feat(opensuse): Make openSUSE devel repository optional

All modern openSUSE releases (Leap 15.x, Tumbleweed) ship nginx in the
default repositories. The devel repository should not be used unless the
user knows what they are doing.

Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>

nginx/map.jinja

@@ -73,7 +73,7 @@
             'pid_file': '/run/nginx.pid',
             'gpg_check': True,
             'gpg_key': 'http://download.opensuse.org/repositories/server:/http/{{ grains.osrelease }}/repodata/repomd.xml.key',
-            'baseurl': 'http://download.opensuse.org/repositories/server:/http/{{ grains.osrelease }}/',
+            'gpg_autoimport': True,
             'openssl_package': 'openssl',
         },
         'Arch': {

nginx/pkg.sls

@@ -152,11 +152,12 @@ nginx_zypp_repo:
     {%- endif %}
     - name: server_http
     - humanname: server_http
-    - baseurl: '{{ nginx.lookup.baseurl }}'
+    - baseurl: 'http://download.opensuse.org/repositories/server:/http/{{ grains.osrelease }}/'
     - enabled: True
     - autorefresh: True
     - gpgcheck: {{ nginx.lookup.gpg_check }}
     - gpgkey: {{ nginx.lookup.gpg_key }}
+    - gpgautoimport: {{ nginx.lookup.gpg_autoimport }}
     - require_in:
       - pkg: nginx_install
     - watch_in: