---

 - hosts: "{{ targets | default('all') }}"
   become: true
   gather_facts: false

   tasks:

     - name: Clean
       command: rm -Rf /etc/pacman.d/gnupg

     - name: Initialize keyring
       command: /usr/bin/pacman-key --init

     - name: Add ArchLinux
       command: /usr/bin/pacman-key --populate archlinux

     - name: Add AniNIX
       command: /usr/bin/pacman-key --populate aninix

     - name: Locally sign AniNIX
       command: /usr/bin/pacman-key --lsign 904DE6275579CB589D85720C1CC1E3F4ED06F296

     - name: Update DB
       command: /usr/bin/pacman-key --updatedb

     - name: Update packages
       pacman:
         name:
           - archlinux-keyring
           - ShadowArch
         state: latest
         update_cache: true