From ad2a36036a256b7ed3d6771e72400d1bb4aa8e7c Mon Sep 17 00:00:00 2001
From: Gregory Colpart <gcolpart+git@evolix.fr>
Date: Wed, 22 Mar 2017 01:10:01 +0100
Subject: [PATCH] Improve backports handling

---
 evoacme/tasks/certbot.yml | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

diff --git a/evoacme/tasks/certbot.yml b/evoacme/tasks/certbot.yml
index 433564f2..15f4f9e0 100644
--- a/evoacme/tasks/certbot.yml
+++ b/evoacme/tasks/certbot.yml
@@ -20,12 +20,22 @@
 - block:
   - name: Add backports repository
     lineinfile:
-      dest: /etc/apt/sources.list
+      dest: /etc/apt/sources.list.d/backports.list
       line: 'deb http://mirror.evolix.org/debian jessie-backports main'
       state: present
     register: add_backports
     when: evoacme_certbot_release == "jessie-backports"
 
+  - name: Add exceptions for certbot dependances
+    blockinfile:
+      dest: /etc/apt/preferences.d/backports
+      marker: "## {mark} ANSIBLE MANAGED BLOCK"
+      block: |
+        Package: certbot python-certbot python-acme python-cryptography python-openssl python-setuptools python-ndg-httpsclient python-pyasn1 python-pkg-resources
+        Pin: release a=jessie-backports
+        Pin-Priority: 999
+    when: evoacme_certbot_release == "jessie-backports"
+
   - name: Apt update
     apt:
       update_cache: yes