- name: Upgrade
  become: "{{ false if inventory_hostname == 'nas.home.lan' else true }}"
  ignore_unreachable: true
  block:
    - name: Include vault
      ansible.builtin.include_vars:
        file: jaydee.yml
        
    - name: Include facts
      ansible.builtin.include_role:
        name: setup 
      when: ansible_facts.architecture is not defined

    - name: Upgrade Debian
      ansible.builtin.apt:
        update_cache: true
        upgrade: full
      when: >
          inventory_hostname == 'rpi5.home.lan' or
          (ansible_facts.os_family is defined and
          ansible_facts.os_family == 'Debian')
    
    - name: Upgrade RHEL / Rocky / Alma / CentOS
      ansible.builtin.dnf:
        name: "*"
        state: latest
      when: > 
        (ansible_facts.os_family is defined and
        ansible_facts.os_family == "RedHat")

    - name: Upgrade SUSE
      ansible.builtin.zypper:
        name: "*"
        state: latest
      when: >
        (ansible_facts.os_family is defined and
        ansible_facts.os_family == "Suse")

    - name: Upgrade flatpack
      ansible.builtin.command: flatpak update -y
      when: inventory_hostname in ['morefine.home.lan','ryzen.home.lan','asus.home.lan']
      register: logo
      changed_when: "logo.rc == 0"
    
    - name: Check for patchmon
      ansible.builtin.stat:
        path: /usr/local/bin/patchmon-agent
      register: patchmon_check

    - name: Report patchmon
      ansible.builtin.command: patchmon-agent report
      register: logo
      changed_when: "logo.rc == 0"
      ignore_errors: true
      when: patchmon_check.stat.exists