[
	{
		"name": "unlock destination",
		"become": true,
		"ansible.builtin.file": {
			"state": "directory",
			"dest": "{{var_hydra_directory}}",
			"mode": "0777"
		}
	},
	{
		"name": "prepare directory",
		"ansible.builtin.file": {
			"state": "directory",
			"path": "{{var_hydra_directory}}/{{var_hydra_name}}"
		}
	},
	{
		"name": "download",
		"ansible.builtin.get_url": {
			"url": "https://raw.githubusercontent.com/ory/meta/master/install.sh",
			"dest": "{{var_hydra_directory}}/{{var_hydra_name}}/install.sh"
		}
	},
	{
		"name": "user",
		"ansible.builtin.command": {
			"chdir": "{{var_hydra_directory}}/{{var_hydra_name}}",
			"cmd": "bash install.sh hydra"
		}
	},
	{
		"name": "lock destination",
		"become": true,
		"ansible.builtin.file": {
			"state": "directory",
			"dest": "{{var_hydra_directory}}",
			"mode": "0555"
		}
	},
	{
		"name": "initialize database",
		"ansible.builtin.shell": {
			"cmd": "{{var_hydra_directory}}/{{var_hydra_name}}/bin/hydra migrate sql $(cat /etc/hydra/database) --yes"
		}
	},
	{
		"name": "generate secret",
		"ansible.builtin.shell": {
			"cmd": "export LC_CTYPE=C; cat /dev/urandom | tr -dc 'a-zA-Z0-9' | fold -w 32 | head -n 1 > /etc/hydra/secrets_system"
		}
	}
]