---
- name: Assurer le repertoire des trousseaux apt
  ansible.builtin.file:
    path: /etc/apt/keyrings
    state: directory
    owner: root
    group: root
    mode: "0755"

- name: Telecharger la cle de signature Grafana
  ansible.builtin.get_url:
    url: "{{ clients_journaux_depot_cle_url }}"
    dest: "{{ clients_journaux_depot_cle_fichier }}"
    owner: root
    group: root
    mode: "0644"

- name: Ajouter le depot apt Grafana
  ansible.builtin.apt_repository:
    repo: "{{ clients_journaux_depot_source }}"
    filename: grafana
    state: present

- name: Installer Grafana Alloy
  ansible.builtin.apt:
    name: "{{ clients_journaux_paquets }}"
    state: present
    update_cache: true

- name: Autoriser Alloy a lire le journal systeme
  ansible.builtin.user:
    name: "{{ clients_journaux_utilisateur }}"
    groups: systemd-journal
    append: true
  notify: Redemarrer alloy

- name: Deployer la configuration Alloy
  ansible.builtin.template:
    src: config.alloy.j2
    dest: "{{ clients_journaux_config }}"
    owner: root
    group: "{{ clients_journaux_utilisateur }}"
    mode: "0640"
  notify: Redemarrer alloy

- name: Activer et demarrer Alloy
  ansible.builtin.systemd:
    name: "{{ clients_journaux_service }}"
    enabled: true
    state: started