---
- name: mqtt-internal
  tags: mqtt_internal
  block:
    - name: Install dependencies
      ansible.builtin.apt:
        name:
          - mosquitto
          - avahi-daemon

    - name: Install bambulab cafile
      # openssl s_client -showcerts -connect <ip>:8883 </dev/null | sed -n -e '/-.BEGIN/,/-.END/ p'
      ansible.builtin.copy:
        dest: "{{ mqtt_bambulab_cafile }}"
        content: "{{ lookup('passwordstore', 'bambulab subkey=cafile') }}"

    - name: Configure Mosquitto
      ansible.builtin.template:
        src: "{{ item }}"
        dest: "/etc/mosquitto/conf.d/{{ item }}"
        owner: root
        group: root
        mode: 0644
      notify: restart mosquitto
      with_items:
        - bambulab.conf
        - internal.conf
        - public-bridge.conf

    - name: Start mosquitto
      ansible.builtin.systemd:
        name: mosquitto
        state: started
        enabled: yes