infra/ansible/roles/docker/tasks/main.yml

---
- name: install docker dependencies
  apt:
    state: present
    name:
      - apt-transport-https
      - ca-certificates
      - curl
      - gnupg-agent
      - software-properties-common

- name: add docker apt key
  apt_key:
    url: https://download.docker.com/linux/debian/gpg
    state: present
    id: 9DC858229FC7DD38854AE2D88D81803C0EBFCD88

- name: add docker repo
  apt_repository:
    repo: "deb [arch={{ docker_arch }}] https://download.docker.com/linux/debian bullseye stable"
    state: present
    mode: 0644

- name: install docker-ce
  apt:
    state: present
    update_cache: True
    name:
      - docker-ce
      - docker-ce-cli
      - containerd.io

- name: ensure docker certs directory exists
  file:
    path: /etc/docker/certs.d/docker.service.{{ consul_domain }}:8082
    state: directory

- name: symlink ca cert
  file:
    src: /etc/pki/certs/{{ vault_ca_cert_name }}
    dest: /etc/docker/certs.d/docker.service.{{ consul_domain }}:8082/ca.crt
    state: link
...