From 653b225dffdf7a0412b86e256144c7049f636596 Mon Sep 17 00:00:00 2001
From: h3po <mail@h3po.de>
Date: Thu, 13 Aug 2020 12:54:31 +0200
Subject: [PATCH] enable yum gpgcheck and module_hotfixes as recommended

---
 templates/nginx.repo.j2 | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/templates/nginx.repo.j2 b/templates/nginx.repo.j2
index 46df323..b33067f 100644
--- a/templates/nginx.repo.j2
+++ b/templates/nginx.repo.j2
@@ -1,5 +1,7 @@
 [nginx]
 name=nginx repo
 baseurl=http://nginx.org/packages{{ '/mainline' if nginx_yum_repo_mainline }}/centos/{{ ansible_distribution_major_version }}/$basearch/
-gpgcheck=0
 enabled=1
+gpgcheck=1
+gpgkey=https://nginx.org/keys/nginx_signing.key
+module_hotfixes=true
\ No newline at end of file