name: Update packages using ansible playbook

on:
  schedule:
    - cron: '@daily'
  workflow_dispatch:

jobs:
  update-packages:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Run Ansible playbook
        env:
          ANSIBLE_HOST_KEY_CHECKING: 'false'
          SSH_KEY: ${{ secrets.ANSIBLE_PRIVATE_KEY }}
          BECOME_PASS: ${{ secrets.ANSIBLE_BECOME_PASS }}
        run: |
          apt update && apt install -y ansible && \
          echo -e ${SSH_KEY} > /mnt/default-key && \
          echo ${BECOME_PASS} > /mnt/become-pass.txt && \
          chmod 600 /mnt/default-key && \
          ansible-playbook -i inventory.yml --vault-pass-file /mnt/become-pass.txt --key-file /mnt/default-key playbooks/update-packages.yml