name: Update packages using ansible playbook

on:
  schedule:
    - cron: '@daily'
  workflow_dispatch:

jobs:
  update-packages:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Run Ansible playbook
        env:
          ANSIBLE_HOST_KEY_CHECKING: 'false'
        run: |
          apt update && apt install -y ansible && \
          echo -e "${{ secrets.ANSIBLE_PRIVATE_KEY }}" > /mnt/default-key && \
          echo "${{ secrets.ANSIBLE_BECOME_PASS }}" > /mnt/become-pass.txt && \
          chmod 600 /mnt/default-key && \
          ansible-playbook -i inventory.yml --vault-pass-file /mnt/become-pass.txt --key-file /mnt/default-key playbooks/update-packages.yml