ansible-role-nextcloud/tasks/core.yml

---

- name: nextcloud archive dir
  file:
    path: "{{nextcloud_archive_directory}}"
    state: directory

- name: nextcloud core archive checksum download
  get_url:
    url: https://download.nextcloud.com/server/releases/nextcloud-{{ nextcloud_version }}.tar.bz2.sha256
    dest: "{{nextcloud_archive_directory}}/nextcloud-{{ nextcloud_version }}.tar.bz2.sha256"

- name: nextcloud core archive checksum
  shell: cat "{{nextcloud_archive_directory}}/nextcloud-{{ nextcloud_version }}.tar.bz2.sha256"
  register: _nextcloud_server_archive_checksum
  changed_when: false

- name: nextcloud core archive download
  get_url:
    url: https://download.nextcloud.com/server/releases/nextcloud-{{ nextcloud_version }}.tar.bz2
    dest: "{{nextcloud_archive_directory}}/nextcloud-{{ nextcloud_version }}.tar.bz2"
    checksum: sha256:{{ _nextcloud_server_archive_checksum.stdout_lines[0].split(' ')[0] }}

- name: nextcloud core archive signature download
  get_url:
    url: https://download.nextcloud.com/server/releases/nextcloud-{{ nextcloud_version }}.tar.bz2.asc
    dest: "{{nextcloud_archive_directory}}/nextcloud-{{ nextcloud_version }}.tar.bz2.asc"

- name: nextcloud core archive signature check
  command: gpg --no-default-keyring --keyring "{{nextcloud_archive_directory}}/keyring.gpg"
    --verify "{{nextcloud_archive_directory}}/nextcloud-{{ nextcloud_version }}.tar.bz2.asc"
    "{{nextcloud_archive_directory}}/nextcloud-{{ nextcloud_version }}.tar.bz2"
  changed_when: false

- name: nextcloud core archive extract
  unarchive:
    src: "{{nextcloud_archive_directory}}/nextcloud-{{ nextcloud_version }}.tar.bz2"
    remote_src: yes
    dest: "{{nextcloud_archive_directory}}/{{nextcloud_version}}"
    owner: root
    group: root

- name: nextcloud core archive sync
  synchronize:
    src: "{{nextcloud_archive_directory}}/{{nextcloud_version}}/nextcloud/"
    dest: "{{nextcloud_directory}}"
    archive: no
    recursive: yes
  delegate_to: '{{ inventory_hostname }}'