class Kitsune::Kit::Commands::PostinstallDocker

def perform_rollback(ssh)
  output = ssh.exec! <<~EOH
    set -e
    sudo mkdir -p /usr/local/backups
    sudo chown deploy:deploy /usr/local/backups
    BACKUP_DIR="/usr/local/backups"
    SCRIPT_ID="postinstall_docker"
    BEFORE_FILE="${BACKUP_DIR}/${SCRIPT_ID}.before"
    AFTER_FILE="${BACKUP_DIR}/${SCRIPT_ID}.after"
    echo "🔄 Rolling back post-install Docker tasks..."
    if [ -f "$AFTER_FILE" ]; then
      if grep -Fxq "docker.service enabled" "$AFTER_FILE"; then
        sudo systemctl disable docker
        echo "   - Docker service disabled"
      fi
      if grep -Fxq "added docker group" "$AFTER_FILE"; then
        sudo gpasswd -d deploy docker || true
        echo "   - Removed 'deploy' from docker group"
      fi
      if grep -Fxq "created network private" "$AFTER_FILE"; then
        sudo docker network rm private || true
        echo "   - Removed Docker network 'private'"
      fi
      sudo rm -f "$BEFORE_FILE" "$AFTER_FILE"
    else
      echo "   - no marker for $SCRIPT_ID, skipping rollback"
    fi
    echo "✅ Rollback complete"
  EOH
  say output
  say "✅ Post-install Docker rollback completed", :green
end