---
- name: Install required packages
  apt:
    name:
      - samba
      - krb5-config
      - krb5-user
      - winbind
      - smbclient
      - dnsutils
    state: present
    update_cache: yes

- name: Stop samba-ad-dc before provisioning (if running)
  service:
    name: samba-ad-dc
    state: stopped
    enabled: no
  ignore_errors: yes

- name: Provision AD domain
  include_tasks: provision.yml

- name: Deploy smb.conf
  template:
    src: smb.conf.j2
    dest: "{{ samba_conf_path }}"
    owner: root
    group: root
    mode: '0644'
  notify: Restart Samba AD DC

- name: Enable and start samba-ad-dc service
  service:
    name: samba-ad-dc
    state: started
    enabled: yes

- name: Configure Kerberos
  include_tasks: kerberos.yml

- name: Set DNS resolver and hosts entry
  include_tasks: dns_hosts.yml

- name: Run verification checks
  include_tasks: verify.yml
  when: samba_verify | bool