---
# Prometheus valkey exporter (optional, gated by valkey_exporter_enabled).
# Authenticates as the read-only valkey_exporter ACL user created by the
# users.acl template.

- name: Validate exporter password is set
  ansible.builtin.assert:
    that:
      - valkey_exporter_password is defined
      - valkey_exporter_password | length >= 12
    fail_msg: |
      valkey_exporter_password is required (min 12 chars) when
      valkey_exporter_enabled is true.
      See roles/valkey/defaults/main.yml for configuration instructions.
    success_msg: "Exporter password validation passed"

- name: Install redis_exporter
  ansible.builtin.package:
    name: "{{ valkey_exporter_package }}"
    state: present

- name: Deploy exporter environment file
  ansible.builtin.template:
    src: exporter-env.conf.j2
    dest: "{{ valkey_exporter_args_file }}"
    owner: root
    group: root
    mode: "0600"
  notify: Restart valkey exporter

- name: Enable and start redis_exporter
  ansible.builtin.systemd:
    name: "{{ valkey_exporter_service }}"
    enabled: true
    state: started
    daemon_reload: true