ansible-role-nextcloud/tasks/gpg.yaml

---

- name: archive directory
  file:
    path: "{{nextcloud_archive_directory}}"
    state: directory

- name: gpg key
  get_url:
    url: https://nextcloud.com/nextcloud.asc
    dest: "{{nextcloud_archive_directory}}/archive-key.asc"
    checksum: sha256:ae5d6087ae037a673b9901c946a156b180744253375e2e18e1005e6310d95d55

- name: gpg keyring
  command: gpg --no-default-keyring --keyring "{{nextcloud_archive_directory}}/keyring.gpg" --import "{{nextcloud_archive_directory}}/archive-key.asc"
  register: _nextcloud_gpg_keyring
  changed_when:  '"imported" in (_nextcloud_gpg_keyring.stderr_lines | last)'