name: Ansible Lint

on:
  push:
    paths:
      - 'ansible/**'
      - '.gitea/workflows/lint.yml'
  pull_request:
    paths:
      - 'ansible/**'

jobs:
  lint:
    runs-on: native
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Setup vault password
        run: |
          mkdir -p ~/.config/homelab
          echo '${{ secrets.VAULT_PASSWORD }}' > ~/.config/homelab/vault_pass
          chmod 600 ~/.config/homelab/vault_pass

      - name: Install ansible-lint and collections
        run: |
          python3 -m pip install ansible-lint --break-system-packages --quiet
          ~/.local/bin/ansible-galaxy collection install community.general community.postgresql ansible.posix

      - name: Run ansible-lint
        working-directory: ansible
        run: ~/.local/bin/ansible-lint --profile=min playbooks/site.yml