- hosts: localhost
  gather_facts: no
  vars_files:
    - ~/include/OPNSense_firewalls/OPNSense-Primaries.yaml

  collections:
    - ansibleguy.opnsense
  tasks:
    - name: Show variable values
      debug:
        msg: "Items: {{ 'opnsensefirewall', 'opnsenseapi_port', 'opnsensessl_verify', 'opnsensessl_ca_file', 'opnsenseapi_key', 'opnsenseapi_secret' }}"
      loop: "{{ primaries }}"

    - name: Pull updates for PRIMARY firewalls
      system:
        action: 'update'
        firewall: "{{ item.opnsensefirewall }}"
        api_port: "{{ item.opnsenseapi_port }}"
        ssl_verify: false
        ssl_ca_file: "{{ item.opnsensessl_ca_file }}"
        api_key: "{{ item.opnsenseapi_key }}"
        api_secret: "{{ item.opnsenseapi_secret }}"
        debug: true
      loop: "{{ primaries }}"

    - name: Start UPGRADES for PRIMARY firewalls
      system:
        action: 'upgrade'
        wait: true
        firewall: "{{ item.opnsensefirewall }}"
        api_port: "{{ item.opnsenseapi_port }}"
        ssl_verify: false
        ssl_ca_file: "{{ item.opnsensessl_ca_file }}"
        api_key: "{{ item.opnsenseapi_key }}"
        api_secret: "{{ item.opnsenseapi_secret }}"
        debug: true
      loop: "{{ primaries }}"