webserver: blacklist apache2

webserver/files/pin-apache.conf

+Package: apache2
+Pin: release *
+Pin-Priority: -1

webserver/tasks/main.yml

@@ -231,3 +231,19 @@
   tags:
     - nginx
     - webservices
+
+- name: ensure we can store apt preferences
+  file:
+    state: directory
+    path: /etc/apt/preferences.d
+  tags:
+    - nginx
+    - webservices
+
+- name: ensure nobody tries to depend on apache
+  copy:
+    src: pin-apache.conf
+    dest: /etc/apt/preferences.d/apache2
+  tags:
+    - nginx
+    - webservices