- name: Copy edit-secrets script
  copy:
    mode: 0750
    src: edit-secrets
    dest: /usr/local/bin/edit-secrets

- name: Add required emacs configuration
  lineinfile:
    path: /root/.emacs
    regexp: 'epg-pinentry-mode'
    line: "(setq epg-pinentry-mode 'loopback)"
    state: present
    create: yes
    owner: root
    group: root
    mode: '0644'

- name: Ensure gnupg directory
  file:
    path: /root/.gnupg
    state: directory
    owner: root
    group: root
    mode: '0700'

- name: Add required gpg-agent configuration
  lineinfile:
    path: /root/.gnupg/gpg-agent
    regexp: '^allow-loopback-pinentry'
    line: 'allow-loopback-pinentry'
    state: present
    create: yes
    owner: root
    group: root
    mode: '0400'