---
- name: Configure timezone on all hosts
  hosts: all
  become: true
  gather_facts: true

  vars:
    timezone_region: "America/New_York"

  tasks:
    - name: Copy timezone file
      ansible.builtin.copy:
        src: "/usr/share/zoneinfo/{{ timezone_region }}"
        dest: /etc/localtime
        remote_src: true

    - name: Write /etc/timezone
      ansible.builtin.copy:
        dest: /etc/timezone
        content: "{{ timezone_region }}\n"

- name: Disable NTP on Ubuntu LXC containers
  hosts: ubuntu
  become: true

  tasks:
    - name: Stop and mask timesyncd on LXC
      ansible.builtin.systemd:
        name: systemd-timesyncd
        state: stopped
        enabled: false
        masked: true
      when: ansible_virtualization_type == "lxc"

- name: Disable NTP on Rocky Linux LXC containers
  hosts: rocky
  become: true

  tasks:
    - name: Stop and mask chronyd on LXC
      ansible.builtin.systemd:
        name: chronyd
        state: stopped
        enabled: false
        masked: true
      when: ansible_virtualization_type == "lxc"

- name: Configure NTP on Ubuntu VMs
  hosts: ubuntu
  become: true

  vars:
    ntp_server: "time.google.com"

  tasks:
    - name: Configure timesyncd
      ansible.builtin.lineinfile:
        path: /etc/systemd/timesyncd.conf
        regexp: '^#?NTP='
        line: "NTP={{ ntp_server }}"
        state: present
      when: ansible_virtualization_type != "lxc"
      notify: Restart timesyncd

  handlers:
    - name: Restart timesyncd
      ansible.builtin.systemd:
        name: systemd-timesyncd
        state: restarted
        enabled: true

- name: Configure NTP on Rocky Linux VMs
  hosts: rocky
  become: true

  vars:
    ntp_server: "time.google.com"

  tasks:
    - name: Disable default chrony pools
      ansible.builtin.replace:
        path: /etc/chrony.conf
        regexp: '^(pool|server) .*'
        replace: '# \1 removed by Ansible'
      when: ansible_virtualization_type != "lxc"

    - name: Configure chrony NTP server
      ansible.builtin.lineinfile:
        path: /etc/chrony.conf
        line: "server {{ ntp_server }} iburst"
        insertafter: EOF
        state: present
      when: ansible_virtualization_type != "lxc"
      notify: Restart chronyd

  handlers:
    - name: Restart chronyd
      ansible.builtin.systemd:
        name: chronyd
        state: restarted
        enabled: true

- name: Verify time configuration
  hosts: all
  become: true

  tasks:
    - name: Check current system time
      ansible.builtin.command: date
      register: check_time
      changed_when: false

    - name: Summary
      ansible.builtin.debug:
        msg: "{{ inventory_hostname }} ({{ ansible_virtualization_type | default('unknown') }}) - {{ check_time.stdout }}"