# -*- mode: ruby -*-
# vi: set ft=ruby :

Vagrant.configure("2") do |config|
  config.vm.box = "debian/bookworm64"

  config.vm.define "oidcbox"

  config.vm.network "forwarded_port", guest: 4444, host: 4444, host_ip: "127.0.0.1"
  config.vm.network "forwarded_port", guest: 3000, host: 3000, host_ip: "127.0.0.1"
  config.vm.network "forwarded_port", guest: 4000, host: 4000, host_ip: "127.0.0.1"

  config.vm.provider "libvirt" do |lv|
    lv.memory = "2048"
    lv.cpus = 2
    lv.machine_virtual_size = 10
    lv.memorybacking :access, :mode => "shared"
  end

  config.vm.synced_folder "./", "/vagrant", type: "virtiofs"

  config.vm.provision "ansible" do |ansible|
    ansible.playbook = "deployment/01_install_cacert_oidc.yml"
    ansible.verbose = true
    ansible.groups = {
      "pgsqlserver" => ["oidcbox"],
      "authserver" => ["oidcbox"],
      "demoserver" => ["oidcbox"]
    }
    ansible.extra_vars = {
      mkcert_caroot: "/vagrant/mkcert_ca"
    }
  end
end