---
- name: Playbook to check if vulnerable
  hosts: all
  vars:
    ara_playbook_name: RM9537-versions-affected.yaml
    ara_playbook_labels:
      - plesk
    folder: /home/ssh-gateway/ansible/playbook_output
  tasks:
    - name: Run iconv command and check for CN-EXT
      ansible.builtin.shell: |
        set -o pipefail
        iconv -l | grep -E 'CN-?EXT'
      args:
        executable: /bin/bash
      register: iconv_output
      ignore_errors: true
      changed_when: false

    - name: Write to file if the command has output
      ansible.builtin.lineinfile:
        dest: "{{ folder }}/RM9537-affected.txt"
        create: true
        mode: '0644'
        line: "{{ ansible_facts.nodename }} - affected"
      delegate_to: 127.0.0.1
      when: iconv_output.rc == 0

    - name: Write to file if the command has no output
      ansible.builtin.lineinfile:
        dest: "{{ folder }}/RM9537-affected.txt"
        create: true
        mode: '0644'
        line: "{{ ansible_facts.nodename }} - NOT AFFECTED"
      delegate_to: 127.0.0.1
      when: iconv_output.rc != 0