---
- name: Update MariaDB repository URL and GPG key
  hosts: all
  gather_facts: false
  vars:
    repo_file: "/etc/yum.repos.d/mariadb.repo"
    backup_file: "{{ repo_file }}.backup"
  tasks:
    - name: Ensure MariaDB repo file exists
      ansible.builtin.stat:
        path: "{{ repo_file }}"
      register: file_check
    - name: Fail if repo file missing
      ansible.builtin.fail:
        msg: "MariaDB repo file not found at {{ repo_file }}"
      when: not file_check.stat.exists
    - name: Create backup before making changes
      ansible.builtin.copy:
        src: "{{ repo_file }}"
        dest: "{{ backup_file }}"
        remote_src: true
        mode: preserve
      register: backup
    - name: Update repository URLs
      ansible.builtin.replace:
        path: "{{ repo_file }}"
        regexp: "{{ item.regexp }}"
        replace: "{{ item.replace }}"
      loop:
        - regexp: 'baseurl\s*=\s*http://yum\.mariadb\.org/10\.6/rhel8-amd64'
          replace: 'baseurl = https://rpm.mariadb.org/10.6/rhel/$releasever/$basearch'
        - regexp: 'gpgkey\s*=\s*https://yum\.mariadb\.org/RPM-GPG-KEY-MariaDB'
          replace: 'gpgkey = https://rpm.mariadb.org/RPM-GPG-KEY-MariaDB'
      register: updates
    - name: Show summary
      ansible.builtin.debug:
        msg:
          - "Host: {{ inventory_hostname }}"
          - "Backup: {{ backup.dest }}"
          - "Changes made:"
          - "  - BaseURL: {{ 'Yes' if updates.results[0].changed else 'No' }}"
          - "  - GPGKey: {{ 'Yes' if updates.results[1].changed else 'No' }}"