---
- name: Install adoptium.net APT repository

  hosts: ungrouped
  remote_user: root

  vars_files: vars.yaml

  pre_tasks:
    - name: Resynchronize APT packages indexes
      ansible.builtin.apt:
        update_cache: true

    - name: Install required APT packages
      ansible.builtin.apt:
        state: present
        name:
          - gpg
          - ca-certificates
          - apt-transport-https

    - name: Update keyrings/ folder permissions
      ansible.builtin.file:
        path: '/etc/apt/keyrings'
        owner: _apt
        group: nogroup
        mode: '0755'

  tasks:
    - name: Download adoptium.net GPG public key
      ansible.builtin.get_url:
        url: "{{ url_adoptium_gpg_public }}"
        dest: "{{ path_adoptium_apt_keyrings }}"
        owner: _apt
        group: nogroup
        mode: '0644'

    - name: Add adoptium.net APT repository file
      ansible.builtin.apt_repository:
        repo: >-
          deb [signed-by={{ path_adoptium_apt_keyrings }}]
          https://packages.adoptium.net/artifactory/deb {{ ansible_distribution_release }} main"
        filename: adoptium
...