initial commit

.gitignore

@@ -0,0 +1,4 @@
+.ansible/
+.vscode/
+
+inventory.yaml

playbook.yaml

@@ -0,0 +1,44 @@
+---
+- name: Install sury.org/php APT repository
+
+  hosts: ungrouped
+  remote_user: root
+
+  vars_files: vars.yaml
+
+  pre_tasks:
+    - name: Resynchronize APT packages indexes
+      ansible.builtin.apt:
+        update_cache: true
+
+    - name: Install required APT packages
+      ansible.builtin.apt:
+        state: present
+        name:
+          - gpg
+          - ca-certificates
+          - apt-transport-https
+
+    - name: Update keyrings/ folder permissions
+      ansible.builtin.file:
+        path: '/etc/apt/keyrings'
+        owner: _apt
+        group: nogroup
+        mode: '0755'
+
+  tasks:
+    - name: Download sury.org/php GPG public key
+      ansible.builtin.get_url:
+        url: "{{ url_suryphp_gpg_public }}"
+        dest: "{{ path_suryphp_apt_keyring }}"
+        owner: _apt
+        group: nogroup
+        mode: '0644'
+
+    - name: Add sury.org/php APT repository file
+      ansible.builtin.apt_repository:
+        repo: >-
+          deb [signed-by={{ path_suryphp_apt_keyring }}]
+          https://packages.sury.org/php {{ ansible_distribution_release }} main
+        filename: adoptium
+...

vars.yaml

@@ -0,0 +1,3 @@
+---
+url_suryphp_gpg_public: https://packages.sury.org/php/apt.gpg
+path_suryphp_apt_keyring: /etc/apt/keyrings/suryphp.gpg