updating readme, adding gpg keys for app protect repos

Author: aknot242

README.md

@@ -88,7 +88,9 @@ Dependencies
 
 - Since this role uses the [package_facts](https://docs.ansible.com/ansible/latest/modules/package_facts_module.html) module, on debian-based systems the `python-apt` package must be installed on targeted hosts.
 
-- NGINX+ R20-R22 must already be installed on the target system 
+- If NGINX+ is *not* already installed on the system, this role will install the version of NGINX+ that is dependent on the version of NGINX App Protect set with the `app_protect_version` variable. If none is specified, the latest version of NGINX+ and NGINX App Protect will be installed.
+
+- When using the `app_protect_version` variable, a specific version of NGINX+ must already be installed on the target system.
 
 Example Playbook
 ----------------

tasks/main.yml

@@ -23,7 +23,7 @@
 
 - name: Debug app_protect_state
   debug:
-    msg: "app_protect_state {{ app_protect_state }}"
+    msg: "Desired app_protect_state {{ app_protect_state }}"
 
 - name: Abort if the OS/version combination is not supported
   fail:

tasks/setup-redhat-repos.yml

@@ -32,6 +32,7 @@
         sslclientkey: "/etc/ssl/nginx/{{ nginx_license.key | basename }}"
         enabled: true
         gpgcheck: true
+        gpgkey: https://cs.nginx.com/static/keys/app-protect.key
         state: "{{ nginx_license_status | default ('present') }}"
 
     - name: "(Setup: CentOS/RedHat/Oracle Linux) Setup NGINX App Protect Signatures Repository"
@@ -44,5 +45,6 @@
         sslclientkey: "/etc/ssl/nginx/{{ nginx_license.key | basename }}"
         enabled: true
         gpgcheck: true
+        gpgkey: https://cs.nginx.com/static/keys/app-protect.key
         state: "{{ nginx_license_status | default ('present') }}"
   when: ansible_distribution != "Amazon"