cache services
  ansible.builtin.systemd:
    name: "{{ item }}"
    state: started
    enabled: true
  loop:
    - openqa-worker-cacheservice
    - openqa-worker-cacheservice-minion
...