# roles/web-app-mediawiki/tasks/03_patch_settings.yml
- name: "MEDIAWIKI | Ensure LocalSettings.php has correct base settings"
  vars:
    _lsp_path: "{{ MEDIAWIKI_HTML_DIR }}/LocalSettings.php"
    _server_url: "{{ MEDIAWIKI_URL | regex_replace('/+$', '') }}"
    # Pre-escape single quotes for safe insertion into PHP single-quoted strings:
    _server_url_sq: "{{ _server_url | replace(\"'\", \"'\\\\''\") }}"
    _db_name_sq:    "{{ database_name | replace(\"'\", \"'\\\\''\") }}"
    _db_user_sq:    "{{ database_username | replace(\"'\", \"'\\\\''\") }}"
    _db_pass_sq:    "{{ database_password | replace(\"'\", \"'\\\\''\") }}"
    _db_host_sq:    "{{ (database_host ~ ':' ~ database_port) | replace(\"'\", \"'\\\\''\") }}"
    _lang_sq:       "{{ HOST_LL | replace(\"'\", \"'\\\\''\") }}"
  shell: |
    docker exec -u {{ MEDIAWIKI_USER }} {{ MEDIAWIKI_CONTAINER }} bash -lc '
      set -euo pipefail
      LSP="{{ _lsp_path }}"
      SERVER='\''{{ _server_url_sq }}'\''
      DBNAME='\''{{ _db_name_sq }}'\''
      DBUSER='\''{{ _db_user_sq }}'\''
      DBPASS='\''{{ _db_pass_sq }}'\''
      DBHOST='\''{{ _db_host_sq }}'\''
      LANG='\''{{ _lang_sq }}'\''
      [ -f "$LSP" ] || { echo "LocalSettings.php not found, skipping."; exit 0; }

      need=0

      check_line() {
        local key="$1" val="$2"
        grep -Eq "^[[:space:]]*\$${key}[[:space:]]*=[[:space:]]*'\''${val}'\'';" "$LSP" || need=1
      }

      check_line wgServer "$SERVER"
      check_line wgCanonicalServer "$SERVER"
      check_line wgDBname "$DBNAME"
      check_line wgDBuser "$DBUSER"
      check_line wgDBpassword "$DBPASS"
      check_line wgDBserver "$DBHOST"
      check_line wgLanguageCode "$LANG"

      if [ "$need" -eq 1 ]; then
        tmp="$(mktemp)"
        # Remove any existing definitions for these keys
        grep -Ev "^[[:space:]]*\$(wgServer|wgCanonicalServer|wgDBname|wgDBuser|wgDBpassword|wgDBserver|wgLanguageCode)[[:space:]]*=" "$LSP" > "$tmp" || true

        {
          printf "\n\$wgServer = '\''%s'\'';\n"           "$SERVER"
          printf "\$wgCanonicalServer = '\''%s'\'';\n"    "$SERVER"
          printf "\$wgDBname = '\''%s'\'';\n"             "$DBNAME"
          printf "\$wgDBuser = '\''%s'\'';\n"             "$DBUSER"
          printf "\$wgDBpassword = '\''%s'\'';\n"         "$DBPASS"
          printf "\$wgDBserver = '\''%s'\'';\n"           "$DBHOST"
          printf "\$wgLanguageCode = '\''%s'\'';\n"       "$LANG"
        } >> "$tmp"

        cat "$tmp" > "$LSP"
        rm -f "$tmp"
        echo CHANGED
      fi
    '
  args:
    executable: /bin/bash
  register: mw_lsp_update
  changed_when: "'CHANGED' in (mw_lsp_update.stdout | default(''))"
  failed_when: mw_lsp_update.rc != 0
  no_log: "{{ MASK_CREDENTIALS_IN_LOGS | bool }}"