---
- name: PatchMon Agent (Docker-VMs)
  hosts: hawser
  become: yes
  roles:
    - patchmon-agent

- name: PatchMon Agent (Proxmox Hosts)
  hosts: proxmox
  become: yes
  tasks:
    - name: Prüfen ob patchmon-agent bereits installiert ist
      ansible.builtin.stat:
        path: /usr/local/bin/patchmon-agent
      register: patchmon_bin

    - name: Prüfen ob Agent bereits enrolled ist
      ansible.builtin.command: /usr/local/bin/patchmon-agent ping
      register: patchmon_ping
      changed_when: false
      failed_when: false
      when: patchmon_bin.stat.exists

    - name: PatchMon Agent installieren (Auto-Enrollment)
      ansible.builtin.shell: |
        curl -sk "https://patchmon.sascha-lutz.de/api/v1/auto-enrollment/script?type=direct-host&token_key={{ vault_patchmon_token_key }}&token_secret={{ vault_patchmon_token_secret }}" | sh
      args:
        creates: /etc/patchmon/credentials.yml
      when: not patchmon_bin.stat.exists or (patchmon_ping.rc is defined and patchmon_ping.rc != 0)