- name: Check out application
  remote_user: "{{ deployer_user.name }}"
  git: dest={{ be_app_path }}
       repo={{ be_app_repo }}
       version={{ be_app_branch }}
       accept_hostkey=true
       force=yes
  register: app_checkout
  tags: [be_deploy]

- name: check that secrets is ignored
  shell: cat {{ be_app_path }}/.gitignore | grep {{ item }}
  with_items:
    - config/secrets.yml
  register: secrets_ignore_check
  ignore_errors: true
  tags: [be_deploy]

- name: ignore secrets
  shell: /bin/bash -c 'echo "config/secrets.yml" > {{ be_app_path }}/.git/info/exclude'
  when: secrets_ignore_check|failed
  tags: [be_deploy]