---
- name: Determine zone and record name
  ansible.builtin.set_fact:
    samba_target_zone: "{{ 'internal.' ~ prole_domain if item.fqdn.endswith('.internal.' ~ prole_domain) or item.fqdn == 'internal.' ~ prole_domain else prole_domain }}"
    samba_dns_record_name: >-
      {% set fqdn_clean = item.fqdn | regex_replace('\\.?$', '') %}
      {% if fqdn_clean == ('internal.' ~ prole_domain if item.fqdn.endswith('.internal.' ~ prole_domain) or item.fqdn == 'internal.' ~ prole_domain else prole_domain) %}
      @
      {% else %}
      {{ fqdn_clean | regex_replace('\\.' ~ (('internal.' ~ prole_domain if item.fqdn.endswith('.internal.' ~ prole_domain) or item.fqdn == 'internal.' ~ prole_domain else prole_domain) | regex_escape) ~ '$', '') }}
      {% endif %}

- name: Query existing CNAME records
  ansible.builtin.command:
    cmd: samba-tool dns query {{ samba_dns_server }} {{ samba_target_zone }} {{ samba_dns_record_name }} CNAME
      -U Administrator --password={{ samba_dns_admin_pass }}
  register: cname_query
  changed_when: false
  failed_when: false

- name: Parse existing CNAME record value
  ansible.builtin.set_fact:
    cname_existing_value: >-
      {{
        (cname_query.stdout | default('') |
         regex_findall('\\bCNAME:\\s+([a-zA-Z0-9.-]+)\\b') |
         first | default(''))
      }}

- name: Remove stale CNAME record
  ansible.builtin.command:
    cmd: samba-tool dns delete {{ samba_dns_server }} {{ samba_target_zone }} {{ samba_dns_record_name }} CNAME {{ cname_existing_value }}
      -U Administrator --password={{ samba_dns_admin_pass }}
  when:
    - cname_existing_value | length > 0
    - cname_existing_value != item.target

- name: Add missing CNAME record
  ansible.builtin.command:
    cmd: samba-tool dns add {{ samba_dns_server }} {{ samba_target_zone }} {{ samba_dns_record_name }} CNAME {{ item.target }}
      -U Administrator --password={{ samba_dns_admin_pass }}
  register: cname_add
  changed_when: cname_add.rc == 0
  failed_when: >
    cname_add.rc != 0 and
    ('WERR_DNS_ERROR_RECORD_ALREADY_EXISTS' not in (cname_add.stderr | default(''))) and
    ('Record already exists' not in (cname_add.stderr | default('')))
  when: cname_existing_value != item.target