---
- name: Check tarsnap apt signing key
  ansible.builtin.stat:
    path: /etc/apt/keyrings/tarsnap-deb-packaging-key.asc
  register: tarsnap_signing_key_stat

- name: Download tarsnap apt signing key
  ansible.builtin.get_url:
    url: https://pkg.tarsnap.com/tarsnap-deb-packaging-key.asc
    dest: /etc/apt/keyrings/tarsnap-deb-packaging-key.asc
    owner: root
    group: root
    mode: "0644"
  register: download_tarsnap_signing_key
  when: not tarsnap_signing_key_stat.stat.exists

- name: Add tarsnap.org repo
  ansible.builtin.template:
    src: tarsnap_sources.list.j2
    dest: /etc/apt/sources.list.d/tarsnap.list
    owner: root
    group: root
    mode: "0644"
  register: add_tarsnap_apt_repository
  when: ansible_architecture != 'armv7l'

- name: Update apt cache
  ansible.builtin.apt: # noqa no-handler
    update_cache: true
  when: (download_tarsnap_signing_key.status_code is defined and download_tarsnap_signing_key.status_code == 200) or add_tarsnap_apt_repository is changed

- name: Install tarsnap
  ansible.builtin.apt:
    pkg: tarsnap
    cache_valid_time: 3600

- name: Copy tarsnaprc
  ansible.builtin.copy:
    src: tarsnaprc
    dest: /root/.tarsnaprc
    owner: root
    group: root
    mode: "0600"

# vim: set sw=2 ts=2: