ansible_role_gopass/tasks/gopass-install/install-on-debian.yml

---
- name: Update apt cache
  become: true
  ansible.builtin.apt:
    cache_valid_time: 3600

- name: Install requirements for gopass
  become: true
  ansible.builtin.apt:
    name: "{{ item }}"
    state: present
  loop: "{{ gopass__required_debian_packages }}"

- name: Adding Gopass Package Repository
  when: gopass__add_apt_repo | bool
  block:
    - name: Add Gopass archive keyring
      ansible.builtin.get_url:
        url: https://packages.gopass.pw/repos/gopass/gopass-archive-keyring.gpg
        dest: "{{ gopass__keyring }}"
        owner: 'root'
        group: 'root'
        mode: '0644'
      become: true

    - name: Add Gopass repository source
      become: true
      ansible.builtin.template:
        src: "templates/apt.gopass.sources.j2"
        dest: '/etc/apt/sources.list.d/gopass.sources'
        mode: '0644'
        group: 'root'
        owner: 'root'
      notify: Trigger apt update

    - name: Trigger Handlers
      ansible.builtin.meta: flush_handlers

    - name: Install Gopass and Gopass archive keyring
      ansible.builtin.apt:
        name: "{{ item }}"
        state: 'present'
      become: true
      loop:
        - 'gopass-archive-keyring'
        - 'gopass'

    - name: Install gopass-jsonapi for browser integration
      ansible.builtin.apt:
        name: "{{ item }}"
        state: 'present'
      become: true
      loop:
        - 'gopass-jsonapi'
      when: gopass__install_jsonapi | bool

    - name: Install gopass-hibp for haveibeenpwnd.com integration
      ansible.builtin.apt:
        name: "{{ item }}"
        state: 'present'
      become: true
      loop:
        - 'gopass-hibp'
      when: gopass__install_haveibeenpwnd | bool

    - name: Install git-credential-gopass as git-credentials helper
      ansible.builtin.apt:
        name: "{{ item }}"
        state: 'present'
      become: true
      loop:
        - 'git-credential-gopass'
      when: gopass__install_git_credential | bool

    - name: Install zbar-tools for QR CodeReading using OTP Secrets
      ansible.builtin.apt:
        name: "{{ item }}"
        state: 'present'
      become: true
      loop:
        - 'zbar-tools'
      when: gopass__install_zbar_tools | bool