---

- hosts: '{{ ip_addr }}'
  become: yes
  become_method: sudo
  gather_facts: yes

  tasks:

    - name: "[CONFIG SECURE GRUB] Comprobando si es necesario configurar secure grub"
      debug:
        msg: "No es necesario configurar secure grub en la máquina"
      when: secure-grub_enabled is not defined or not secure-grub_enabled

    - name: "[CONFIG SECURE GRUB] configure secure grub"
      import_role:
        name: config-secure-grub
      when: secure-grub_enabled is defined and secure-grub_enabled