dotfiles/config/ansible/tasks/servers/services/echoip/echoip.yml

---
- name: Deploy EchoIP service
  block:
    - name: Set EchoIP directories
      ansible.builtin.set_fact:
        echoip_service_dir: "{{ ansible_env.HOME }}/.services/echoip"
        echoip_data_dir: "/mnt/services/echoip"
        maxmind_account_id:
          "{{ lookup('community.general.onepassword', 'MaxMind',
          vault='Dotfiles', field='account_id') | regex_replace('\\s+', '') }}"
        maxmind_license_key:
          "{{ lookup('community.general.onepassword', 'MaxMind',
          vault='Dotfiles', field='license_key') | regex_replace('\\s+', '') }}"

    # Requires: gather_facts: true in playbook
    - name: Check last update marker file
      ansible.builtin.stat:
        path: "{{ echoip_data_dir }}/.last_update"
      register: echoip_update_marker

    - name: Determine if update is needed (older than 24h or missing)
      ansible.builtin.set_fact:
        update_needed: "{{ (not echoip_update_marker.stat.exists) or ((ansible_date_time.epoch | int) - (echoip_update_marker.stat.mtime | default(0) | int) > 86400) }}"

    - name: Create EchoIP directory
      ansible.builtin.file:
        path: "{{ echoip_service_dir }}"
        state: directory
        mode: "0755"

    - name: Create EchoIP data directory
      ansible.builtin.file:
        path: "{{ echoip_data_dir }}"
        state: directory
        mode: "0755"

    # Only update databases if needed (max once per 24h)
    - block:
        # Touch the marker file BEFORE attempting download to prevent repeated attempts on failure
        - name: Update last update marker file (pre-download)
          ansible.builtin.file:
            path: "{{ echoip_data_dir }}/.last_update"
            state: touch

        # Create directories for extracted databases
        - name: Create directory for ASN database extraction
          ansible.builtin.file:
            path: "{{ echoip_data_dir }}/GeoLite2-ASN"
            state: directory
            mode: "0755"

        - name: Create directory for City database extraction
          ansible.builtin.file:
            path: "{{ echoip_data_dir }}/GeoLite2-City"
            state: directory
            mode: "0755"

        - name: Create directory for Country database extraction
          ansible.builtin.file:
            path: "{{ echoip_data_dir }}/GeoLite2-Country"
            state: directory
            mode: "0755"

        # Download all databases
        - name: Download GeoLite2 ASN database
          ansible.builtin.get_url:
            url: "https://download.maxmind.com/app/geoip_download?edition_id=GeoLite2-ASN&license_key={{ maxmind_license_key }}&suffix=tar.gz"
            dest: "{{ echoip_data_dir }}/GeoLite2-ASN.tar.gz"
            mode: "0644"

        - name: Download GeoLite2 City database
          ansible.builtin.get_url:
            url: "https://download.maxmind.com/app/geoip_download?edition_id=GeoLite2-City&license_key={{ maxmind_license_key }}&suffix=tar.gz"
            dest: "{{ echoip_data_dir }}/GeoLite2-City.tar.gz"
            mode: "0644"

        - name: Download GeoLite2 Country database
          ansible.builtin.get_url:
            url: "https://download.maxmind.com/app/geoip_download?edition_id=GeoLite2-Country&license_key={{ maxmind_license_key }}&suffix=tar.gz"
            dest: "{{ echoip_data_dir }}/GeoLite2-Country.tar.gz"
            mode: "0644"

        # Extract all databases
        - name: Extract GeoLite2 ASN database
          ansible.builtin.unarchive:
            src: "{{ echoip_data_dir }}/GeoLite2-ASN.tar.gz"
            dest: "{{ echoip_data_dir }}/GeoLite2-ASN"
            remote_src: true
          register: asn_extracted

        - name: Extract GeoLite2 City database
          ansible.builtin.unarchive:
            src: "{{ echoip_data_dir }}/GeoLite2-City.tar.gz"
            dest: "{{ echoip_data_dir }}/GeoLite2-City"
            remote_src: true
          register: city_extracted

        - name: Extract GeoLite2 Country database
          ansible.builtin.unarchive:
            src: "{{ echoip_data_dir }}/GeoLite2-Country.tar.gz"
            dest: "{{ echoip_data_dir }}/GeoLite2-Country"
            remote_src: true
          register: country_extracted

        # Move all databases to the correct locations
        - name: Move ASN database to correct location
          ansible.builtin.command:
            cmd: "find {{ echoip_data_dir }}/GeoLite2-ASN -name GeoLite2-ASN.mmdb -exec mv {} {{ echoip_data_dir }}/GeoLite2-ASN.mmdb \\;"
          when: asn_extracted.changed

        - name: Move City database to correct location
          ansible.builtin.command:
            cmd: "find {{ echoip_data_dir }}/GeoLite2-City -name GeoLite2-City.mmdb -exec mv {} {{ echoip_data_dir }}/GeoLite2-City.mmdb \\;"
          when: city_extracted.changed

        - name: Move Country database to correct location
          ansible.builtin.command:
            cmd: "find {{ echoip_data_dir }}/GeoLite2-Country -name GeoLite2-Country.mmdb -exec mv {} {{ echoip_data_dir }}/GeoLite2-Country.mmdb \\;"
          when: country_extracted.changed

        # Clean up unnecessary files
        - name: Remove downloaded tar.gz files
          ansible.builtin.file:
            path: "{{ echoip_data_dir }}/GeoLite2-ASN.tar.gz"
            state: absent

        - name: Remove extracted ASN folder
          ansible.builtin.command:
            cmd: "rm -rf {{ echoip_data_dir }}/GeoLite2-ASN"

        - name: Remove downloaded City tar.gz file
          ansible.builtin.file:
            path: "{{ echoip_data_dir }}/GeoLite2-City.tar.gz"
            state: absent

        - name: Remove extracted City folder
          ansible.builtin.command:
            cmd: "rm -rf {{ echoip_data_dir }}/GeoLite2-City"

        - name: Remove downloaded Country tar.gz file
          ansible.builtin.file:
            path: "{{ echoip_data_dir }}/GeoLite2-Country.tar.gz"
            state: absent

        - name: Remove extracted Country folder
          ansible.builtin.command:
            cmd: "rm -rf {{ echoip_data_dir }}/GeoLite2-Country"

        # Update the marker file (no longer needed here, already touched before download)
      when: update_needed

    # Deploy and restart the EchoIP service
    - name: Deploy EchoIP docker-compose.yml
      ansible.builtin.template:
        src: docker-compose.yml.j2
        dest: "{{ echoip_service_dir }}/docker-compose.yml"
        mode: "0644"
      register: echoip_compose

    - name: Stop EchoIP service
      ansible.builtin.command: docker compose -f "{{ echoip_service_dir }}/docker-compose.yml" down --remove-orphans
      when: echoip_compose.changed

    - name: Start EchoIP service
      ansible.builtin.command: docker compose -f "{{ echoip_service_dir }}/docker-compose.yml" up -d
      when: echoip_compose.changed
  tags:
    - services
    - echoip