- name: install netbird agent on debian/ubuntu systems
  gather_facts: no
  hosts: "{{target}}"
  become: "{{become_var}}"
  tasks:

  - name: install dependencies
    ansible.builtin.apt:
      pkg:
      - ca-certificates
      - curl
      - gnupg1
      - lsb-release
      update_cache: true
      autoremove: true
      purge: true
    diff: true

  - name: add official signing key
    ansible.builtin.shell:
      executable: /bin/bash
      cmd: curl -s https://pkgs.netbird.io/debian/public.key | gpg1 --dearmor > /usr/share/keyrings/netbird.gpg
      creates: /usr/share/keyrings/netbird.gpg
      # pub  3072R/29778355 2021-09-25 Wiretrustee <dev@wiretrustee.com>
      # EFE3 7DF0 47DF 7CCD F1FC  54FA 83F7 9AD0 2977 8355

  - name: add official repository
    ansible.builtin.copy:
      content: |
        deb [signed-by=/usr/share/keyrings/netbird.gpg] https://pkgs.netbird.io/debian stable main
      dest: /etc/apt/sources.list.d/netbird.list
    diff: true

  - debug: var=netbird_capped
    when: netbird_capped is defined

  - name: install official and version-capped package
    ansible.builtin.apt:
      name: netbird={{netbird_capped}}
      update_cache: true
      autoremove: true
      purge: true
      #allow_downgrade: true
    when: netbird_capped is defined
    #and not ansible_check_mode

  - name: install official package
    ansible.builtin.apt:
      name: netbird
      update_cache: true
      autoremove: true
      purge: true
    when: netbird_capped is not defined
    #and not ansible_check_mode

  - name: log helper script
    ansible.builtin.copy:
      content: |
        tail -n100 -F /var/log/netbird/client.log
      dest: /root/lognetbird
      mode: 0755
    diff: true