---
- name: update repo-cache for debian/ubuntu
  become: true
  ansible.builtin.apt:
    update_cache: true
    cache_valid_time: 3600

- name: install requirements to add new package repos
  become: true
  ansible.builtin.apt:
    name:
      - lsb-release
      - wget
      - debian-goodies
      - apt-dater-host
      - apt-transport-https
    state: present

- name: add rspam repo key
  become: true
  ansible.builtin.apt_key:
    url: 'https://rspamd.com/apt-stable/gpg.key'
    state: present
  notify: sudo apt update

- name: Download /etc/apt/keyrings/rspamd.gpg
  become: true
  ansible.builtin.get_url:
    url: '//rspamd.com/apt-stable/gpg.key'
    dest: '/etc/apt/keyrings/rspamd.gpg'
    mode: '0644'
    owner: 'root'
    group: 'root'

- name: add rspamd repo
  become: true
  ansible.builtin.apt_repository:
    repo: "deb [signed-by=/etc/apt/keyrings/rspamd.gpg] https://rspamd.com/apt-stable/ {{ ansible_distribution_release }} main"
    state: present
    mode: 0644
  notify: sudo apt update

- name: add rspamd srv-repo
  become: true
  ansible.builtin.apt_repository:
    repo: "deb-src [signed-by=/etc/apt/keyrings/rspamd.gpg] https://rspamd.com/apt-stable/ {{ ansible_distribution_release }} main"
    state: present
    mode: 0644
  notify: sudo apt update

- name: run update if something changed
  ansible.builtin.meta: flush_handlers

- name: install rspamd
  become: true
  ansible.builtin.apt:
    name: rspamd
    state: present
  notify: systemctl restart rspamd