Move envvars to /etc/defaults

roles/keycloak/tasks/main.yml

@@ -8,6 +8,7 @@
 
 - include_tasks: tasks/install.yml
 
+## FIXME not idempotent (keyclock removes the file when it restarts)
 - name: create Keycloak admin user
   command:
   args:

roles/keycloak/tasks/systemd.yml

@@ -38,12 +38,30 @@
     daemon_reload: yes
   when: systemdunit.changed
 
-- name: start keycloak
-  systemd:
-    name: keycloak
-    enabled: yes
-    state: started
-  become: yes
+- block:
+    - name: start keycloak
+      systemd:
+        name: keycloak
+        enabled: yes
+        state: started
+      become: yes
+  rescue:
+    - command: "systemctl status keycloak"
+      changed_when: False
+      ignore_errors: True
+    - command: "journalctl -xe -ukeycloak"
+      changed_when: False
+      ignore_errors: True
+    - command: "tail -n 100 /opt/keycloak/keycloak.log"
+      changed_when: False
+      ignore_errors: True
+    - debug:
+        msg: "Virt type: {{ ansible_facts.virtualization_type }}"
+      changed_when: False
+      ignore_errors: True
+    - command: "cat /opt/keycloak/keycloak-service.sh"
+      changed_when: False
+      ignore_errors: True
 
 - command: "systemctl status keycloak"
   register: keycloak_service_status