- name: Upgrade / replace / downgrade / uninstall all installed packages to the latest versions available
  community.general.apk:
    available: yes
    upgrade: yes
    update_cache: yes

- name: install doas 
  community.general.apk:
    name: doas
    state: latest

- name: edit doas.conf
  lineinfile:
    line: 'permit nopass keepenv :wheel'
    regexp: '^.*permit nopass keepenv :wheel.*$'
    path: /etc/doas.conf
    create: yes
    owner: root
    group: wheel
    mode: 0600