---
- name: Include OS-specific variables
  include_vars: "{{ item }}"
  with_first_found:
    - files:
        - "{{ ansible_os_family }}-{{ ansible_distribution_major_version }}.yml"
        - "{{ ansible_os_family }}.yml"

- name: install package
  package:
    name: "{{ vault_os_package }}"
    state: present

- name: apply config template
  block:
    - name: server template
      template:
        src: config.hcl.j2
        dest: /etc/vault.hcl
        owner: vault
        group: vault
        mode: 0400
  notify: restart vault

- name: ensure service is started
  systemd:
    name: "{{ vault_os_service }}"
    state: started
    enabled: True