ansible-edda/playbooks/roles/services/deploy/database/tasks/main.yml

---
- name: "set the user variables"
  ansible.builtin.import_role:
    name: "services/include"
    vars_from: "user"

- name: "stat the pgadmin password file"
  ansible.builtin.stat:
    path: "{{ services_service_user_home }}/.config/service/pgadmin.password"
  register: services_deploy_database_pgadmin_password_file_stat

- name: "configure pgadmin password"
  ansible.builtin.template:
    src: "./pgadmin/pgadmin.password"
    dest: "{{ services_service_user_home }}/.config/service/pgadmin.password"
    mode: 0600
  # Being root allows ansible to read the file, determine the diff, and preserve the uid:gid.
  become_user: "\
    {% if services_deploy_database_pgadmin_password_file_stat.stat.exists %}\
    root\
    {% else %}\
    {{ services_service_user_name }}\
    {% endif %}"
  register: services_deploy_database_pgadmin_password_file

- block:

    - name: "configure postgres password"
      ansible.builtin.template:
        src: "./postgres/database.password"
        dest: "{{ services_service_user_home }}/.config/service/database.password"
        mode: 0600
      register: services_deploy_database_postgres_password_file

  become_user: "{{ services_service_user_name }}"

- name: "{{ services_service_name }} : configure systemd service"
  ansible.builtin.include_role:
    name: "services/deploy/pod"
  vars:
    services_deploy_pod_needs_restart: "{{
      services_deploy_database_postgres_password_file.changed or
      services_deploy_database_pgadmin_password_file.changed
    }}"