---
- name: Check tarsnap apt signing key
  ansible.builtin.stat:
    path: /etc/apt/keyrings/tarsnap-deb-packaging-key.asc
  register: tarsnap_signing_key_stat

- name: Download tarsnap apt signing key
  ansible.builtin.get_url:
    url: https://pkg.tarsnap.com/tarsnap-deb-packaging-key.asc
    dest: /etc/apt/keyrings/tarsnap-deb-packaging-key.asc
    owner: root
    group: root
    mode: 0644
  register: download_tarsnap_signing_key
  when: not tarsnap_signing_key_stat.stat.exists

- name: Add tarsnap.org repo
  ansible.builtin.template:
    src: tarsnap_sources.list.j2
    dest: /etc/apt/sources.list.d/tarsnap.list
    owner: root
    group: root
    mode: 0644
  register: add_tarsnap_apt_repository
  when: ansible_architecture != 'armv7l'

- name: Update apt cache
  ansible.builtin.apt: # noqa no-handler
    update_cache: true
  when:
    (download_tarsnap_signing_key.status_code is defined and download_tarsnap_signing_key.status_code == 200) or
    add_tarsnap_apt_repository is changed

- name: Install tarsnap
  ansible.builtin.apt: pkg=tarsnap cache_valid_time=3600

- name: Copy tarsnaprc
  ansible.builtin.copy: src=tarsnaprc dest=/root/.tarsnaprc owner=root group=root mode=0600

# vim: set sw=2 ts=2: