---
- name: Download nginx signing key
  get_url:
    url: https://nginx.org/keys/nginx_signing.key
    dest: /tmp/nginx_signing.key
    mode: '0644'

- name: Add nginx keyring
  command: "gpg --dearmor -o /usr/share/keyrings/nginx-archive-keyring.gpg /tmp/nginx_signing.key"

- name: Add nginx repo
  apt_repository:
    repo: "deb [signed-by=/usr/share/keyrings/nginx-archive-keyring.gpg] http://nginx.org/packages/debian/ {{ ansible_distribution_release }} nginx"
    state: present
    update_cache: false

- name: Update apt caches after repo is added
  apt:
    update_cache: true

- name: Install nginx
  package:
    name: nginx
    state: present