algo/playbooks/cloud-post.yml

---
- name: Set subjectAltName as a fact
  set_fact:
    IP_subject_alt_name: "{{ (IP_subject_alt_name if algo_provider == 'local' else cloud_instance_ip) | lower }}"

- name: Add the server to an inventory group
  add_host:
    name: "{% if cloud_instance_ip == 'localhost' %}localhost{% else %}{{ cloud_instance_ip }}{% endif %}"
    groups: vpn-host
    ansible_connection: "{% if cloud_instance_ip == 'localhost' %}local{% else %}ssh{% endif %}"
    ansible_ssh_user: "{{ ansible_ssh_user | default('root') }}"
    ansible_ssh_port: "{{ ansible_ssh_port | default(22) }}"
    ansible_python_interpreter: /usr/bin/python3
    algo_provider: "{{ algo_provider }}"
    algo_server_name: "{{ algo_server_name }}"
    algo_ondemand_cellular: "{{ algo_ondemand_cellular }}"
    algo_ondemand_wifi: "{{ algo_ondemand_wifi }}"
    algo_ondemand_wifi_exclude: "{{ algo_ondemand_wifi_exclude }}"
    algo_dns_adblocking: "{{ algo_dns_adblocking }}"
    algo_ssh_tunneling: "{{ algo_ssh_tunneling }}"
    algo_store_pki: "{{ algo_store_pki }}"
    IP_subject_alt_name: "{{ IP_subject_alt_name }}"
    alternative_ingress_ip: "{{ alternative_ingress_ip | default(omit) }}"
    cloudinit: "{{ cloudinit | default(false) }}"

- name: Additional variables for the server
  add_host:
    name: "{% if cloud_instance_ip == 'localhost' %}localhost{% else %}{{ cloud_instance_ip }}{% endif %}"
    ansible_ssh_private_key_file: "{{ SSH_keys.private_tmp }}"
  when: algo_provider != 'local'

- name: Wait until SSH becomes ready...
  wait_for:
    port: "{{ ansible_ssh_port | default(22) }}"
    host: "{{ cloud_instance_ip }}"
    search_regex: OpenSSH
    delay: 10
    timeout: 320
    state: present
  when: cloud_instance_ip != "localhost"

- name: Mount tmpfs
  import_tasks: tmpfs/main.yml
  when:
    - pki_in_tmpfs
    - not algo_store_pki
    - ansible_system == "Darwin" or ansible_system == "Linux"

- debug:
    var: IP_subject_alt_name

- name: Wait for target connection to become reachable/usable
  wait_for_connection:
    delay: 10         # Wait 10 seconds before first attempt (conservative)
    timeout: 480      # Reduce from 600 to 480 seconds (8 minutes - safer)
    sleep: 10         # Check every 10 seconds (less aggressive polling)
  delegate_to: "{{ item }}"
  loop: "{{ groups['vpn-host'] }}"