mint/magnolia/roles/opensearch/tasks/main.yml

- name: Unarchive open-search package
  become: true
  ansible.builtin.unarchive:
    src: "https://artifacts.opensearch.org/releases/bundle/opensearch/{{ open_search_version }}/opensearch-{{ open_search_version }}-linux-{{ open_search_arch }}.tar.gz"
    dest: /opt
    remote_src: true
    owner: www-data
    group: www-data
  args:
    creates: "/opt/opensearch-{{ open_search_version }}"

- name: Set listening
  become: true
  ansible.builtin.lineinfile:
    path: /opt/opensearch-{{ open_search_version }}/config/opensearch.yml
    line: "network.host: 0.0.0.0"
    backup: true

- name: Set single node
  become: true
  ansible.builtin.lineinfile:
    path: /opt/opensearch-{{ open_search_version }}/config/opensearch.yml
    line: "discovery.type: single-node"
    backup: true

- name: Disable security plugin
  become: true
  ansible.builtin.lineinfile:
    path: /opt/opensearch-{{ open_search_version }}/config/opensearch.yml
    line: "plugins.security.disabled: true"
    backup: true

- name: Create data path
  become: true
  ansible.builtin.file:
    path: /srv/.search
    mode: "0700"
    owner: www-data
    group: www-data
    state: directory

- name: Setup data path
  become: true
  ansible.builtin.lineinfile:
    path: /opt/opensearch-{{ open_search_version }}/config/opensearch.yml
    line: "path.data: /srv/.search"
    backup: true

- name: Upload OpenSearch systemd service
  become: true
  ansible.builtin.template:
    src: server.service.j2
    dest: "/usr/lib/systemd/system/open-search.service"
    mode: "0644"

- name: Force systemd to reread configs
  become: true
  ansible.builtin.systemd:
    daemon_reload: true

- name: Enable OpenSearch service
  become: true
  ansible.builtin.systemd:
    name: "open-search"
    enabled: true
    masked: false
    state: "restarted"