---
- name: Receive gitea pgp key
  ansible.builtin.command: gpg --keyserver hkps://keys.openpgp.org --recv 7C9E68152594688862D62AF62D9AE806EC1592E2
  register: result
  changed_when: '"not changed" not in result.stderr'

- name: Download gitea asc file
  ansible.builtin.get_url:
    url: "https://dl.gitea.io/gitea/{{ gitea_binary.json.latest.version }}/gitea-{{ gitea_binary.json.latest.version }}-linux-{{ gitea_binary_arch }}.asc"
    dest: "/tmp/gitea-{{ gitea_binary.json.latest.version }}.asc"
    mode: 0644

- name: Verify gitea binary with gpg
  ansible.builtin.command: "gpg --verify /tmp/gitea-{{ gitea_binary.json.latest.version }}.asc {{ gitea_run_dir }}/gitea-{{ gitea_binary.json.latest.version }}"
  register: result
  failed_when: '"Good signature from" not in result.stderr'

- name: Start gitea service
  become: true
  ansible.builtin.systemd:
    name: gitea
    state: started
    enabled: true

- name: Restart gitea service
  become: true
  ansible.builtin.systemd:
    name: gitea
    state: restarted