---

- name: Download vault-unseal
  get_url:
    url: "{{ vault_unseal_bin_url }}"
    dest: /usr/local/bin/vault-unseal
    checksum: sha256:{{ vault_unseal_bin_sha256 }}
    owner: root
    group: root
    mode: 755
  when: vault_unseal_install_mode != 'none'
  tags: vault

- name: Deploy systemd unit
  template: src=vault-unseal.service.j2 dest=/etc/systemd/system/vault-unseal.service
  notify: restart vault-unseal
  tags: vault