ansible-role-nginx/tasks/keys/apk-key.yml

---
- name: "(Install: APK OSs) Set Default APK NGINX Signing Key URL"
  set_fact:
    default_keysite: https://nginx.org/keys/nginx_signing.rsa.pub

- name: "(Install: APK OSs) Set APK NGINX Signing Key URL"
  set_fact:
    keysite: "{{ nginx_signing_key | default(default_keysite) }}"

- name: "(Install: APK OSs) Download NGINX Signing Key"
  get_url:
    url: "{{ keysite }}"
    dest: /etc/apk/keys/nginx_signing.rsa.pub
    mode: 0400