---
- name: Install ZeroTier on Debian hosts
  hosts: debian
  become: true
  gather_facts: true

  tasks:
    - name: Verify Debian
      ansible.builtin.assert:
        that:
          - ansible_distribution == "Debian"

    - name: Install prerequisites
      ansible.builtin.apt:
        name:
          - ca-certificates
          - curl
          - gpg
        state: present
        update_cache: true

    - name: Download official ZeroTier installer
      ansible.builtin.get_url:
        url: https://install.zerotier.com/
        dest: /tmp/zerotier-install.sh
        mode: "0755"

    - name: Run official ZeroTier installer
      ansible.builtin.command:
        cmd: bash /tmp/zerotier-install.sh
      register: zerotier_install
      changed_when: zerotier_install.rc == 0

    - name: Refresh systemd service definitions
      ansible.builtin.command:
        cmd: systemctl daemon-reload
      changed_when: false
      when: ansible_service_mgr == "systemd"

    - name: Check for ZeroTier service
      ansible.builtin.command:
        cmd: systemctl list-unit-files zerotier-one.service
      register: zerotier_unit
      changed_when: false
      failed_when: false
      when: ansible_service_mgr == "systemd"

    - name: Show installer and service diagnostics
      ansible.builtin.debug:
        msg:
          - "Installer output: {{ zerotier_install.stdout | default('') }}"
          - "Installer errors: {{ zerotier_install.stderr | default('') }}"
          - "Service unit: {{ zerotier_unit.stdout | default('systemd unavailable') }}"

    - name: Enable and start ZeroTier
      ansible.builtin.systemd:
        name: zerotier-one.service
        enabled: true
        state: started
      when:
        - ansible_service_mgr == "systemd"
        - zerotier_unit.stdout is defined
        - "'zerotier-one.service' in zerotier_unit.stdout"