---
# roles/pfsense_upgrade/tasks/main.yml

- name: Include pre-flight checks
  ansible.builtin.import_tasks: preflight.yml
  tags: [always, preflight, check]

- name: Include version detection
  ansible.builtin.import_tasks: version_detect.yml
  tags: [always, check]

- name: Include update check
  ansible.builtin.import_tasks: update_check.yml
  tags: [always, check]

- name: Include CARP/HA pre-upgrade logic
  ansible.builtin.import_tasks: carp.yml
  tags: [always, check, carp]
  when: ha_peer is defined

- name: Include upgrade execution
  ansible.builtin.import_tasks: upgrade.yml
  tags: [upgrade]
  when: 
    - perform_upgrade | bool
    - upgrade_available | bool


- name: Include CARP/HA post-upgrade restore
  ansible.builtin.import_tasks: carp.yml
  tags: [upgrade, carp]
  when:
    - ha_peer is defined
    - perform_upgrade | bool

- name: Include post-upgrade verification
  ansible.builtin.import_tasks: verify.yml
  tags: [upgrade, verify]
  when: perform_upgrade | bool