---
- name: "Add Cloudflare APK repo key"
  become: true
  ansible.builtin.get_url:
    url: "https://pkg.cloudflare.com/cloudflare-main.pub"
    dest: "/etc/apk/keys/cloudflare-main.pub"
    mode: "0644"
    owner: "root"
    group: "root"

- name: "Add Cloudflare APK repository"
  become: true
  ansible.builtin.lineinfile:
    path: "/etc/apk/repositories"
    line: "https://pkg.cloudflare.com/cloudflared/apk"
    state: present

- name: "Install cloudflared"
  become: true
  ansible.builtin.package:
    name: "cloudflared"
    state: present
    update_cache: true

- name: "Deploy cloudflared OpenRC service"
  become: true
  ansible.builtin.template:
    src: "cloudflared.initd.j2"
    dest: "/etc/init.d/cloudflared"
    owner: "root"
    group: "root"
    mode: "0755"
  notify: "Restart cloudflared"

- name: "Start and enable cloudflared"
  become: true
  ansible.builtin.service:
    name: "cloudflared"
    state: "started"
    enabled: true