---
# Configure LDAP authentication for Odoo
# ODOO_LDAP_CONFIG is defined in vars/main.yml

- name: "🔎 Check if LDAP configuration exists"
  database_query:
    mask_values: "{{ MASK_CREDENTIALS_IN_LOGS | bool }}"
    config: "{{ lookup('database', application_id) }}"
    query_file: "{{ role_path }}/files/sql/select/res-company-ldap-exists.sql"
    named_args:
      ldap_server: "{{ ODOO_LDAP_CONFIG.ldap_server }}"
    expect_rows: true
  register: ldap_check

- name: "🔄 Update existing LDAP configuration"
  database_query:
    mask_values: "{{ MASK_CREDENTIALS_IN_LOGS | bool }}"
    config: "{{ lookup('database', application_id) }}"
    query_file: "{{ role_path }}/files/sql/update/res-company-ldap.sql"
    named_args:
      sequence: "{{ ODOO_LDAP_CONFIG.sequence }}"
      company_id: "{{ ODOO_LDAP_CONFIG.company_id }}"
      ldap_server_port: "{{ ODOO_LDAP_CONFIG.ldap_server_port }}"
      ldap_binddn: "{{ ODOO_LDAP_CONFIG.ldap_binddn }}"
      ldap_password: "{{ ODOO_LDAP_CONFIG.ldap_password }}"
      ldap_base: "{{ ODOO_LDAP_CONFIG.ldap_base }}"
      ldap_filter: "{{ ODOO_LDAP_CONFIG.ldap_filter }}"
      create_user: "{{ ODOO_LDAP_CONFIG.create_user }}"
      ldap_tls: "{{ ODOO_LDAP_CONFIG.ldap_tls }}"
      ldap_server: "{{ ODOO_LDAP_CONFIG.ldap_server }}"
  when: ldap_check.rows | length > 0

- name: "📁 Create new LDAP configuration"
  database_query:
    mask_values: "{{ MASK_CREDENTIALS_IN_LOGS | bool }}"
    config: "{{ lookup('database', application_id) }}"
    query_file: "{{ role_path }}/files/sql/insert-res-company-ldap.sql"
    named_args:
      sequence: "{{ ODOO_LDAP_CONFIG.sequence }}"
      company_id: "{{ ODOO_LDAP_CONFIG.company_id }}"
      ldap_server: "{{ ODOO_LDAP_CONFIG.ldap_server }}"
      ldap_server_port: "{{ ODOO_LDAP_CONFIG.ldap_server_port }}"
      ldap_binddn: "{{ ODOO_LDAP_CONFIG.ldap_binddn }}"
      ldap_password: "{{ ODOO_LDAP_CONFIG.ldap_password }}"
      ldap_base: "{{ ODOO_LDAP_CONFIG.ldap_base }}"
      ldap_filter: "{{ ODOO_LDAP_CONFIG.ldap_filter }}"
      create_user: "{{ ODOO_LDAP_CONFIG.create_user }}"
      ldap_tls: "{{ ODOO_LDAP_CONFIG.ldap_tls }}"
  when: ldap_check.rows | length == 0