---
- block:
  - name: Display the invocation environment
    shell: >
      ./algo-showenv.sh \
        'algo_provider "{{ algo_provider }}"' \
        {% if ipsec_enabled %}
        'algo_ondemand_cellular "{{ algo_ondemand_cellular }}"' \
        'algo_ondemand_wifi "{{ algo_ondemand_wifi }}"' \
        'algo_ondemand_wifi_exclude "{{ algo_ondemand_wifi_exclude }}"' \
        {% endif %}
        'algo_dns_adblocking "{{ algo_dns_adblocking }}"' \
        'algo_ssh_tunneling "{{ algo_ssh_tunneling }}"' \
        'wireguard_enabled "{{ wireguard_enabled }}"' \
        'dns_encryption "{{ dns_encryption }}"' \
        > /dev/tty || true
    tags: debug

  - name: Install the requirements
    pip:
      state: present
      name:
        - pyOpenSSL>=0.15
        - segno
    tags:
      - always
      - skip_ansible_lint
  delegate_to: localhost
  become: false

- block:
  - name: Generate the SSH private key
    openssl_privatekey:
      path: "{{ SSH_keys.private }}"
      size: 2048
      mode: "0600"
      type: RSA

  - name: Generate the SSH public key
    openssl_publickey:
      path: "{{ SSH_keys.public }}"
      privatekey_path: "{{ SSH_keys.private }}"
      format: OpenSSH

  - name: Copy the private SSH key to /tmp
    copy:
      src: "{{ SSH_keys.private }}"
      dest: "{{ SSH_keys.private_tmp }}"
      force: true
      mode: '0600'
    delegate_to: localhost
    become: false
  when: algo_provider != "local"