dotfiles/roles/gnupg/tasks/main.yml

---
# Installs GnuPG2 and templates the configs

- name: Install gnupg (RedHat*)
  package:
    name: gnupg2
    state: latest
  become: yes
  become_user: root
  become_method: sudo
  when: ansible_os_family == "RedHat"
  ignore_errors: true

- name: Install gnupg (Arch)
  package:
    name: gnupg
    state: latest
  when: ansible_os_family == "Archlinux"

- name: Configure gpg.conf (behaviour of gpg)
  template:
    src: gpg.conf.j2
    dest: "{{ gpg_folder }}/gpg.conf"

- name: Configure gpg-agent.conf (agent configuration)
  template:
    src: gpg-agent.conf.j2
    dest: "{{ gpg_folder }}/gpg-agent.conf"

- name: Configure ssh-control (in order for gpg-agent to act as ssh-agent)
  template:
    src: sshcontrol.j2
    dest: "{{ gpg_folder }}/sshcontrol"

- name: Copy gnupg_agent script, which makes gpg-agent responsible for ssh-auth
  template:
    src: gnupg_agent.j2
    dest: "{{ gpg_folder }}/gnupg_agent"
    mode: 0700