- name: Generate DKIM keys
  when: passwords['dkim_public_key_base64'] is not defined or passwords['dkim_private_key_base64'] is not defined
  block:
    - name: Create DKIM keys
      docker_container:
        name: ddclient
        image: "{{ docker_registry }}/pwgen"
        cleanup: true
        detach: false
        container_default_behavior: no_defaults
        command: "sh dkim-key.sh {{ mail_domain | default(domain) }}"
      register: dkim_container_output
    
    - name: Set dkim_keys
      set_fact:
        dkim_keys: "{{ dkim_container_output.container.Output | from_yaml }}"
    
    - name: Show DKIM private key
      debug:
        msg: "ddclient private key: {{ dkim_keys['dkim'][0]['default.private'] | b64decode }}"
        verbosity: 2
    
    - name: Show DKIM public key
      debug:
        msg: "ddclient public key: {{ dkim_keys['dkim'][0]['default.txt'] | b64decode }}"
        verbosity: 2
    
    - name: Write DKIM private key
      lineinfile:
        path: "{{ inventory_dir }}/group_vars/all/passwords.yaml"
        line: "dkim_private_key_base64: \"{{ dkim_keys['dkim'][0]['default.private'] }}\""
    
    - name: Write DKIM public key
      lineinfile:
        path: "{{ inventory_dir }}/group_vars/all/passwords.yaml"
        line: "dkim_public_key_base64: \"{{ dkim_keys['dkim'][0]['default.txt'] }}\""