ansible-role-nextcloud/tasks/server.yml

---

- name: nextcloud platforms
  uri:
    url: https://apps.nextcloud.com/api/v1/platforms.json
  register: _nextcloud_platforms

- name: nextcloud archive checksum download
  get_url:
    url: https://download.nextcloud.com/server/releases/nextcloud-{{ nextcloud_version }}.tar.bz2.sha256
    dest: "{{nextcloud_archive_directory}}/nextcloud-{{ nextcloud_version }}.tar.bz2.sha256"

- name: nextcloud server archive checksum
  shell: cat "{{nextcloud_archive_directory}}/nextcloud-{{ nextcloud_version }}.tar.bz2.sha256"
  register: _nextcloud_server_archive_checksum
  changed_when: false

- name: nextcloud archive download
  get_url:
    url: https://download.nextcloud.com/server/releases/nextcloud-{{ nextcloud_version }}.tar.bz2
    dest: "{{nextcloud_archive_directory}}/nextcloud-{{ nextcloud_version }}.tar.bz2"
    checksum: sha256:{{ _nextcloud_server_archive_checksum.stdout_lines[0].split(' ')[0] }}

- name: nextcloud archive signature download
  get_url:
    url: https://download.nextcloud.com/server/releases/nextcloud-{{ nextcloud_version }}.tar.bz2.asc
    dest: "{{nextcloud_archive_directory}}/nextcloud-{{ nextcloud_version }}.tar.bz2.asc"

- name: nextcloud archive signature check
  command: gpg --no-default-keyring --keyring "{{nextcloud_archive_directory}}/keyring.gpg"
    --verify "{{nextcloud_archive_directory}}/nextcloud-{{ nextcloud_version }}.tar.bz2.asc"
    "{{nextcloud_archive_directory}}/nextcloud-{{ nextcloud_version }}.tar.bz2"
  changed_when: false

- name: nextcloud extract
  unarchive:
    src: "{{nextcloud_archive_directory}}/nextcloud-{{ nextcloud_version }}.tar.bz2"
    remote_src: yes
    dest: /var/www/
    owner: root
    group: www-data