ansible-role-nginx/tasks/keys/rpm-key.yml

---
- name: "(Install: RPM OSs) Set Default RPM NGINX Signing Key"
  set_fact:
    default_keysite: >-
      {{ (ansible_distribution_major_version|int == 6)
      | ternary('http://nginx.org/keys/nginx_signing.key', 'https://nginx.org/keys/nginx_signing.key') }}

- name: "(Install: RPM OSs) Set RPM NGINX Signing Key URL"
  set_fact:
    keysite: "{{ nginx_signing_key | default(default_keysite) }}"

- name: "(Install: RPM OSs) Add RPM NGINX Signing Key"
  rpm_key:
    key: "{{ keysite }}"