ansible-infra/playbooks/roles/nginx/tasks/main/repo_setup.yaml

- name: make sure `gnupg` package is installed
  ansible.builtin.apt:
    name: gnupg
    state: present
    update_cache: true
  become: true

- name: make sure NGINX signing key is added
  ansible.builtin.apt_key:
    url: https://nginx.org/keys/nginx_signing.key
    state: present
  become: true
  notify: apt-get update

- name: make sure NGINX APT repository is added
  ansible.builtin.apt_repository:
    repo: "deb https://nginx.org/packages/debian/ {{ ansible_distribution_release }} nginx"
    state: present
  become: true
  notify: apt-get update

- name: make sure NGINX APT source repository is added
  ansible.builtin.apt_repository:
    repo: "deb-src https://nginx.org/packages/debian/ {{ ansible_distribution_release }} nginx"
    state: present
  become: true
  notify: apt-get update

- name: Flush handlers to make sure "apt-get update" handler runs, if needed
  ansible.builtin.meta: flush_handlers