ansible-role-nginx/tasks/plus/install-debian.yml

---
- name: (Debian/Ubuntu) Set up NGINX Plus license verification
  blockinfile:
    path: /etc/apt/apt.conf.d/90nginx
    create: yes
    block: |
      Acquire::https::plus-pkgs.nginx.com::Verify-Peer "true";
      Acquire::https::plus-pkgs.nginx.com::Verify-Host "true";
      Acquire::https::plus-pkgs.nginx.com::SslCert     "/etc/ssl/nginx/nginx-repo.crt";
      Acquire::https::plus-pkgs.nginx.com::SslKey      "/etc/ssl/nginx/nginx-repo.key";
    state: "{{ nginx_license_status | default ('present') }}"
    mode: 0444

- name: (Debian/Ubuntu) Configure NGINX Plus repository
  apt_repository:
    filename: nginx-plus
    repo: "{{ repository }}"
    update_cache: no
    state: "{{ nginx_license_status | default ('present') }}"
    mode: 0644

- name: (Debian/Ubuntu) Install NGINX Plus
  apt:
    name: "nginx-plus{{ nginx_version | default('') }}"
    state: "{{ nginx_state }}"
    update_cache: yes
  notify: (Handler) Run NGINX