---
- name: Write ansible custom facts
  become: true
  ansible.builtin.template:
    src: keycloak.fact.j2
    dest: /etc/ansible/facts.d/keycloak.fact
    mode: '0644'
  vars:
    bootstrapped: true

- name: Re-read custom facts
  ansible.builtin.setup:
    filter: ansible_local

- name: Ensure that `KEYCLOAK_ADMIN[_PASSWORD]` get purged
  ansible.builtin.include_tasks: systemd.yml