{% set ver = salt.pillar.get('gitea:version') %}
{% set url = 'https://github.com/go-gitea/gitea/releases/download/v' +
  ver + '/gitea-' + ver + '-linux-amd64'
%}
{% set basepath = salt.pillar.get('gitea:path')  %}

# FIXME: this could be file.managed with source_hash set
'download gitea':
  cmd.run:
    - name: 'wget {{ url }} -O {{ basepath }}/bin/gitea && chmod +x {{ basepath }}/bin/gitea && echo {{ ver }} > {{ basepath }}/VERSION'
    - unless: grep -P '^{{ ver }}$' {{ basepath }}/VERSION
    - runas: {{ salt.pillar.get('gitea:user') }}
    - require:
      - sls: gitea.dirs

{{basepath}}/etc/secrets.json:
  file.managed:
    - user: {{ salt.pillar.get('gitea:user') }}
    - group: {{ salt.pillar.get('gitea:user') }}
    - mode: 400
{% if not salt.file.contains(basepath + '/etc/secrets.json', 'INTERNAL_TOKEN') %}
    - source: 'salt://gitea/files/secrets_json.jinja'
    - template: jinja
{% else %}
    - replace: False
{% endif %}
    - require:
      - cmd: download gitea

{{basepath}}/etc/app.ini:
  file.managed:
    - source: salt://gitea/files/app_ini.jinja
    - template: jinja
    - user: {{ salt.pillar.get('gitea:user') }}
    - group: {{ salt.pillar.get('gitea:user') }}
    - mode: 640
    - require:
      - file: {{basepath}}/etc/secrets.json