---
- name: Add buster-backports to apt sources
  apt_repository:
    repo: deb http://{{ mirror }}/debian buster-backports main
    state: present

- name: Pin freeradius from backports
  template:
    src: apt/preferences.d/freeradius_python3.j2
    dest: /etc/apt/prefederences.d/freeradius_python3

- name: Install freeradius
  apt:
    update_cache: true
    install_recommends: false
    name:
      - freeradius
      - freeradius-common
      - freeradius-utils
      - freeradius-python3
      - libfreeradius3
  register: apt_result
  retries: 3
  until: apt_result is succeeded

- name: Symlink radius certificates
  file:
    src: /etc/letsencrypt/live/crans.org/{{ item }}
    dest: /etc/freeradius/3.0/certs/letsencrypt/{{ item }}
    state: link
    force: yes
  loop:
    - fullchain.pem
    - privkey.pem

- name: Set permissions on certificates
  file:
    path: /etc/letsencrypt/{{ item }}
    group: freerad
    mode: '0755'
    recurse: yes
  loop:
    - live
    - archive