diff --git a/branding/tasks/apt.yml b/branding/tasks/apt.yml
new file mode 100644
index 0000000000000000000000000000000000000000..0059a28da63239108f0b4a325eec36af15b6e57a
--- /dev/null
+++ b/branding/tasks/apt.yml
@@ -0,0 +1,42 @@
+---
+
+- name: ensure deployment of apt repository keys
+  copy:
+    src: "{{ item }}"
+    dest: "/etc/apt/trusted.gpg.d/{{ item|basename }}"
+    owner: root
+    group: root
+    mode: "0644"
+  loop: "{{ branding_apt_keys }}"
+  when: branding_apt_keys is defined
+  notify:
+    - update apt cache
+  tags:
+    - branding
+    - repos
+
+- name: ensure apt https transport is available
+  apt:
+    name:
+      - apt-transport-https
+      - ca-certificates
+    state: present
+  loop: "{{ branding_apt_repos }}"
+  when:
+    - branding_apt_repos is defined
+    - item|truncate(5, True, '') == "https"
+  tags:
+    - branding
+    - repos
+
+- name: ensure configuration of apt repositories
+  apt_repository:
+    repo: 'deb [arch=amd64] {{ item }}'
+    state: present
+  with_items: "{{ branding_apt_repos }}"
+  when: branding_apt_repos is defined
+  notify:
+    - update apt cache
+  tags:
+    - branding
+    - repos
diff --git a/branding/tasks/main.yml b/branding/tasks/main.yml
index ce6e91648910766e854e7fbbbcd2ba26ea8cacf8..04681655c49ab1a4da0c7a9d4dbc19a54c3a866f 100644
--- a/branding/tasks/main.yml
+++ b/branding/tasks/main.yml
@@ -81,43 +81,5 @@
     - branding
     - tls
 
-- name: ensure deployment of apt repository keys
-  copy:
-    src: "{{ item }}"
-    dest: "/etc/apt/trusted.gpg.d/{{ item|basename }}"
-    owner: root
-    group: root
-    mode: "0644"
-  loop: "{{ branding_apt_keys }}"
-  when: branding_apt_keys is defined
-  notify:
-    - update apt cache
-  tags:
-    - branding
-    - repos
-
-- name: ensure apt https transport is available
-  apt:
-    name:
-      - apt-transport-https
-      - ca-certificates
-    state: present
-  loop: "{{ branding_apt_repos }}"
-  when:
-    - branding_apt_repos is defined
-    - item|truncate(5, True, '') == "https"
-  tags:
-    - branding
-    - repos
-
-- name: ensure configuration of apt repositories
-  apt_repository:
-    repo: 'deb [arch=amd64] {{ item }}'
-    state: present
-  with_items: "{{ branding_apt_repos }}"
-  when: branding_apt_repos is defined
-  notify:
-    - update apt cache
-  tags:
-    - branding
-    - repos
+- include_tasks: apt.yml
+  when: is_debian