---
- name: Ensure guest OS family is supported
  ansible.builtin.assert:
    that:
      - ansible_os_family == "Debian"
    fail_msg: "openapply_app currently supports Debian-family guests (Ubuntu 22.04/24.04)."

- name: Ensure required role variables are present
  ansible.builtin.assert:
    that:
      - openapply_app_repo_url | length > 0
      - openapply_app_repo_version | length > 0
      - openapply_app_root | length > 0
      - openapply_app_service_name | length > 0
      - openapply_app_service_user | length > 0
      - openapply_app_start_command | length > 0
    fail_msg: "Required OpenApply role variables are missing."

- name: Ensure real Firebase SPA configuration is provided
  ansible.builtin.assert:
    that:
      - openapply_app_spa_env.VITE_FIREBASE_API_KEY != 'your-firebase-api-key'
      - openapply_app_spa_env.VITE_FIREBASE_AUTH_DOMAIN != 'your-project.firebaseapp.com'
      - openapply_app_spa_env.VITE_FIREBASE_PROJECT_ID != 'your-project-id'
      - openapply_app_spa_env.VITE_FIREBASE_STORAGE_BUCKET != 'your-project.appspot.com'
      - openapply_app_spa_env.VITE_FIREBASE_MESSAGING_SENDER_ID != 'your-sender-id'
      - openapply_app_spa_env.VITE_FIREBASE_APP_ID != 'your-app-id'
    fail_msg: >-
      OpenApply SPA is using placeholder Firebase values. Set vault_openapply_firebase_* variables
      in group_vars/all/vault.yml, then redeploy.
  when: openapply_app_require_real_firebase_config | bool