---
- name: Legacy .list Dateien finden
  find:
    paths: /etc/apt/sources.list.d
    patterns: "*.list"
  register: legacy_lists

- name: Legacy .list Dateien umbenennen
  command: mv "{{ item.path }}" "{{ item.path }}.bak"
  loop: "{{ legacy_lists.files }}"
  when: legacy_lists.files | length > 0
  args:
    creates: "{{ item.path }}.bak"

- name: Legacy sources.list leeren
  copy:
    dest: /etc/apt/sources.list
    content: ""
    mode: "0644"

- name: Debian Trixie Quellen (deb822)
  copy:
    dest: /etc/apt/sources.list.d/debian.sources
    content: |
      Types: deb
      URIs: http://deb.debian.org/debian/
      Suites: trixie trixie-updates
      Components: main contrib non-free non-free-firmware
      Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg

      Types: deb
      URIs: http://security.debian.org/debian-security/
      Suites: trixie-security
      Components: main contrib non-free non-free-firmware
      Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
    mode: "0644"

- name: Enterprise Repo deaktivieren (auskommentiert)
  copy:
    dest: /etc/apt/sources.list.d/pve-enterprise.sources
    content: |
      # Types: deb
      # URIs: https://enterprise.proxmox.com/debian/pve
      # Suites: trixie
      # Components: pve-enterprise
      # Signed-By: /usr/share/keyrings/proxmox-archive-keyring.gpg
    mode: "0644"

- name: Ceph Enterprise Repo deaktivieren (auskommentiert)
  copy:
    dest: /etc/apt/sources.list.d/ceph.sources
    content: |
      # Types: deb
      # URIs: https://enterprise.proxmox.com/debian/ceph-squid
      # Suites: trixie
      # Components: enterprise
      # Signed-By: /usr/share/keyrings/proxmox-archive-keyring.gpg
    mode: "0644"

- name: PVE No-Subscription Repo (deb822)
  copy:
    dest: /etc/apt/sources.list.d/proxmox.sources
    content: |
      Types: deb
      URIs: http://download.proxmox.com/debian/pve
      Suites: trixie
      Components: pve-no-subscription
      Signed-By: /usr/share/keyrings/proxmox-archive-keyring.gpg
    mode: "0644"

- name: PVE Test Repo (disabled)
  copy:
    dest: /etc/apt/sources.list.d/pve-test.sources
    content: |
      Types: deb
      URIs: http://download.proxmox.com/debian/pve
      Suites: trixie
      Components: pve-test
      Signed-By: /usr/share/keyrings/proxmox-archive-keyring.gpg
      Enabled: false
    mode: "0644"

- name: Subscription Nag Patch Script deployen
  copy:
    dest: /usr/local/bin/pve-remove-nag.sh
    mode: "0755"
    content: |
      #!/bin/sh
      WEB_JS=/usr/share/javascript/proxmox-widget-toolkit/proxmoxlib.js
      if [ -s "$WEB_JS" ] && ! grep -q NoMoreNagging "$WEB_JS"; then
        sed -i -e "/data\.status/ s/!//" -e "/data\.status/ s/active/NoMoreNagging/" "$WEB_JS"
      fi

- name: Nag Patch als DPkg Post-Invoke registrieren
  copy:
    dest: /etc/apt/apt.conf.d/no-nag-script
    content: 'DPkg::Post-Invoke { "/usr/local/bin/pve-remove-nag.sh"; };'
    mode: "0644"

- name: Nag Patch einmalig ausfuehren
  command: /usr/local/bin/pve-remove-nag.sh
  changed_when: false

- name: HA Services deaktivieren
  systemd:
    name: "{{ item }}"
    enabled: false
    state: stopped
  loop:
    - pve-ha-lrm
    - pve-ha-crm
    - corosync
  failed_when: false

- name: Apt Cache aktualisieren
  apt:
    update_cache: yes

- name: Dist-Upgrade ausfuehren
  apt:
    upgrade: dist
    autoremove: yes