---
- name: Сброс пароля root MariaDB
  hosts: all
  become: yes
  gather_facts: yes

  tasks:
    - name: Stop MariaDB service
      ansible.builtin.systemd:
        name: mariadb
        state: stopped

    - name: Start MariaDB in safe mode with skip-grant-tables
      ansible.builtin.shell: |
        mysqld_safe --skip-grant-tables &
        sleep 5
      async: 10
      poll: 0

    - name: Reset root password
      ansible.builtin.shell: |
        mysql -u root << EOF
        FLUSH PRIVILEGES;
        ALTER USER 'root'@'localhost' IDENTIFIED BY '{{ mariadb_root_password }}';
        FLUSH PRIVILEGES;
        EOF

    - name: Stop MariaDB safe mode
      ansible.builtin.systemd:
        name: mariadb
        state: stopped

    - name: Start MariaDB normally
      ansible.builtin.systemd:
        name: mariadb
        state: started
        enabled: yes

    - name: Create .my.cnf file for root user
      ansible.builtin.copy:
        content: |
          [client]
          user=root
          password={{ mariadb_root_password }}
        dest: /root/.my.cnf
        mode: '0600'
        owner: root
        group: root