---
- name: "Test if EPEL ist necessary"
  fail: msg="This system does not need EPEL"
  when: ansible_os_family not in ["RedHat", "AlmaLinux", "Rocky"] or ansible_distribution == "Fedora"


- name: Update CA-Certificates
  yum:
    name: ca-certificates
    state: latest


- name: Template /etc/yum.repos.d/epel.repo
  template:
    src: "epel.repo.j2"
    dest: "/etc/yum.repos.d/epel.repo"
    backup: yes


- name: "Copy /etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-{{ ansible_distribution_major_version }}"
  copy:
    src: "RPM-GPG-KEY-EPEL-{{ ansible_distribution_major_version }}"
    dest: "/etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-{{ ansible_distribution_major_version }}"
    force: no