- name: Generate htpasswd for {{ item.name }}
  when: passwords[item.name + '_password'] is not defined or passwords[item.name + '_htpasswd_hash'] is not defined
  block:
    - name: Create password for {{ item.name }}
      shell: "< /dev/urandom tr -dc A-Za-z0-9 | head -c${1:-64};echo;"
      register: password
    
    - name: Show password json for {{ item.name }}
      debug:
        msg: "{{ password }}"
        verbosity: 2
    
    - name: Create bcrypt hash from password for {{ item.name }}
      docker_container:
        name: slappasswd
        image: "{{ docker_registry }}/pwgen"
        cleanup: true
        detach: false
        container_default_behavior: no_defaults
        command: "htpasswd -B -n -i -b -C 16 {{ item.name }} {{ password.stdout | default(item.name + '_password') }}"
      register: docker_container_output
    
    - name: Show docker_container_output for {{ item.name }}
      debug:
        msg: "{{ docker_container_output }}"
        verbosity: 2
    
    - name: Write password for {{ item.name }}
      lineinfile:
        path: "{{ inventory_dir }}/group_vars/all/passwords.yaml"
        line: "{{ item.name }}_password: \"{{ password.stdout }}\""
    
    - name: Write htpasswd hash for {{ item.name }}
      lineinfile:
        path: "{{ inventory_dir }}/group_vars/all/passwords.yaml"
        line: "{{ item.name }}_htpasswd_hash: \"{{ docker_container_output.container.Output.split('\n')[0].split(':')[1] }}\""