Update nginx install to install latest stable

4 files changed, 38 insertions, 5 deletions

diff --git a/roles/nginx/tasks/install-alpine.yml b/roles/nginx/tasks/install-alpine.yml
new file mode 100644
index 00000000..c53d0e2e
--- /dev/null
+++ b/roles/nginx/tasks/install-alpine.yml
@@ -0,0 +1,6 @@
+---
+- name: "Install nginx"
+  become: true
+  ansible.builtin.package:
+    name: "nginx"
+    state: "present"
diff --git a/roles/nginx/tasks/install-archlinux.yml b/roles/nginx/tasks/install-archlinux.yml
new file mode 100644
index 00000000..c53d0e2e
--- /dev/null
+++ b/roles/nginx/tasks/install-archlinux.yml
@@ -0,0 +1,6 @@
+---
+- name: "Install nginx"
+  become: true
+  ansible.builtin.package:
+    name: "nginx"
+    state: "present"
diff --git a/roles/nginx/tasks/install-debian.yml b/roles/nginx/tasks/install-debian.yml
new file mode 100644
index 00000000..39e7ab41
--- /dev/null
+++ b/roles/nginx/tasks/install-debian.yml
@@ -0,0 +1,24 @@
+---
+- name: "Download nginx GPG key"
+  become: true
+  ansible.builtin.get_url:
+    url: "https://nginx.org/keys/nginx_signing.key"
+    dest: "/etc/apt/trusted.gpg.d/nginx.asc"
+    mode: "0644"
+    owner: "root"
+    group: "root"
+
+- name: "Add nginx APT repository"
+  become: true
+  ansible.builtin.apt_repository:
+    # yamllint disable-line rule:line-length
+    repo: "deb [signed-by=/etc/apt/trusted.gpg.d/nginx.asc] https://nginx.org/packages/debian {{ ansible_facts['distribution_release'] }} nginx"
+    state: "present"
+    filename: "nginx"
+
+- name: "Install nginx"
+  become: true
+  ansible.builtin.package:
+    name: "nginx"
+    state: "present"
+    update_cache: true
diff --git a/roles/nginx/tasks/main.yml b/roles/nginx/tasks/main.yml
index e9095dcc..f78cd24b 100644
--- a/roles/nginx/tasks/main.yml
+++ b/roles/nginx/tasks/main.yml
@@ -10,11 +10,8 @@
     enabled: false
   failed_when: false
 
-- name: "Ensure nginx is installed"
-  become: true
-  ansible.builtin.package:
-    name: "nginx"
-    state: "present"
+- name: "Include OS-specific installation tasks"
+  ansible.builtin.include_tasks: "install-{{ ansible_facts['os_family'] | lower }}.yml"
 
 - name: "Ensure nginx directories exist"
   become: true