[env]
_.file = ".env"
_.source = "mise-env.sh"

TF_VAR_vault_token = "{{ env.VAULT_TOKEN | default(value='') }}"
TF_VAR_s3_password = "{{ env.SILO_PASSWORD | default(value='') }}"
TF_VAR_postgres_password = "{{ env.POSTGRES_PASSWORD | default(value='') }}"
AWS_ACCESS_KEY_ID = "{{ env.SILO_USER | default(value='') }}"
AWS_SECRET_ACCESS_KEY = "{{ env.SILO_PASSWORD | default(value='') }}"

[tasks.up]
description = "Поднять сервисы: Postgres, pgAdmin, Silo, Vault"
run = [
  "mkdir -p data/vault data/pgadmin",
  "docker run --rm --user root --entrypoint chown -v ./data/vault:/openbao/data $VAULT_IMAGE openbao /openbao/data",
  "docker run --rm --user root --entrypoint chown -v ./data/pgadmin:/var/lib/pgadmin $PGADMIN_IMAGE pgadmin /var/lib/pgadmin",
  "docker compose up -d --wait",
]

[tasks.down]
description = "Остановить сервисы (данные в data/ остаются, Vault после запуска будет запечатан)"
run = "docker compose down"

[tasks.plan]
description = "terraform plan во всех трёх конфигурациях"
run = [
  "terraform -chdir=vault plan",
  "terraform -chdir=storage plan",
  "terraform -chdir=database plan",
]

[tasks.fmt]
description = "Отформатировать все .tf"
run = "terraform fmt -recursive modules vault storage database"

[tasks."example:down"]
description = "Остановить пример Go-сервиса"
run = "docker compose -f examples/go-service/compose.yml down"

[tasks.check]
description = "Проверки без обращения к сервисам: форматирование и terraform validate"
run = [
  "terraform fmt -check -recursive modules vault storage database",
  "terraform -chdir=vault validate",
  "terraform -chdir=storage validate",
  "terraform -chdir=database validate",
]