- name: edit doas.conf
  lineinfile:
    line: 'permit nopass keepenv :wheel'
    regexp: '^.*permit nopass keepenv :wheel.*$'
    path: /etc/doas.conf
    create: yes
    owner: root
    group: wheel
    mode: 0600

- name: Check for available syspatches
  shell: syspatch -c
  register: syspatch
  changed_when: syspatch.stdout_lines|length > 0
  ignore_errors: yes

- name: Install available syspatches
  shell: syspatch
  when: syspatch.changed
  register: syspatch_install
  until: syspatch_install.rc == 0
  retries: 5
  delay: 10

- name: reboot
  reboot:
  when: syspatch.changed

- name: update installed packages
  community.general.openbsd_pkg:
    name: "*"
    state: latest
    snapshot: "{{ force_openbsd_snapshot | default(false) }}"

- name: install bootstrap packages
  community.general.openbsd_pkg:
    name: "{{ package.name }}"
    state: "{{ package.state }}"
  loop: "{{ bootstrap_packages[ansible_distribution|lower] }}"
  loop_control:
    loop_var: package