- name: Create /usr/local/apt-keys directory
  ansible.builtin.file:
    path: /usr/local/apt-keys
    state: directory
    mode: '0755'

- name: Download GPG key
  ansible.builtin.shell: gpg --fetch-keys https://neilalexander.s3.dualstack.eu-west-2.amazonaws.com/deb/key.txt

- name: Install GPG key
  ansible.builtin.shell: gpg --export 569130E8CA20FBC4CB3FDE555898470A764B32C9 | sudo tee /usr/local/apt-keys/yggdrasil-keyring.gpg > /dev/null

- name: Add specified repository into sources list using specified filename
  ansible.builtin.apt_repository:
    repo: deb [signed-by=/usr/local/apt-keys/yggdrasil-keyring.gpg] http://neilalexander.s3.dualstack.eu-west-2.amazonaws.com/deb/ debian yggdrasil
    state: present
    filename: yggdrasil

- name: Update repositories cache and install "yggdrasil" package
  ansible.builtin.apt:
    name: yggdrasil
    update_cache: yes

- name: Update yggdrasil.conf with peers
  replace:
    path: /etc/yggdrasil.conf
    regexp: 'Peers:\s\[\]'
    replace: 'Peers: [\n\ttls://[2001:470:1f13:e56::64]:39575\n\ttls://s2.i2pd.xyz:39575\n\ttls://51.255.223.60:54232\n\ttls://45.147.198.155:6010\n\ttls://ygg1.ezdomain.ru:11130\n\ttls://ygg.mkg20001.io:443\n  ]'

- name: Enable Yggdrasil service
  ansible.builtin.systemd:
    name: yggdrasil
    enabled: yes
    state: started
    masked: no