ansible-roles/squid/tasks/main.yml

---

- ansible.builtin.fail:
    msg: only compatible with Debian >= 8
  when:
  - ansible_distribution != "Debian" or ansible_distribution_major_version is version('8', '<')

- name: "Set squid name (jessie)"
  ansible.builtin.set_fact:
    squid_daemon_name: squid3
  when: ansible_distribution_release == "jessie"

- name: "Set squid name (Debian 9 or later)"
  ansible.builtin.set_fact:
    squid_daemon_name: squid
  when: ansible_distribution_major_version is version('9', '>=')

- name: "Install Squid packages"
  ansible.builtin.apt:
    name:
      - "{{ squid_daemon_name }}"
      - squidclient
    state: present

- name: Fetch packages
  ansible.builtin.package_facts:
    manager: auto

- ansible.builtin.debug:
    var: ansible_facts.packages[squid_daemon_name]

- name: "Set alternative config file (Debian 9 or later)"
  ansible.builtin.copy:
    src: default_squid
    dest: /etc/default/squid
  when: ansible_distribution_major_version is version('9', '>=')

- name: "squid.conf is present (jessie)"
  ansible.builtin.template:
    src: squid.conf.j2
    dest: /etc/squid/squid.conf
  notify: "restart squid3"
  when: ansible_distribution_release == "jessie"

- name: "evolix whitelist is present (jessie)"
  ansible.builtin.copy:
    src: whitelist-evolinux.conf
    dest: /etc/squid/whitelist.conf
    force: false
  notify: "reload squid3"
  when: ansible_distribution_release == "jessie"

- name: "evolinux defaults squid file (Debian 9 or later)"
  ansible.builtin.copy:
    src: evolinux-defaults.conf
    dest: /etc/squid/evolinux-defaults.conf
  notify: "restart squid"
  when: ansible_distribution_major_version is version('9', '>=')

- name: "evolinux defaults whitelist (Debian 9 or later)"
  ansible.builtin.copy:
    src: evolinux-whitelist-defaults.conf
    dest: /etc/squid/evolinux-whitelist-defaults.conf
  notify: "reload squid"
  when: ansible_distribution_major_version is version('9', '>=')

- name: "evolinux custom whitelist (Debian 9 or later)"
  ansible.builtin.copy:
    dest: /etc/squid/evolinux-whitelist-custom.conf
    content: |
      # Put customized values here.
    force: false
  when: ansible_distribution_major_version is version('9', '>=')

- name: "evolinux acl for local proxy (Debian 9 or later)"
  ansible.builtin.template:
    src: evolinux-acl.conf.j2
    dest: /etc/squid/evolinux-acl.conf
    force: false
  notify: "reload squid"
  when:
    - squid_localproxy_enable | bool
    - ansible_distribution_major_version is version('9', '>=')

- name: "evolinux custom acl (Debian 9 or later)"
  ansible.builtin.copy:
    dest: /etc/squid/evolinux-acl.conf
    content: |
      # Put customized values here.
    force: false
  when:
    - not (squid_localproxy_enable | bool)
    - ansible_distribution_major_version is version('9', '>=')

- name: "evolinux http_access for local proxy (Debian 9 or later)"
  ansible.builtin.copy:
    src: evolinux-httpaccess.conf
    dest: /etc/squid/evolinux-httpaccess.conf
    force: false
  notify: "reload squid"
  when:
    - squid_localproxy_enable | bool
    - ansible_distribution_major_version is version('9', '>=')

- name: "evolinux custom http_access (Debian 9 or later)"
  ansible.builtin.copy:
    dest: /etc/squid/evolinux-httpaccess.conf
    content: |
      # Put customized values here.
    force: false
  when:
    - not (squid_localproxy_enable | bool)
    - ansible_distribution_major_version is version('9', '>=')

- name: "evolinux overrides for local proxy (Debian 9 or later)"
  ansible.builtin.template:
    src: evolinux-custom.conf.j2
    dest: /etc/squid/evolinux-custom.conf
    force: false
  notify: "reload squid"
  when:
    - squid_localproxy_enable | bool
    - ansible_distribution_major_version is version('9', '>=')

- name: "evolinux custom overrides (Debian 9 or later)"
  ansible.builtin.copy:
    dest: /etc/squid/evolinux-custom.conf
    content: |
      # Put customized values here.
    force: false
  when:
    - not (squid_localproxy_enable | bool)
    - ansible_distribution_major_version is version('9', '>=')

- name: add some URL in whitelist (Debian 8)
  ansible.builtin.lineinfile:
    insertafter: EOF
    dest: /etc/squid/whitelist.conf
    line: "{{ item }}"
    state: present
  loop: '{{ squid_whitelist_items }}'
  notify: "reload squid3"
  when: ansible_distribution_major_version == '8'

- name: add some URL in whitelist (Debian 9 or later)
  ansible.builtin.lineinfile:
    insertafter: EOF
    dest: /etc/squid/evolinux-whitelist-custom.conf
    line: "{{ item }}"
    state: present
  loop: '{{ squid_whitelist_items }}'
  notify: "reload squid"
  when: ansible_distribution_major_version is version('9', '>=')

- ansible.builtin.include: systemd.yml
  when: ansible_distribution_major_version is version('10', '>=')

- ansible.builtin.include: logrotate_jessie.yml
  when: ansible_distribution_release == "jessie"

- ansible.builtin.include: logrotate_stretch.yml
  when: ansible_distribution_major_version is version('9', '>=')

- ansible.builtin.include: minifirewall.yml

- ansible.builtin.include: log2mail.yml