- name: Generate VAPID keys
  when: passwords[item.name + '_vapid_public_key_base64'] is not defined or passwords[item.name + '_vapid_private_key_base64'] is not defined
  block:
    - name: Create VAPID keys
      docker_container:
        name: vapid
        image: "{{ docker_registry }}/pwgen"
        cleanup: true
        detach: false
        container_default_behavior: no_defaults
        command: "/vapid"
      register: vapid_container_output
    
    - name: Set VAPID keys fact
      set_fact:
        vapid_keys: "{{ vapid_container_output.container.Output | from_yaml }}"
    
    - name: Show VAPID private key
      debug:
        msg: "vapid private key: {{ vapid_keys['vapidPrivateKey'] }}"
        verbosity: 2
    
    - name: Show VAPID public key
      debug:
        msg: "vapid public key: {{ vapid_keys['vapidPublicKey'] }}"
        verbosity: 2
    
    - name: Write VAPID private key
      lineinfile:
        path: "{{ inventory_dir }}/group_vars/all/passwords.yaml"
        line: "{{ item.name }}_vapid_private_key_base64: \"{{ vapid_keys['vapidPrivateKey'] | b64encode }}\""
    
    - name: Write VAPID public key
      lineinfile:
        path: "{{ inventory_dir }}/group_vars/all/passwords.yaml"
        line: "{{ item.name }}_vapid_public_key_base64: \"{{ vapid_keys['vapidPublicKey'] | b64encode }}\""