---
- name: 🔍 Resolve GitLab integration provisioning facts
  set_fact:
    nextcloud_gl_nc_base_url: "{{ lookup('tls', 'web-app-nextcloud', 'url.base') | regex_replace('/$', '') }}"
  changed_when: false

- name: 📖 Read persisted integration_gitlab OAuth client id
  shell: >
    {{ NEXTCLOUD_DOCKER_EXEC_OCC }} config:app:get integration_gitlab client_id
  register: nextcloud_gl_client_id_current
  changed_when: false
  failed_when: false

- name: 📖 Read persisted integration_gitlab OAuth client secret
  shell: >
    {{ NEXTCLOUD_DOCKER_EXEC_OCC }} config:app:get integration_gitlab client_secret
  register: nextcloud_gl_client_secret_current
  changed_when: false
  failed_when: false
  no_log: "{{ MASK_CREDENTIALS_IN_LOGS | bool }}"

- name: 🔧 Provision the GitLab <-> Nextcloud OAuth coupling
  include_tasks: integration_gitlab_provision.yml
  when: >-
    IS_STACK_HOST | bool
    and (
      (nextcloud_gl_client_id_current.stdout | trim) | length == 0
      or (nextcloud_gl_client_secret_current.stdout | trim) | length == 0
    )