kovalhome/infra/photos/0003_immich_playbook.yaml

- name: Deploy app
  hosts: photos
  gather_facts: false
  vars:
    app: immich
  tasks:
    - name: Wait for connection
      ansible.builtin.wait_for_connection:
        timeout: 300
    - name: Get user
      ansible.builtin.user:
        name: debian
      register: user
    - name: Docker compose down
      ansible.builtin.command: docker compose down
      args:
        chdir: "{{ user.home }}/{{ app }}"
      ignore_errors: true
    - name: Copy project
      ansible.builtin.copy:
        src: "./{{ app }}"
        dest: "{{ user.home }}"
        mode: "0744"
    - name: Replace Typesense secret
      ansible.builtin.replace:
        path: "{{ user.home }}/{{ app }}/.env"
        regexp: "TYPESENSE_API_KEY_VALUE"
        replace:
          "{{ lookup('infisical.vault.read_secrets', project_id=infisical_project, env_slug='prod',
          path='/photos', secret_name='TYPESENSE_API_KEY')['value'] }}"
    - name: Replace DB secret
      ansible.builtin.replace:
        path: "{{ user.home }}/{{ app }}/.env"
        regexp: "DB_PASSWORD_VALUE"
        replace:
          "{{ lookup('infisical.vault.read_secrets', project_id=infisical_project, env_slug='prod',
          path='/photos', secret_name='DB_PASSWORD')['value'] }}"
    - name: Docker compose pull
      ansible.builtin.command: docker compose pull
      args:
        chdir: "{{ user.home }}/{{ app }}"
    - name: Docker compose up -d
      ansible.builtin.command: docker compose up -d
      args:
        chdir: "{{ user.home }}/{{ app }}"