---
- name: Install Samba AD DC packages
  ansible.builtin.apt:
    name:
      - samba
      - krb5-user
    state: present
    update_cache: true

- name: Check if Samba AD is provisioned
  ansible.builtin.stat:
    path: /var/lib/samba/private/sam.ldb
  register: samba_ad_provisioned

- name: Fail if not provisioned (this role does not provision)
  ansible.builtin.fail:
    msg: "Samba AD is not provisioned on this host (missing /var/lib/samba/private/sam.ldb)."
  when: not samba_ad_provisioned.stat.exists

- name: Deploy smb.conf
  ansible.builtin.template:
    src: smb.conf.j2
    dest: /etc/samba/smb.conf
    owner: root
    group: root
    mode: "0644"
  notify: Restart samba-ad-dc

- name: Ensure samba-ad-dc enabled and running
  ansible.builtin.systemd:
    name: samba-ad-dc
    enabled: true
    state: started