---
- name: Install sury.org/php APT repository

  hosts: ungrouped
  remote_user: root

  vars_files: vars.yaml

  pre_tasks:
    - name: Resynchronize APT packages indexes
      ansible.builtin.apt:
        update_cache: true

    - name: Install required APT packages
      ansible.builtin.apt:
        state: present
        name:
          - gpg
          - ca-certificates
          - apt-transport-https

    - name: Update keyrings/ folder permissions
      ansible.builtin.file:
        path: '/etc/apt/keyrings'
        owner: _apt
        group: nogroup
        mode: '0755'

  tasks:
    - name: Download sury.org/php GPG public key
      ansible.builtin.get_url:
        url: "{{ url_suryphp_gpg_public }}"
        dest: "{{ path_suryphp_apt_keyring }}"
        owner: _apt
        group: nogroup
        mode: '0644'

    - name: Add sury.org/php APT repository file
      ansible.builtin.apt_repository:
        repo: >-
          deb [signed-by={{ path_suryphp_apt_keyring }}]
          https://packages.sury.org/php {{ ansible_distribution_release }} main
        filename: adoptium
...