---
- name: install unbound prometheus exporter
  become: true
  vars:
    prometheus_unbound_exporter_version: "0.6.0"
    prometheus_unbound_exporter_filename: "unbound_exporter-v{{ prometheus_unbound_exporter_version }}.x86_64.deb"
    prometheus_unbound_exporter_github_api_url: "https://api.github.com/repos/letsencrypt/unbound_exporter/releases/tags/v{{ prometheus_unbound_exporter_version }}"
  block:
    - name: request github api
      ansible.builtin.uri:
        url: "{{ prometheus_unbound_exporter_github_api_url }}"
        method: GET
        body_format: json
        headers:
          'Accept': 'application/vnd.github+json'
      register: unbound_exporter_github_api_result

    - name: get prometheus-unbound-exporter download url and digest
      ansible.builtin.set_fact:
        unbound_exporter_download_url: "{{ unbound_exporter_github_api_result.json.assets[0].browser_download_url }}"
        unbound_exporter_download_digest: "{{ unbound_exporter_github_api_result.json.assets[0].digest }}"

    - name: Download prometheus-unbound-exporter deb package with verified checksum
      ansible.builtin.get_url:
        url: "{{ unbound_exporter_download_url }}"
        dest: "/tmp/{{ prometheus_unbound_exporter_filename }}"
        checksum: "{{ unbound_exporter_download_digest }}"
        mode: "u=r,g=r,o=r"

    - name: Install prometheus-unbound-exporter deb package
      become: true
      ansible.builtin.apt:
        deb: "/tmp/{{ prometheus_unbound_exporter_filename }}"
        state: present
      notify: prometheus-unbound-exporter.restarted

- name: deploy prometheus-unbound-exporter systemd service
  become: true
  ansible.builtin.copy:
    src: "prometheus-unbound-exporter.service"
    dest: "/etc/systemd/system/prometheus-unbound-exporter.service"
    owner: root
    group: root
    mode: '0644'
  notify: systemd-daemon-reload

- name: enable unbound prometheus exporter
  become: true
  ansible.builtin.systemd:
    name: prometheus-unbound-exporter.service
    enabled: true
    daemon_reload: true

- name: configure unbound exporter
  become: true
  ansible.builtin.copy:
    dest: /etc/prometheus-unbound-exporter.conf
    content: |
      UNBOUND_EXPORTER_ARGS="-unbound.ca "" -unbound.cert "" -unbound.host "unix:///run/unbound.ctl"
    owner: root
    group: root
    mode: '0644'
  notify: prometheus-unbound-exporter.restarted