---
- name: Install and configure ZeroTier on Debian hosts
  hosts: debian
  become: true
  gather_facts: true

  tasks:
    - name: Verify Debian
      ansible.builtin.assert:
        that:
          - ansible_facts["distribution"] == "Debian"

    - name: Install prerequisites
      ansible.builtin.apt:
        name:
          - ca-certificates
          - curl
        state: present
        update_cache: true

    - name: Download official ZeroTier installer
      ansible.builtin.get_url:
        url: https://install.zerotier.com/
        dest: /tmp/zerotier-install.sh
        mode: "0755"

    - name: Check whether ZeroTier package is installed
      ansible.builtin.command:
        cmd: dpkg-query -W -f='${Status}' zerotier-one
      register: zerotier_package
      changed_when: false
      failed_when: false

    - name: Run official installer when package is missing
      ansible.builtin.command:
        cmd: bash /tmp/zerotier-install.sh
      when: "'install ok installed' not in zerotier_package.stdout"

    - name: Verify ZeroTier package
      ansible.builtin.command:
        cmd: dpkg-query -W -f='${Status}' zerotier-one
      register: zerotier_verify
      changed_when: false
      failed_when: "'install ok installed' not in zerotier_verify.stdout"

    - name: Reload systemd
      ansible.builtin.systemd:
        daemon_reload: true

    - name: Enable and start ZeroTier
      ansible.builtin.systemd:
        name: zerotier-one
        enabled: true
        state: started

    - name: Check ZeroTier status
      ansible.builtin.command:
        cmd: zerotier-cli info
      register: zerotier_status
      changed_when: false

    - name: Display ZeroTier status
      ansible.builtin.debug:
        msg: "{{ inventory_hostname }}: {{ zerotier_status.stdout }}"