New version of Caddy installation

roles/reverseproxy/tasks/caddy.yml

@@ -8,7 +8,8 @@
       msg: Debug
 
   # Perform remaining tasks:
-  - ansible.builtin.import_tasks: caddy_install.yml
+  - ansible.builtin.import_tasks: caddy_install_debian.yml
+    when: ansible_distribution in ["Debian", "Ubuntu", "Linux Mint"]
   - ansible.builtin.import_tasks: caddy_config.yml
   - ansible.builtin.import_tasks: caddy_service.yml
 

roles/reverseproxy/tasks/caddy_install_debian.yml

@@ -0,0 +1,52 @@
+---
+- name: Install dependencies
+  apt:
+    name:
+      - curl
+      - unzip
+      - git
+      - build-essential
+      - golang
+      - debian-keyring
+      - debian-archive-keyring
+      - apt-transport-https
+    state: present
+    update_cache: yes
+
+- name: reverseproxy | xcaddy | download key
+  ansible.builtin.uri:
+    url: "https://dl.cloudsmith.io/public/caddy/xcaddy/gpg.key"
+    dest: "/tmp/xcaddy_gpg.key"
+    creates: "/tmp/xcaddy_gpg.key"
+
+- name: reverseproxy | xcaddy | verify and import key
+  ansible.builtin.shell:
+    cmd: "gpg --show-keys --with-fingerprint --with-colons /tmp/xcaddy_gpg.key 2>&1 | grep -q '^fpr:\\+65760C51EDEA2017CEA2CA15155B6D79CA56EA34:$' && cat /tmp/xcaddy_gpg.key | gpg --dearmor | tee /etc/apt/keyrings/xcaddy_gpg.gpg > /dev/null"
+    creates: "/etc/apt/trusted.gpg.d/xcaddy_gpg.gpg"
+
+- name: reverseproxy | caddy | add repository
+  ansible.builtin.uri:
+    url: "https://dl.cloudsmith.io/public/caddy/xcaddy/debian.deb.txt"
+    dest: "/etc/apt/sources.list.d/xcaddy-stable.list"
+    creates: "/etc/apt/sources.list.d/xcaddy-stable.list"
+
+- name: reverseproxy | xcaddy | install xcaddy
+  ansible.builtin.apt:
+    name: "xcaddy"
+    state: latest
+    update_cache: yes
+
+- name: Build Caddy with PowerDNS DNS plugin
+  command: >
+    xcaddy build
+    --with github.com/caddy-dns/powerdns
+  args:
+    chdir: /usr/local/bin
+    creates: /usr/local/bin/caddy-custom
+
+- name: Move custom caddy binary
+  copy:
+    src: /usr/local/bin/caddy
+    dest: /usr/local/bin/caddy
+    mode: 0755
+    remote_src: yes