---
- name: install packages
  package:
    name: mariadb-server
    state: installed

- name: fix selinux contexts from data directory
  sefcontext:
    path: "/export/mariadb(/.*)?"
    setype: mysqld_db_t

- name: create data directory
  file:
    path: /export/mariadb
    state: directory
    mode: 0750
    owner: mysql
    group: mysql
    setype: _default

- name: link data diretory
  file:
    dest: /srv/mariadb
    src: /export/mariadb
    state: link
    owner: root
    group: "{{ ansible_wheel }}"
    follow: false

- name: configure data directory
  lineinfile:
    path: /etc/my.cnf.d/mariadb-server.cnf
    regexp: "^datadir=.*"
    line: datadir=/srv/mariadb
  notify: restart mariadb

- name: create additional config directory
  file:
    path: /etc/mysql
    state: directory
    mode: 0750
    owner: root
    group: mysql

- name: create tls configuration
  template:
    dest: /etc/my.cnf.d/tls.cnf
    src: tls.cnf.j2
    mode: 0644
    owner: root
    group: "{{ ansible_wheel }}"
  notify: restart mariadb

- name: enable service
  service:
    name: mariadb
    state: started
    enabled: true