---

# ---
# NTP Server
# ---

- name: (ntp.yml) Ensure ntpsec package is installed.
  apt:
    name:
      - ntpsec
    state: present
  when:
    - ansible_os_family == "Debian"
  tags:
    - ntp-server

- name: (ntp.yml) Check file '/etc/ntpsec/ntp.conf.ORIG' exists
  stat:
    path: /etc/ntpsec/ntp.conf.ORIG
  register: etc_ntpsec_conf_ORIG
  when:
    - ansible_distribution == "Debian"
  tags:
    - ntp-server


- name: (ntp.yml) Ensure directory '/var/log/ntpsec' is present
  file:
    path: /var/log/ntpsec
    state: directory
    owner: ntpsec
    group: ntpsec
    mode: '0755'
  when:
    - ansible_distribution == "Debian"


- name: (ntp.yml) Backup installation version of file '/etc/ntpsec/ntp.conf'
  command: cp /etc/ntpsec/ntp.conf /etc/ntpsec/ntp.conf.ORIG
  when:
    - groups['oopen_office_server']|string is search(inventory_hostname)
    - etc_ntpsec_conf_ORIG.stat.exists == False
    - local_ntp_service is defined and local_ntp_service|bool
  tags:
    - ntp-server

- name: (ntp.yml) Update '/etc/ntpsec/ntp.conf'
  template:
    src: "etc/ntpsec/ntp.conf.j2"
    dest: /etc/ntpsec/ntp.conf
    owner: root
    group: root
    mode: 0644
  notify: Restart ntp
  when:
    - groups['oopen_office_server']|string is search(inventory_hostname)
    - local_ntp_service is defined and local_ntp_service|bool
  tags:
    - ntp-server