#cloud-config
autoinstall:
  version: 1

  # Locale, keyboard, timezone
  locale: en_US.UTF-8
  keyboard:
    layout: us
    variant: ""
  timezone: America/New_York

  # Network: static IP for isolated PXE LAN (no internet/DHCP needed)
  network:
    version: 2
    ethernets:
      any-eth:
        match:
          name: "en*"
        addresses:
          - 10.9.100.1/24
        dhcp4: false
        dhcp6: false
        optional: true

  # Storage configuration
  storage:
    layout:
      name: lvm
      match:
        size: largest
    swap:
      size: 0

  # User identity
  identity:
    hostname: pxeserver
    username: pxe
    password: "$6$rounds=656000$TpsuBw0N85085mpx$KtKsCwFlowg4NY41gUqx5ljef8cJ8uPFfgg43MyCPWByfXkhM5XushcdtkNps6lKeQFQZtli/QU.s52AUc7XC."

  # Enable SSH
  ssh:
    install-server: true
    allow-pw: true

  # Installer-stage late commands
  late-commands:
    # Install deb packages from CIDATA USB
    - |
      curtin in-target --target=/target -- bash -c '
      mkdir -p /mnt/cidata
      CIDATA_DEV=$(blkid -L CIDATA)
      if [ -n "$CIDATA_DEV" ]; then
        mount "$CIDATA_DEV" /mnt/cidata
        if compgen -G "/mnt/cidata/packages/*.deb" > /dev/null; then
          cp /mnt/cidata/packages/*.deb /tmp/
          dpkg -i /tmp/*.deb 2>/dev/null || true
          dpkg -i /tmp/*.deb 2>/dev/null || true
          if command -v nmcli >/dev/null; then
            systemctl enable NetworkManager
          fi
        fi
        umount /mnt/cidata
      fi
      '

    # Create first-boot.sh
    - |
      curtin in-target --target=/target -- bash -c '
      cat <<"EOF" > /opt/first-boot.sh
      #!/bin/bash
      CIDATA_DEV=$(blkid -L CIDATA)
      if [ -n "$CIDATA_DEV" ]; then
        mkdir -p /mnt/usb
        mount "$CIDATA_DEV" /mnt/usb
        # Install all offline .deb packages (ansible, dnsmasq, apache2, samba, etc.)
        if compgen -G "/mnt/usb/packages/*.deb" > /dev/null; then
          dpkg -i /mnt/usb/packages/*.deb 2>/dev/null || true
          dpkg -i /mnt/usb/packages/*.deb 2>/dev/null || true
        fi
        # Run the Ansible playbook
        if [ -f /mnt/usb/playbook/pxe_server_setup.yml ]; then
          cd /mnt/usb/playbook
          ansible-playbook -i localhost, -c local pxe_server_setup.yml
        fi
        umount /mnt/usb
      fi
      # Disable rc.local to prevent rerunning
      sed -i "s|^/opt/first-boot.sh.*|# &|" /etc/rc.local
      lvextend -r -l +100%FREE /dev/mapper/ubuntu--vg-ubuntu--lv || true
      EOF
      '
    - curtin in-target --target=/target -- chmod +x /opt/first-boot.sh

    # Create rc.local without unintended indentation
    - |
      curtin in-target --target=/target -- bash -c '
      cat <<"EOF" > /etc/rc.local
      #!/bin/bash
      /opt/first-boot.sh > /var/log/first-boot.log 2>&1 &
      exit 0
      EOF
      '
    - curtin in-target --target=/target -- chmod +x /etc/rc.local

  user-data:
    disable_root: false

  refresh-installer:
    update: no