provision-infra-databases-export-keycloak-freeipa-realm.yml

# Export keycloak realm to ./keycloak-realm-exported.json
- name: "Exporting Keycloak realm to ./vars/keycloak-realm-exported.json"
  hosts: databases.infra.netsoc.co
  become: yes
  tasks:
    - shell: | # pretty bad way of doing this but who cares
        rm -f /netsoc/keycloak/realm/freeipa-realm-exported.json
        docker restart auth_keycloak_1
        sleep 20s
        docker exec -d auth_keycloak_1 /opt/jboss/keycloak/bin/standalone.sh -Djboss.socket.binding.port-offset=10000 -Dkeycloak.migration.action=export -Dkeycloak.migration.provider=singleFile -Dkeycloak.migration.realmName=freeipa -Dkeycloak.migration.usersExportStrategy=REALM_FILE -Dkeycloak.migration.file=/tmp/realm/freeipa-realm-exported.json
        sleep 30s
        docker restart auth_keycloak_1
      args:
        executable: /bin/bash
      ignore_errors: yes
    - fetch:
        src: /netsoc/keycloak/realm/freeipa-realm-exported.json
        dest: ./vars/keycloak-realm-exported.json
        flat: yes
    - shell:
        rm /netsoc/keycloak/realm/freeipa-realm-exported.json

- name: Encrypt vault
  hosts: localhost
  tasks:
    - shell:
        cmd: ansible-vault encrypt --vault-password-file ./_vault_pass ./vars/keycloak-realm-exported.json