enable yum gpgcheck and module_hotfixes as recommended

4 years ago · 653b225dff
parent 3041e59244
commit 653b225dff
1 changed files with 3 additions and 1 deletions
--- a/templates/nginx.repo.j2
+++ b/templates/nginx.repo.j2
@ -1,5 +1,7 @@
 [nginx]
 name=nginx repo
 baseurl=http://nginx.org/packages{{ '/mainline' if nginx_yum_repo_mainline }}/centos/{{ ansible_distribution_major_version }}/$basearch/
-gpgcheck=0
 enabled=1
+gpgcheck=1
+gpgkey=https://nginx.org/keys/nginx_signing.key
+module_hotfixes=true