Setup repo pin. to ensure nginx package gets installed from NGINX repos

playbooks/roles/nginx/tasks/main/repo_setup.yaml

@@ -29,5 +29,17 @@
   become: true
   notify: apt-get update
 
+- name: set up repository pinning to make sure nginx package gets installed from NGINX repositories
+  ansible.builtin.copy:
+    content: |
+      Package: *
+      Pin: origin nginx.org
+      Pin: release o=nginx
+      Pin-Priority: 900
+    dest: /etc/apt/preferences.d/99nginx
+    owner: root
+    group: root
+    mode: "0644"
+
 - name: Flush handlers to make sure "apt-get update" handler runs, if needed
   ansible.builtin.meta: flush_handlers