---
- name: setup kibana group
  group:
    name: "{{ kibana_grp }}"
    state: "present"

- name: setup kibana user
  user:
    name: "{{ kibana_usr }}"
    home: "{{ kibana_home }}"
    group: "{{ kibana_grp }}"
    groups:
      - "{{ kibana_grp }}"
    comment: Virtual Kibana User
    shell: /bin/bash
    state: present
    system: yes

- name: setup Kibana directories
  file:
    state: directory
    path: "{{ item }}"
    owner: "{{ kibana_usr }}"
    group: "{{ kibana_grp }}"
    mode: 0750
  loop:
    - "{{ kibana_path }}"
    - "{{ kibana_home }}"
    - "{{ kibana_cert }}"
    - "{{ kibana_data_location }}"
    - "{{ kibana_logs_location }}"

- name: download Kibana
  unarchive:
    src: "{{ kibana_source }}/kibana-{{ elastic_version }}-{{ kibana_platform_suffix }}.tar.gz"
    dest: "{{ kibana_path }}"
    creates: "{{ kibana_inst }}"
    remote_src: true
    owner: "{{ kibana_usr }}"
    group: "{{ kibana_grp }}"
    mode: 0755
  register: kibana_install

- name: configure Kibana
  template:
    src: "opt/kibana/home/config/{{ item }}.j2"
    dest: "{{ kibana_conf }}/{{ item }}"
    owner: "{{ kibana_usr }}"
    group: "{{ kibana_grp }}"
    mode: 0640
  loop:
    - kibana.yml
    - node.options

- name: rollout elasticsearch http p12 certificate
  copy:
    content: "{{ elastic_cert_http_p12 }}"
    dest: "{{ kibana_cert }}/elastic-http.p12"
    owner: "{{ kibana_usr }}"
    group: "{{ kibana_grp }}"
    mode: 0600

- name: setup generic Kibana link
  file:
    state: link
    src: "{{ kibana_inst }}"
    dest: "{{ kibana_link }}"

- name: setup Kibana systemd unit
  template:
    src: etc/systemd/system/kibana.service.j2
    dest: /etc/systemd/system/kibana.service
  notify: restart kibana

- name: enable kibana systemd unit
  systemd:
    name: kibana
    enabled: yes
    daemon_reload: yes
    state: started