---
#depends_on:
#  - ansible-lint

steps:
  ansible-playbook:
    image: registry.mgrote.net/ansible-image:master
    commands:
      # Secrets
      - echo $${SSHKEY} | base64 -d > ./id_ed25519 # woodpecker verschluckt linebreakes, daher mit base64 -w0 "kodiert"
      - echo $${VAULTPASS} | base64 -d > ./vault-pass # Name des Secrets in Großschreibung
      - chmod 0400 ./id_ed25519
      # Debug
      - ansible localhost -m debug -a "var={{ lookup('viczem.keepass.keepass', 'restic_repository_password', 'password') }}"
      # Doing
      #- ansible-playbook playbooks/2_all.yml playbooks/3_service/* --limit production
    # https://woodpecker-ci.org/docs/usage/secrets#use-secrets-in-commands
    secrets: [vaultpass, sshkey]
    when:
      - event: [push, pull_request_closed]
        branch: image # master
...