ansible_role_gopass/tasks/gopass-install/install-on-debian.yml

---
- name: Update apt cache
  become: true
  ansible.builtin.apt:
    cache_valid_time: 3600

- name: Install requirements for gopass
  become: true
  ansible.builtin.apt:
    name: "{{ item }}"
    state: present
  with_items:
    - git
    - gnupg2
    - rng-tools
    - xsel
    - xclip

- name: Adding Gopass Package Repository
  when: gopass__add_apt_repo | bool
  block:
    - name: Add Gopass archive keyring
      ansible.builtin.get_url:
        url: https://packages.gopass.pw/repos/gopass/gopass-archive-keyring.gpg
        dest: "{{ gopass__keyring }}"
        owner: root
        group: root
        mode: 0644
      become: true

    - name: Add Gopass repository source
      become: true
      ansible.builtin.template:
        src: "templates/apt.gopass.sources.j2"
        dest: '/etc/apt/sources.list.d/gopass.sources'
        mode: 0644
        group: root
        owner: root
      notify: Trigger apt update

    - name: Trigger Handlers
      ansible.builtin.meta: flush_handlers

    - name: Install Gopass and Gopass archive keyring
      ansible.builtin.apt:
        name: "{{ item }}"
        state: present
      become: true
      with_items:
        - gopass-archive-keyring
        - gopass

    - name: Install gopass-jsonapi for browser integration
      ansible.builtin.apt:
        name: "{{ item }}"
        state: present
      become: true
      with_items:
        - gopass-jsonapi
      when: gopass__install_jsonapi | bool

    - name: Install gopass-hibp for haveibeenpwnd.com integration
      ansible.builtin.apt:
        name: "{{ item }}"
        state: present
      become: true
      with_items:
        - gopass-hibp
      when: gopass__install_haveibeenpwnd | bool

    - name: Install git-credential-gopass as git-credentials helper
      ansible.builtin.apt:
        name: "{{ item }}"
        state: present
      become: true
      with_items:
        - git-credential-gopass
      when: gopass__install_git_credential | bool

    - name: Install zbar-tools for QR CodeReading using OTP Secrets
      ansible.builtin.apt:
        name: "{{ item }}"
        state: present
      become: true
      with_items:
        - zbar-tools
      when: gopass__install_zbar_tools | bool