---
- name: Debian/Ubuntu | Install apt-transport-https and ca-certificates
  apt:
    name: "{{ item }}"
    state: present
    cache_valid_time: 3600
  with_items:
    - apt-transport-https
    - ca-certificates

- when: logstash_install_java
  block:
    - name: Debian/Ubuntu | Setting webupd8 repository
      apt_repository:
        repo: 'ppa:webupd8team/java'
        codename: 'xenial'

    - name: Debian/Ubuntu | Accept Oracle Java 8 license
      debconf:
        name: oracle-java8-installer
        question: shared/accepted-oracle-license-v1-1
        value: true
        vtype: boolean

    - name: Debian/Ubuntu | Oracle Java 8 installer
      apt:
        name: oracle-java8-installer
        state: present
        cache_valid_time: 3600
      tags: install

- name: Debian/Ubuntu | Add Elasticsearch GPG key
  apt_key:
    keyserver: "{{ elasticrepo_gpg_keyserver }}"
    id: 46095ACC8548582C1A2699A9D27D666CD88E42B4

- name: Debian/Ubuntu | Install Elasticsearch repo
  apt_repository:
    repo: "deb {{ elasticrepo_server }} stable main"
    state: present
    filename: 'elastic_repo'

- name: Debian/Ubuntu | Install Logstash
  apt:
    name: "logstash=1:{{ elastic_stack_version }}-1"
    state: present
    update_cache: yes
  tags: install

- name: Debian/Ubuntu | Checking if wazuh-manager is installed
  command: dpkg -l wazuh-manager
  register: wazuh_manager_check_deb
  when: logstash_input_beats == false
  args:
    warn: no

- name: Debian/Ubuntu | Add user logstash to group ossec
  user:
    name: logstash
    groups: ossec
    append: yes
  when:
    - logstash_input_beats == false
    - wazuh_manager_check_deb.rc == 0