---
# tasks file for debian-serv

- name: Clone vimrc gist
  ansible.builtin.git:
    repo: "{{ vimrc_gist_url }}"
    dest: /tmp/vimrc

- name: Copy vimrc to /root/.vimrc
  ansible.builtin.copy:
    src: /tmp/vimrc/.vimrc
    dest: /root/.vimrc
    remote_src: true
    owner: root
    group: root

- name: Copy vimrc to /home/debian/.vimrc
  ansible.builtin.copy:
    src: /tmp/vimrc/.vimrc
    dest: /home/debian/.vimrc
    remote_src: true
    owner: debian
    group: debian

- name: Fetch Caddy pubkey
  ansible.builtin.get_url:
    url: "{{ caddy_pubkey_url }}"
    dest: /tmp/gpg.key

- name: Sign Caddy pubkey
  ansible.builtin.shell:
    cmd: gpg --dearmor -o caddy-stable-archive-keyring.gpg gpg.key && rm -f gpg.key
    chdir: /tmp

- name: Copy signed key to /usr/share/keyrings/caddy-stable-archive-keyring.gpg
  ansible.builtin.copy:
    src: /tmp/caddy-stable-archive-keyring.gpg
    dest: /usr/share/keyrings/caddy-stable-archive-keyring.gpg
    remote_src: true

- name: Fetch Caddy sources.list
  ansible.builtin.get_url:
    url: "{{ caddy_sources_url }}"
    dest: /etc/apt/sources.list.d/caddy-stable.list

- name: Fetch Tailscale pubkey
  ansible.builtin.get_url:
    url: "{{ tailscale_pubkey_url }}"
    dest: /usr/share/keyrings/tailscale-archive-keyring.gpg

- name: Fetch Tailscale sources.list
  ansible.builtin.get_url:
    url: "{{ tailscale_sources_url }}"
    dest: /etc/apt/sources.list.d/tailscale.list

- name: Install Caddy and Tailscale
  ansible.builtin.apt:
    pkg:
      - caddy
      - tailscale
    update_cache: true