---
- name: Install docker.com APT repository

  hosts: ungrouped
  remote_user: root

  vars_files: vars.yaml

  pre_tasks:
    - name: Resynchronize APT packages indexes
      ansible.builtin.apt:
        update_cache: true

    - name: Uninstall conflicting APT packages
      ansible.builtin.apt:
        state: absent
        name:
          - docker.io
          - docker-compose
          - docker-doc
          - podman-docker

    - name: Install required APT packages
      ansible.builtin.apt:
        state: present
        name:
          - ca-certificates
          - apt-transport-https

    - name: Update keyrings/ directory permissions
      ansible.builtin.file:
        path: '/etc/apt/keyrings'
        owner: _apt
        group: nogroup
        mode: '0755'

  tasks:
    - name: Download docker.com GPG public key
      ansible.builtin.get_url:
        url: "{{ url_docker_gpg_public }}"
        dest: "{{ path_docker_apt_keyring }}"
        owner: _apt
        group: nogroup
        mode: '0644'

    - name: Add docker.com APT repository file
      ansible.builtin.apt_repository:
        repo: >-
          deb [signed-by={{ path_docker_apt_keyring }}]
          https://download.docker.com/linux/{{ ansible_distribution }} {{ ansible_distribution_release }} stable
        filename: docker
...