From 4cce71d3eace64e7685a1d1f02cd7d2f97b9468a Mon Sep 17 00:00:00 2001
From: Yusong <yusonglai64@gmail.com>
Date: Fri, 8 May 2026 20:11:52 +0800
Subject: [PATCH 1/7] feat(ansible): replace "ansible.builtin.apt_key" with
 modern approach

---
 whisperpine/ansitofu/roles/consul/defaults/main.yml |  1 +
 whisperpine/ansitofu/roles/consul/tasks/install.yml | 11 +++++++----
 .../ansitofu/roles/install_docker/defaults/main.yml |  1 +
 .../ansitofu/roles/install_docker/tasks/main.yml    | 13 +++++++++----
 .../ansitofu/roles/mongodb/defaults/main.yml        |  1 +
 .../ansitofu/roles/mongodb/tasks/install.yml        | 12 +++++++++++-
 6 files changed, 30 insertions(+), 9 deletions(-)

diff --git a/whisperpine/ansitofu/roles/consul/defaults/main.yml b/whisperpine/ansitofu/roles/consul/defaults/main.yml
index 5c8963f..66d7cd9 100644
--- a/whisperpine/ansitofu/roles/consul/defaults/main.yml
+++ b/whisperpine/ansitofu/roles/consul/defaults/main.yml
@@ -10,6 +10,7 @@ consul_dependencies:
 # Variables used when installing consul.
 consul_gpg_url: https://apt.releases.hashicorp.com/gpg
 consul_repo_url: https://apt.releases.hashicorp.com
+consul_key_file: /etc/apt/keyrings/consul.gpg
 
 consul_data_dir: "/opt/consul/data"
 consul_config_dir: "/etc/consul.d"
diff --git a/whisperpine/ansitofu/roles/consul/tasks/install.yml b/whisperpine/ansitofu/roles/consul/tasks/install.yml
index 881cbad..35dba7c 100644
--- a/whisperpine/ansitofu/roles/consul/tasks/install.yml
+++ b/whisperpine/ansitofu/roles/consul/tasks/install.yml
@@ -22,14 +22,17 @@
     shell: /usr/sbin/nologin
     system: true
 
-- name: Add consul gpg key
-  ansible.builtin.apt_key:
+- name: Download consul GPG key
+  ansible.builtin.get_url:
     url: "{{ consul_gpg_url }}"
-    state: present
+    dest: "{{ consul_key_file }}"
+    mode: "0644"
 
 - name: Add HashiCorp apt repository
   ansible.builtin.apt_repository:
-    repo: "deb [arch=amd64] {{ consul_repo_url }} {{ ansible_facts['distribution_release'] }} main"
+    repo: >-
+      deb [arch=amd64 signed-by={{ consul_key_file }}]
+      {{ consul_repo_url }} {{ ansible_facts['distribution_release'] }} main
     state: present
 
 - name: Install consul
diff --git a/whisperpine/ansitofu/roles/install_docker/defaults/main.yml b/whisperpine/ansitofu/roles/install_docker/defaults/main.yml
index 441cea7..a78cad1 100644
--- a/whisperpine/ansitofu/roles/install_docker/defaults/main.yml
+++ b/whisperpine/ansitofu/roles/install_docker/defaults/main.yml
@@ -4,6 +4,7 @@ install_docker_arch: amd64
 # Repository URLs.
 install_docker_gpg_url: https://download.docker.com/linux/ubuntu/gpg
 install_docker_repo_url: https://download.docker.com/linux/ubuntu
+install_docker_key_file: /etc/apt/keyrings/docker.gpg
 
 # Users to add to the docker group.
 install_docker_users:
diff --git a/whisperpine/ansitofu/roles/install_docker/tasks/main.yml b/whisperpine/ansitofu/roles/install_docker/tasks/main.yml
index 2bcffbd..f536052 100644
--- a/whisperpine/ansitofu/roles/install_docker/tasks/main.yml
+++ b/whisperpine/ansitofu/roles/install_docker/tasks/main.yml
@@ -10,14 +10,19 @@
     state: present
   no_log: true
 
-- name: Add Docker GPG key
-  ansible.builtin.apt_key:
+- name: Download Docker GPG key
+  ansible.builtin.get_url:
     url: "{{ install_docker_gpg_url }}"
-    state: present
+    dest: "{{ install_docker_key_file }}"
+    mode: "0644"
 
 - name: Add Docker repository
   ansible.builtin.apt_repository:
-    repo: "deb [arch={{ install_docker_arch }}] {{ install_docker_repo_url }} {{ ansible_facts['distribution_release'] }} stable"
+    repo: >-
+      deb [arch={{ install_docker_arch }} signed-by={{ install_docker_key_file }}]
+      {{ install_docker_repo_url }}
+      {{ ansible_facts['distribution_release'] }}
+      stable
     state: present
     filename: docker
 
diff --git a/whisperpine/ansitofu/roles/mongodb/defaults/main.yml b/whisperpine/ansitofu/roles/mongodb/defaults/main.yml
index 2769960..ab295ab 100644
--- a/whisperpine/ansitofu/roles/mongodb/defaults/main.yml
+++ b/whisperpine/ansitofu/roles/mongodb/defaults/main.yml
@@ -6,6 +6,7 @@ mongodb_dependencies:
 
 mongodb_version: "8.0"
 mongodb_repo_url: https://repo.mongodb.org/apt/ubuntu
+mongodb_key_file: /etc/apt/keyrings/mongodb.asc
 
 mongodb_port: 27017
 mongodb_repl_set: rs0
diff --git a/whisperpine/ansitofu/roles/mongodb/tasks/install.yml b/whisperpine/ansitofu/roles/mongodb/tasks/install.yml
index e114c28..cd87326 100644
--- a/whisperpine/ansitofu/roles/mongodb/tasks/install.yml
+++ b/whisperpine/ansitofu/roles/mongodb/tasks/install.yml
@@ -11,9 +11,19 @@
     state: present
   no_log: true
 
+- name: Download mongodb gpg key
+  ansible.builtin.get_url:
+    url: https://pgp.mongodb.com/server-{{ mongodb_version }}.asc
+    dest: "{{ mongodb_key_file }}"
+    mode: "0644"
+
 - name: Add mongodb repository
   ansible.builtin.apt_repository:
-    repo: "deb [arch=amd64] {{ mongodb_repo_url }} {{ ansible_facts['distribution_release'] }}/mongodb-org/{{ mongodb_version }} multiverse"
+    repo: >-
+      deb [arch=amd64 signed-by={{ mongodb_key_file }}]
+      {{ mongodb_repo_url }}
+      {{ ansible_facts['distribution_release'] }}/mongodb-org/{{ mongodb_version }}
+      multiverse
     state: present
 
 - name: Install mongodb

From e3b7c22ceec2ecd1eeafc9fcf8034f69dfb2da8c Mon Sep 17 00:00:00 2001
From: Yusong <yusonglai64@gmail.com>
Date: Fri, 8 May 2026 20:29:13 +0800
Subject: [PATCH 2/7]   feat(ansible): add handlers to update apt package cache

---
 whisperpine/ansitofu/roles/consul/defaults/main.yml         | 2 --
 whisperpine/ansitofu/roles/consul/handlers/main.yml         | 4 ++++
 whisperpine/ansitofu/roles/consul/tasks/install.yml         | 1 +
 whisperpine/ansitofu/roles/install_docker/handlers/main.yml | 4 ++++
 whisperpine/ansitofu/roles/install_docker/tasks/main.yml    | 1 +
 whisperpine/ansitofu/roles/mongodb/defaults/main.yml        | 2 --
 whisperpine/ansitofu/roles/mongodb/handlers/main.yml        | 4 ++++
 whisperpine/ansitofu/roles/mongodb/tasks/install.yml        | 1 +
 8 files changed, 15 insertions(+), 4 deletions(-)
 create mode 100644 whisperpine/ansitofu/roles/consul/handlers/main.yml
 create mode 100644 whisperpine/ansitofu/roles/install_docker/handlers/main.yml
 create mode 100644 whisperpine/ansitofu/roles/mongodb/handlers/main.yml

diff --git a/whisperpine/ansitofu/roles/consul/defaults/main.yml b/whisperpine/ansitofu/roles/consul/defaults/main.yml
index 66d7cd9..c57a24e 100644
--- a/whisperpine/ansitofu/roles/consul/defaults/main.yml
+++ b/whisperpine/ansitofu/roles/consul/defaults/main.yml
@@ -3,8 +3,6 @@ consul_user: "consul"
 consul_group: "consul"
 
 consul_dependencies:
-  - ca-certificates # required by the "ansible.builtin.apt_key" module
-  - gnupg # required by the "ansible.builtin.apt_key" module
   - iproute2 # make the "hostvars[inventory_hostname].ansible_default_ipv4.address" fact be gathered
 
 # Variables used when installing consul.
diff --git a/whisperpine/ansitofu/roles/consul/handlers/main.yml b/whisperpine/ansitofu/roles/consul/handlers/main.yml
new file mode 100644
index 0000000..52ee6bf
--- /dev/null
+++ b/whisperpine/ansitofu/roles/consul/handlers/main.yml
@@ -0,0 +1,4 @@
+- name: Update apt package cache
+  ansible.builtin.apt:
+    update_cache: true
+  no_log: true
diff --git a/whisperpine/ansitofu/roles/consul/tasks/install.yml b/whisperpine/ansitofu/roles/consul/tasks/install.yml
index 35dba7c..1691cc7 100644
--- a/whisperpine/ansitofu/roles/consul/tasks/install.yml
+++ b/whisperpine/ansitofu/roles/consul/tasks/install.yml
@@ -34,6 +34,7 @@
       deb [arch=amd64 signed-by={{ consul_key_file }}]
       {{ consul_repo_url }} {{ ansible_facts['distribution_release'] }} main
     state: present
+  notify: Update apt package cache
 
 - name: Install consul
   ansible.builtin.apt:
diff --git a/whisperpine/ansitofu/roles/install_docker/handlers/main.yml b/whisperpine/ansitofu/roles/install_docker/handlers/main.yml
new file mode 100644
index 0000000..52ee6bf
--- /dev/null
+++ b/whisperpine/ansitofu/roles/install_docker/handlers/main.yml
@@ -0,0 +1,4 @@
+- name: Update apt package cache
+  ansible.builtin.apt:
+    update_cache: true
+  no_log: true
diff --git a/whisperpine/ansitofu/roles/install_docker/tasks/main.yml b/whisperpine/ansitofu/roles/install_docker/tasks/main.yml
index f536052..f261388 100644
--- a/whisperpine/ansitofu/roles/install_docker/tasks/main.yml
+++ b/whisperpine/ansitofu/roles/install_docker/tasks/main.yml
@@ -25,6 +25,7 @@
       stable
     state: present
     filename: docker
+  notify: Update apt package cache
 
 - name: Install Docker and Docker Compose Plugin
   ansible.builtin.apt:
diff --git a/whisperpine/ansitofu/roles/mongodb/defaults/main.yml b/whisperpine/ansitofu/roles/mongodb/defaults/main.yml
index ab295ab..6604b4e 100644
--- a/whisperpine/ansitofu/roles/mongodb/defaults/main.yml
+++ b/whisperpine/ansitofu/roles/mongodb/defaults/main.yml
@@ -1,6 +1,4 @@
 mongodb_dependencies:
-  - ca-certificates # required by the "ansible.builtin.apt_key" module
-  - gnupg # required by the "ansible.builtin.apt_key" module
   - iproute2 # make the "hostvars[inventory_hostname].ansible_default_ipv4.address" fact be gathered
   - cron # required by the "ansible.builtin.cron" module
 
diff --git a/whisperpine/ansitofu/roles/mongodb/handlers/main.yml b/whisperpine/ansitofu/roles/mongodb/handlers/main.yml
new file mode 100644
index 0000000..52ee6bf
--- /dev/null
+++ b/whisperpine/ansitofu/roles/mongodb/handlers/main.yml
@@ -0,0 +1,4 @@
+- name: Update apt package cache
+  ansible.builtin.apt:
+    update_cache: true
+  no_log: true
diff --git a/whisperpine/ansitofu/roles/mongodb/tasks/install.yml b/whisperpine/ansitofu/roles/mongodb/tasks/install.yml
index cd87326..7122706 100644
--- a/whisperpine/ansitofu/roles/mongodb/tasks/install.yml
+++ b/whisperpine/ansitofu/roles/mongodb/tasks/install.yml
@@ -25,6 +25,7 @@
       {{ ansible_facts['distribution_release'] }}/mongodb-org/{{ mongodb_version }}
       multiverse
     state: present
+  notify: Update apt package cache
 
 - name: Install mongodb
   ansible.builtin.apt:

From 32ce5f2528cb11d06ac0989d762595afa3612ef4 Mon Sep 17 00:00:00 2001
From: Yusong <yusonglai64@gmail.com>
Date: Fri, 8 May 2026 20:48:06 +0800
Subject: [PATCH 3/7] fix: add the "ca-certificates" package

---
 whisperpine/ansitofu/roles/consul/defaults/main.yml         | 1 +
 whisperpine/ansitofu/roles/install_docker/defaults/main.yml | 1 -
 whisperpine/ansitofu/roles/mongodb/defaults/main.yml        | 1 +
 whisperpine/ansitofu/roles/mongodb/tasks/install.yml        | 6 ------
 4 files changed, 2 insertions(+), 7 deletions(-)

diff --git a/whisperpine/ansitofu/roles/consul/defaults/main.yml b/whisperpine/ansitofu/roles/consul/defaults/main.yml
index c57a24e..81dcc81 100644
--- a/whisperpine/ansitofu/roles/consul/defaults/main.yml
+++ b/whisperpine/ansitofu/roles/consul/defaults/main.yml
@@ -3,6 +3,7 @@ consul_user: "consul"
 consul_group: "consul"
 
 consul_dependencies:
+  - ca-certificates # required by the "ansible.builtin.get_url" module
   - iproute2 # make the "hostvars[inventory_hostname].ansible_default_ipv4.address" fact be gathered
 
 # Variables used when installing consul.
diff --git a/whisperpine/ansitofu/roles/install_docker/defaults/main.yml b/whisperpine/ansitofu/roles/install_docker/defaults/main.yml
index a78cad1..58cff88 100644
--- a/whisperpine/ansitofu/roles/install_docker/defaults/main.yml
+++ b/whisperpine/ansitofu/roles/install_docker/defaults/main.yml
@@ -16,7 +16,6 @@ install_docker_dependencies:
   - ca-certificates
   - curl
   - software-properties-common
-  - gnupg
 
 # Docker packages to install.
 install_docker_packages:
diff --git a/whisperpine/ansitofu/roles/mongodb/defaults/main.yml b/whisperpine/ansitofu/roles/mongodb/defaults/main.yml
index 6604b4e..6ae2e29 100644
--- a/whisperpine/ansitofu/roles/mongodb/defaults/main.yml
+++ b/whisperpine/ansitofu/roles/mongodb/defaults/main.yml
@@ -1,4 +1,5 @@
 mongodb_dependencies:
+  - ca-certificates # required by the "ansible.builtin.get_url" module
   - iproute2 # make the "hostvars[inventory_hostname].ansible_default_ipv4.address" fact be gathered
   - cron # required by the "ansible.builtin.cron" module
 
diff --git a/whisperpine/ansitofu/roles/mongodb/tasks/install.yml b/whisperpine/ansitofu/roles/mongodb/tasks/install.yml
index 7122706..5f7e139 100644
--- a/whisperpine/ansitofu/roles/mongodb/tasks/install.yml
+++ b/whisperpine/ansitofu/roles/mongodb/tasks/install.yml
@@ -5,12 +5,6 @@
     update_cache: true
   no_log: true
 
-- name: Add mongodb gpg key
-  ansible.builtin.apt_key:
-    url: https://pgp.mongodb.com/server-{{ mongodb_version }}.asc
-    state: present
-  no_log: true
-
 - name: Download mongodb gpg key
   ansible.builtin.get_url:
     url: https://pgp.mongodb.com/server-{{ mongodb_version }}.asc

From d2f447361624fd5584b12ef0a51f08beb97180dd Mon Sep 17 00:00:00 2001
From: Yusong <yusonglai64@gmail.com>
Date: Fri, 8 May 2026 20:58:16 +0800
Subject: [PATCH 4/7] chore: add the "gnupg" package

---
 whisperpine/ansitofu/roles/consul/defaults/main.yml         | 1 +
 whisperpine/ansitofu/roles/install_docker/defaults/main.yml | 5 +++--
 whisperpine/ansitofu/roles/mongodb/defaults/main.yml        | 1 +
 3 files changed, 5 insertions(+), 2 deletions(-)

diff --git a/whisperpine/ansitofu/roles/consul/defaults/main.yml b/whisperpine/ansitofu/roles/consul/defaults/main.yml
index 81dcc81..07cff7c 100644
--- a/whisperpine/ansitofu/roles/consul/defaults/main.yml
+++ b/whisperpine/ansitofu/roles/consul/defaults/main.yml
@@ -4,6 +4,7 @@ consul_group: "consul"
 
 consul_dependencies:
   - ca-certificates # required by the "ansible.builtin.get_url" module
+  - gnupg # required by the "ansible.builtin.apt_repository" module
   - iproute2 # make the "hostvars[inventory_hostname].ansible_default_ipv4.address" fact be gathered
 
 # Variables used when installing consul.
diff --git a/whisperpine/ansitofu/roles/install_docker/defaults/main.yml b/whisperpine/ansitofu/roles/install_docker/defaults/main.yml
index 58cff88..729dad9 100644
--- a/whisperpine/ansitofu/roles/install_docker/defaults/main.yml
+++ b/whisperpine/ansitofu/roles/install_docker/defaults/main.yml
@@ -12,10 +12,11 @@ install_docker_users:
 
 # Dependencies required for installation.
 install_docker_dependencies:
+  - ca-certificates # required by the "ansible.builtin.get_url" module
+  - gnupg # required by the "ansible.builtin.apt_repository" module
   - apt-transport-https
-  - ca-certificates
-  - curl
   - software-properties-common
+  - curl
 
 # Docker packages to install.
 install_docker_packages:
diff --git a/whisperpine/ansitofu/roles/mongodb/defaults/main.yml b/whisperpine/ansitofu/roles/mongodb/defaults/main.yml
index 6ae2e29..190a831 100644
--- a/whisperpine/ansitofu/roles/mongodb/defaults/main.yml
+++ b/whisperpine/ansitofu/roles/mongodb/defaults/main.yml
@@ -1,5 +1,6 @@
 mongodb_dependencies:
   - ca-certificates # required by the "ansible.builtin.get_url" module
+  - gnupg # required by the "ansible.builtin.apt_repository" module
   - iproute2 # make the "hostvars[inventory_hostname].ansible_default_ipv4.address" fact be gathered
   - cron # required by the "ansible.builtin.cron" module
 

From ea772e24348a776e67c6ceea783aa2d0c96b3aad Mon Sep 17 00:00:00 2001
From: Yusong <yusonglai64@gmail.com>
Date: Fri, 8 May 2026 21:09:36 +0800
Subject: [PATCH 5/7] fix: convert docker gpg key to binary

---
 whisperpine/ansitofu/roles/install_docker/tasks/main.yml | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/whisperpine/ansitofu/roles/install_docker/tasks/main.yml b/whisperpine/ansitofu/roles/install_docker/tasks/main.yml
index f261388..c859c39 100644
--- a/whisperpine/ansitofu/roles/install_docker/tasks/main.yml
+++ b/whisperpine/ansitofu/roles/install_docker/tasks/main.yml
@@ -13,9 +13,14 @@
 - name: Download Docker GPG key
   ansible.builtin.get_url:
     url: "{{ install_docker_gpg_url }}"
-    dest: "{{ install_docker_key_file }}"
+    dest: /tmp/docker.asc
     mode: "0644"
 
+- name: Convert Docker GPG key to binary
+  ansible.builtin.command:
+    cmd: gpg --dearmor -o "{{ install_docker_key_file }}" /tmp/docker.asc
+    creates: "{{ install_docker_key_file }}"
+
 - name: Add Docker repository
   ansible.builtin.apt_repository:
     repo: >-

From f03abcd888e843444e833385ad4f21ceb59dd208 Mon Sep 17 00:00:00 2001
From: Yusong <yusonglai64@gmail.com>
Date: Fri, 8 May 2026 21:17:22 +0800
Subject: [PATCH 6/7] fix(consul): convert consul gpg key to binary

---
 whisperpine/ansitofu/roles/consul/defaults/main.yml    |  2 +-
 whisperpine/ansitofu/roles/consul/tasks/install.yml    | 10 +++++++---
 .../ansitofu/roles/install_docker/defaults/main.yml    |  4 ++--
 .../ansitofu/roles/install_docker/tasks/main.yml       |  8 +-------
 whisperpine/ansitofu/roles/mongodb/defaults/main.yml   |  1 -
 whisperpine/ansitofu/roles/mongodb/tasks/install.yml   |  1 -
 6 files changed, 11 insertions(+), 15 deletions(-)

diff --git a/whisperpine/ansitofu/roles/consul/defaults/main.yml b/whisperpine/ansitofu/roles/consul/defaults/main.yml
index 07cff7c..f2c97a9 100644
--- a/whisperpine/ansitofu/roles/consul/defaults/main.yml
+++ b/whisperpine/ansitofu/roles/consul/defaults/main.yml
@@ -3,8 +3,8 @@ consul_user: "consul"
 consul_group: "consul"
 
 consul_dependencies:
+  - gnupg
   - ca-certificates # required by the "ansible.builtin.get_url" module
-  - gnupg # required by the "ansible.builtin.apt_repository" module
   - iproute2 # make the "hostvars[inventory_hostname].ansible_default_ipv4.address" fact be gathered
 
 # Variables used when installing consul.
diff --git a/whisperpine/ansitofu/roles/consul/tasks/install.yml b/whisperpine/ansitofu/roles/consul/tasks/install.yml
index 1691cc7..5c588a8 100644
--- a/whisperpine/ansitofu/roles/consul/tasks/install.yml
+++ b/whisperpine/ansitofu/roles/consul/tasks/install.yml
@@ -22,19 +22,23 @@
     shell: /usr/sbin/nologin
     system: true
 
-- name: Download consul GPG key
+- name: Download consul gpg key
   ansible.builtin.get_url:
     url: "{{ consul_gpg_url }}"
-    dest: "{{ consul_key_file }}"
+    dest: /tmp/consul.asc
     mode: "0644"
 
+- name: Convert consul gpg key to binary
+  ansible.builtin.command:
+    cmd: gpg --dearmor -o "{{ consul_key_file }}" /tmp/consul.asc
+    creates: "{{ consul_key_file }}"
+
 - name: Add HashiCorp apt repository
   ansible.builtin.apt_repository:
     repo: >-
       deb [arch=amd64 signed-by={{ consul_key_file }}]
       {{ consul_repo_url }} {{ ansible_facts['distribution_release'] }} main
     state: present
-  notify: Update apt package cache
 
 - name: Install consul
   ansible.builtin.apt:
diff --git a/whisperpine/ansitofu/roles/install_docker/defaults/main.yml b/whisperpine/ansitofu/roles/install_docker/defaults/main.yml
index 729dad9..4b3a428 100644
--- a/whisperpine/ansitofu/roles/install_docker/defaults/main.yml
+++ b/whisperpine/ansitofu/roles/install_docker/defaults/main.yml
@@ -12,8 +12,8 @@ install_docker_users:
 
 # Dependencies required for installation.
 install_docker_dependencies:
-  - ca-certificates # required by the "ansible.builtin.get_url" module
-  - gnupg # required by the "ansible.builtin.apt_repository" module
+  - gnupg
+  - ca-certificates
   - apt-transport-https
   - software-properties-common
   - curl
diff --git a/whisperpine/ansitofu/roles/install_docker/tasks/main.yml b/whisperpine/ansitofu/roles/install_docker/tasks/main.yml
index c859c39..a49dc3f 100644
--- a/whisperpine/ansitofu/roles/install_docker/tasks/main.yml
+++ b/whisperpine/ansitofu/roles/install_docker/tasks/main.yml
@@ -1,13 +1,8 @@
-- name: Update apt package cache
-  ansible.builtin.apt:
-    update_cache: true
-    cache_valid_time: 3600
-  no_log: true
-
 - name: Install required dependencies
   ansible.builtin.apt:
     name: "{{ install_docker_dependencies }}"
     state: present
+    update_cache: true
   no_log: true
 
 - name: Download Docker GPG key
@@ -30,7 +25,6 @@
       stable
     state: present
     filename: docker
-  notify: Update apt package cache
 
 - name: Install Docker and Docker Compose Plugin
   ansible.builtin.apt:
diff --git a/whisperpine/ansitofu/roles/mongodb/defaults/main.yml b/whisperpine/ansitofu/roles/mongodb/defaults/main.yml
index 190a831..6ae2e29 100644
--- a/whisperpine/ansitofu/roles/mongodb/defaults/main.yml
+++ b/whisperpine/ansitofu/roles/mongodb/defaults/main.yml
@@ -1,6 +1,5 @@
 mongodb_dependencies:
   - ca-certificates # required by the "ansible.builtin.get_url" module
-  - gnupg # required by the "ansible.builtin.apt_repository" module
   - iproute2 # make the "hostvars[inventory_hostname].ansible_default_ipv4.address" fact be gathered
   - cron # required by the "ansible.builtin.cron" module
 
diff --git a/whisperpine/ansitofu/roles/mongodb/tasks/install.yml b/whisperpine/ansitofu/roles/mongodb/tasks/install.yml
index 5f7e139..573fce6 100644
--- a/whisperpine/ansitofu/roles/mongodb/tasks/install.yml
+++ b/whisperpine/ansitofu/roles/mongodb/tasks/install.yml
@@ -19,7 +19,6 @@
       {{ ansible_facts['distribution_release'] }}/mongodb-org/{{ mongodb_version }}
       multiverse
     state: present
-  notify: Update apt package cache
 
 - name: Install mongodb
   ansible.builtin.apt:

From 68a0b7195e8a0e135c1636acda93abb6c2dd67c6 Mon Sep 17 00:00:00 2001
From: Yusong <yusonglai64@gmail.com>
Date: Fri, 8 May 2026 21:21:46 +0800
Subject: [PATCH 7/7] chore: remove redundant handlers

---
 whisperpine/ansitofu/roles/consul/handlers/main.yml         | 4 ----
 whisperpine/ansitofu/roles/install_docker/handlers/main.yml | 4 ----
 whisperpine/ansitofu/roles/mongodb/handlers/main.yml        | 4 ----
 3 files changed, 12 deletions(-)
 delete mode 100644 whisperpine/ansitofu/roles/consul/handlers/main.yml
 delete mode 100644 whisperpine/ansitofu/roles/install_docker/handlers/main.yml
 delete mode 100644 whisperpine/ansitofu/roles/mongodb/handlers/main.yml

diff --git a/whisperpine/ansitofu/roles/consul/handlers/main.yml b/whisperpine/ansitofu/roles/consul/handlers/main.yml
deleted file mode 100644
index 52ee6bf..0000000
--- a/whisperpine/ansitofu/roles/consul/handlers/main.yml
+++ /dev/null
@@ -1,4 +0,0 @@
-- name: Update apt package cache
-  ansible.builtin.apt:
-    update_cache: true
-  no_log: true
diff --git a/whisperpine/ansitofu/roles/install_docker/handlers/main.yml b/whisperpine/ansitofu/roles/install_docker/handlers/main.yml
deleted file mode 100644
index 52ee6bf..0000000
--- a/whisperpine/ansitofu/roles/install_docker/handlers/main.yml
+++ /dev/null
@@ -1,4 +0,0 @@
-- name: Update apt package cache
-  ansible.builtin.apt:
-    update_cache: true
-  no_log: true
diff --git a/whisperpine/ansitofu/roles/mongodb/handlers/main.yml b/whisperpine/ansitofu/roles/mongodb/handlers/main.yml
deleted file mode 100644
index 52ee6bf..0000000
--- a/whisperpine/ansitofu/roles/mongodb/handlers/main.yml
+++ /dev/null
@@ -1,4 +0,0 @@
-- name: Update apt package cache
-  ansible.builtin.apt:
-    update_cache: true
-  no_log: true