---
- name: Radius | PATCH | Obtain or freshen certificates
  ansible.builtin.include_tasks:
    file: certs.yml

- name: Radius | PATCH | Install required packages
  ansible.builtin.dnf:
    name: freeradius
    state: present
  become: true

- name: Radius | PATCH | Install FreeRADIUS configuration files
  ansible.builtin.template:
    src: etc/raddb/{{ item }}
    dest: /etc/raddb/{{ item }}
    owner: root
    group: radiusd
    mode: 0640
  become: true
  with_items:
    - mods-available/eap
    - mods-available/linelog
    - sites-available/default
    - mods-available/inner-eap
    - sites-available/inner-tunnel
    - clients.conf
    - proxy.conf
  notify:
    - Restart radiusd

- name: Radius | PATCH | Install rsyslog configuration
  ansible.builtin.template:
    src: etc/rsyslog.d/radiusd.conf
    dest: /etc/rsyslog.d/radiusd.conf
    owner: root
    group: root
    mode: 0644
  become: true
  notify:
    - Reload rsyslog