---
- name: SSH — ensure current keys are authorized
  ansible.posix.authorized_key:
    user: "{{ remote_user }}"
    key: |
      {{ ssh_pubkey_dotlaptop_lin }}
      {{ ssh_pubkey_dotlaptop_win }}
  tags: [ssh]

- name: Install base packages
  apt:
    name:
      - screen
      - pipx
      - vnstat
      - git
    state: present
  become: true

- name: Set MOTD
  template:
    src: motd.j2
    dest: /etc/motd
    owner: root
    group: root
    mode: "0644"
  become: true

- name: Download Tailscale install script
  get_url:
    url: https://tailscale.com/install.sh
    dest: /tmp/tailscale-install.sh
    mode: "0755"

- name: Run Tailscale install script
  shell: sh /tmp/tailscale-install.sh
  args:
    creates: /usr/bin/tailscale
  become: true

- name: Enable and start tailscaled
  systemd:
    name: tailscaled
    enabled: true
    state: started
  become: true

- name: Authenticate Tailscale
  shell: tailscale up --authkey {{ tailscale_auth_key }}
  become: true
  when: tailscale_auth_key != ""
  no_log: true