apt.yml

---
- hosts: "{{ host_list }}"
  remote_user: root

  tasks:

    - name: INCLUDE_VARS | base
      ansible.builtin.include_vars: "main.yml"

    - name: INCLUDE_VARS | OS
      ansible.builtin.include_vars: "{{ ansible_distribution }}.yml"

    - name: INCLUDE_VARS | Gnome
      when: "'gnome' in group_names"
      ansible.builtin.include_vars: "Gnome.yml"

    - name: INCLUDE_VARS | Mate
      when: "'mate' in group_names"
      ansible.builtin.include_vars: "Mate.yml"

    - name: Remove snap packages
      when: snap_uninstall_pkg is defined
      community.general.snap:
        name: "{{ snap_uninstall_pkg }}"
        state: absent

    - name: APT | install base & os packages
      ansible.builtin.apt:
        cache_valid_time: 3600
        force_apt_get: yes
        pkg: "{{ lookup('flattened', base_pkg, os_pkg) }}"
        state: present
        update_cache: true

    - name: SIGNAL | add key to keyring
      when: inventory_hostname in groups.station
      ansible.builtin.apt_key:
        url: https://updates.signal.org/desktop/apt/keys.asc
        keyring: /usr/share/keyrings/signal-desktop-keyring.gpg
        state: present

    - name: SIGNAL | add apt repository
      when: inventory_hostname in groups.station
      ansible.builtin.apt_repository:
        filename: signal-desktop
        repo: deb [arch=amd64 signed-by=/usr/share/keyrings/signal-desktop-keyring.gpg] https://updates.signal.org/desktop/apt xenial main
        state: present

    - name: APT | install workstation packages
      when: inventory_hostname in groups.station
      ansible.builtin.apt:
        cache_valid_time: 3600
        force_apt_get: yes
        pkg: "{{ lookup('flattened', station_pkg, station_os_pkg, station_wm_pkg) }}"
        state: present
        update_cache: true

    - name: APT | uninstall packages
      ansible.builtin.apt:
        pkg: "{{ lookup('flattened', base_uninstall_pkg, os_uninstall_pkg) }}"
        state: absent

    - name: APT | upgrade all packages to the latest version
      ansible.builtin.apt:
        force_apt_get: yes
        upgrade: safe

    - name: APT | remove useless packages from the cache
      ansible.builtin.apt:
        force_apt_get: yes