From 67a0543ddebac078167c23b94e1641ac99ff014a Mon Sep 17 00:00:00 2001
From: ionutboangiu <ionut.boangiu@itsyscom.com>
Date: Mon, 12 Jan 2026 09:31:29 +0200
Subject: [PATCH] update rabbitmq role repos

---
 .../ansible/roles/rabbitmq/defaults/main.yaml | 18 +++++++----
 data/ansible/roles/rabbitmq/tasks/main.yaml   | 30 +++++++------------
 2 files changed, 23 insertions(+), 25 deletions(-)

diff --git a/data/ansible/roles/rabbitmq/defaults/main.yaml b/data/ansible/roles/rabbitmq/defaults/main.yaml
index 43750693b..0230cf7ea 100644
--- a/data/ansible/roles/rabbitmq/defaults/main.yaml
+++ b/data/ansible/roles/rabbitmq/defaults/main.yaml
@@ -1,16 +1,24 @@
 rabbitmq_keys:
   - url: "https://keys.openpgp.org/vks/v1/by-fingerprint/0A9AF2115F4687BD29803A206B73A36E6026DFCA"
     dest: "/usr/share/keyrings/com.rabbitmq.team.gpg"
-  - url: "https://github.com/rabbitmq/signing-keys/releases/download/3.0/cloudsmith.rabbitmq-erlang.E495BB49CC4BBE5B.key"
-    dest: "/usr/share/keyrings/rabbitmq.E495BB49CC4BBE5B.gpg"
-  - url: "https://github.com/rabbitmq/signing-keys/releases/download/3.0/cloudsmith.rabbitmq-server.9F4587F226208342.key"
-    dest: "/usr/share/keyrings/rabbitmq.9F4587F226208342.gpg"
 rabbitmq_dependencies:
   - curl
   - gnupg
   - apt-transport-https
 
-erlang_dependencies:
+rabbitmq_repositories:
+  # Erlang repositories
+  - "deb [arch=amd64 signed-by=/usr/share/keyrings/com.rabbitmq.team.gpg] https://deb1.rabbitmq.com/rabbitmq-erlang/{{ ansible_distribution | lower }}/{{ ansible_distribution_release }} {{ ansible_distribution_release }} main"
+  - "deb-src [signed-by=/usr/share/keyrings/com.rabbitmq.team.gpg] https://deb1.rabbitmq.com/rabbitmq-erlang/{{ ansible_distribution | lower }}/{{ ansible_distribution_release }} {{ ansible_distribution_release }} main"
+  - "deb [arch=amd64 signed-by=/usr/share/keyrings/com.rabbitmq.team.gpg] https://deb2.rabbitmq.com/rabbitmq-erlang/{{ ansible_distribution | lower }}/{{ ansible_distribution_release }} {{ ansible_distribution_release }} main"
+  - "deb-src [signed-by=/usr/share/keyrings/com.rabbitmq.team.gpg] https://deb2.rabbitmq.com/rabbitmq-erlang/{{ ansible_distribution | lower }}/{{ ansible_distribution_release }} {{ ansible_distribution_release }} main"
+  # RabbitMQ repositories
+  - "deb [arch=amd64 signed-by=/usr/share/keyrings/com.rabbitmq.team.gpg] https://deb1.rabbitmq.com/rabbitmq-server/{{ ansible_distribution | lower }}/{{ ansible_distribution_release }} {{ ansible_distribution_release }} main"
+  - "deb-src [signed-by=/usr/share/keyrings/com.rabbitmq.team.gpg] https://deb1.rabbitmq.com/rabbitmq-server/{{ ansible_distribution | lower }}/{{ ansible_distribution_release }} {{ ansible_distribution_release }} main"
+  - "deb [arch=amd64 signed-by=/usr/share/keyrings/com.rabbitmq.team.gpg] https://deb2.rabbitmq.com/rabbitmq-server/{{ ansible_distribution | lower }}/{{ ansible_distribution_release }} {{ ansible_distribution_release }} main"
+  - "deb-src [signed-by=/usr/share/keyrings/com.rabbitmq.team.gpg] https://deb2.rabbitmq.com/rabbitmq-server/{{ ansible_distribution | lower }}/{{ ansible_distribution_release }} {{ ansible_distribution_release }} main"
+
+rabbitmq_erlang_dependencies:
   - erlang-base
   - erlang-asn1
   - erlang-crypto
diff --git a/data/ansible/roles/rabbitmq/tasks/main.yaml b/data/ansible/roles/rabbitmq/tasks/main.yaml
index 047fe19be..4fd749962 100644
--- a/data/ansible/roles/rabbitmq/tasks/main.yaml
+++ b/data/ansible/roles/rabbitmq/tasks/main.yaml
@@ -5,17 +5,10 @@
     name: "{{ rabbitmq_dependencies }}"
     state: present
 
-- name: Download RabbitMQ keys
+- name: Download and install RabbitMQ keys
   become: yes
-  ansible.builtin.get_url:
-    url: "{{ item.url }}"
-    dest: "{{ item.dest }}_armored"
-  loop: "{{ rabbitmq_keys }}"
-
-- name: De-Armor RabbitMQ keys
-  become: yes
-  shell: gpg --dearmor < {{ item.dest }}_armored > {{ item.dest }}
-  no_log: true
+  ansible.builtin.shell: |
+    curl -1sLf "{{ item.url }}" | gpg --dearmor | tee {{ item.dest }} > /dev/null
   args:
     creates: "{{ item.dest }}"
   loop: "{{ rabbitmq_keys }}"
@@ -25,21 +18,18 @@
   ansible.builtin.apt_repository:
     repo: "{{ item }}"
     state: present
+    update_cache: no
+  loop: "{{ rabbitmq_repositories }}"
+
+- name: Update package cache after adding repositories
+  become: yes
+  ansible.builtin.apt:
     update_cache: yes
-  loop:
-    - "deb [signed-by=/usr/share/keyrings/rabbitmq.E495BB49CC4BBE5B.gpg] https://ppa1.novemberain.com/rabbitmq/rabbitmq-erlang/deb/ubuntu jammy main"
-    - "deb-src [signed-by=/usr/share/keyrings/rabbitmq.E495BB49CC4BBE5B.gpg] https://ppa1.novemberain.com/rabbitmq/rabbitmq-erlang/deb/ubuntu jammy main"
-    - "deb [signed-by=/usr/share/keyrings/rabbitmq.E495BB49CC4BBE5B.gpg] https://ppa2.novemberain.com/rabbitmq/rabbitmq-erlang/deb/ubuntu jammy main"
-    - "deb-src [signed-by=/usr/share/keyrings/rabbitmq.E495BB49CC4BBE5B.gpg] https://ppa2.novemberain.com/rabbitmq/rabbitmq-erlang/deb/ubuntu jammy main"
-    - "deb [signed-by=/usr/share/keyrings/rabbitmq.9F4587F226208342.gpg] https://ppa1.novemberain.com/rabbitmq/rabbitmq-server/deb/ubuntu jammy main"
-    - "deb-src [signed-by=/usr/share/keyrings/rabbitmq.9F4587F226208342.gpg] https://ppa1.novemberain.com/rabbitmq/rabbitmq-server/deb/ubuntu jammy main"
-    - "deb [signed-by=/usr/share/keyrings/rabbitmq.9F4587F226208342.gpg] https://ppa2.novemberain.com/rabbitmq/rabbitmq-server/deb/ubuntu jammy main"
-    - "deb-src [signed-by=/usr/share/keyrings/rabbitmq.9F4587F226208342.gpg] https://ppa2.novemberain.com/rabbitmq/rabbitmq-server/deb/ubuntu jammy main"
 
 - name: Install Erlang packages
   become: yes
   ansible.builtin.apt:
-    name: "{{ erlang_dependencies }}"
+    name: "{{ rabbitmq_erlang_dependencies }}"
     state: present
 
 - name: Install RabbitMQ server