---
- name: Install fwknop
  ansible.builtin.package:
    name: fwknop-server
    state: present
    update_cache: true

- name: Enable and start fwknopd
  ansible.builtin.systemd:
    name: fwknopd
    enabled: true
    state: started

- name: Generate fwknop key pair
  ansible.builtin.command: fwknop --key-gen
  args:
    creates: "{{ fwknopd_keys_dir }}/access.conf"

- name: Copy access.conf
  ansible.builtin.template:
    src: access.conf.j2
    dest: "{{ fwknopd_keys_dir }}/access.conf"
    owner: root
    group: root
    mode: '0600'