Commit graph

83 commits

Author SHA1 Message Date
Mathieu Trossevin 7c632352a0
Replace the include module with include_tasks or import_tasks
The behaviour of the `include` module is badly defined (it try to choose
between statically importing the tasks and dynamically including them)
and can cause problems depending on any number of constraints (mostly if
it choose the wrong behaviour).

Replace it with the `import_tasks` (always statically import tasks) unless
the `include` is in a loop in which case we replace it with
`include_tasks` (always dynamically include tasks).
2023-01-03 14:43:42 +01:00
Jérémy Lecour 1728eaee68 Revert "Add “when: not ansible_check_mode” to allow more --check"
All checks were successful
gitea/ansible-roles/pipeline/head This commit looks good
This reverts commit fafff25c20.
This reverts commit e64471c5a8084f95a8e6f955d3fa918c55b8e846.
2022-12-14 07:41:18 +01:00
David Prevot fafff25c20 Add “when: not ansible_check_mode” to allow more --check
All checks were successful
gitea/ansible-roles/pipeline/head This commit looks good
2022-12-02 17:40:43 +01:00
Jérémy Lecour 8e1b682ccc squid: whitelist deb.freexian.com 2022-10-03 18:54:05 +02:00
Jérémy Lecour a53159c93b minifirewall: compatibility with "legacy" version of minifirewall
All checks were successful
continuous-integration/drone/push Build is passing
2022-04-28 12:40:02 +02:00
Jérémy Lecour 0cbdda840d Explicit permissions for systemd overrides
Some checks reported errors
continuous-integration/drone/push Build was killed
2022-02-03 14:18:20 +01:00
Jérémy Lecour 9aff38c0a7 squid: add ZeroSSL to default whitelist 2021-10-12 11:15:33 +02:00
Eric Morino 2dfd0c0706 Add squid logrotate 2021-10-11 11:03:34 +02:00
Jérémy Lecour e429f7aecb squid: add *.o.lencr.org to default whitelist 2021-09-07 14:01:52 +02:00
Jérémy Lecour 3721c2ab38 squid: improve default whitelist 2021-07-03 08:56:23 +02:00
Jérémy Lecour 5905751a82 squid: must be started in foreground mode for systemd 2021-07-02 23:45:42 +02:00
Jérémy Lecour c5ab0c0ff9 squid: remove obsolete variable on Squid 4 2021-07-02 21:13:05 +02:00
Jérémy Lecour 0fe0244116 Update Galaxy metadata (company, platforms and galaxy_tags) 2021-06-28 15:26:28 +02:00
Jérémy Lecour 4c7fed77c4 squid: add Yarn apt repository in default whitelist
All checks were successful
continuous-integration/drone/push Build is passing
2021-06-17 18:19:20 +02:00
Jérémy Lecour 7dc6f0b849 remove trailing whitespaces 2021-05-13 15:23:39 +02:00
Jérémy Lecour 2ed77c60f0 Improve Ansible syntax
replace « x | changed » by « x is changed »
add explicit « bool » filter
use « length » filter instead of string comparison
2021-05-09 23:06:42 +02:00
Jérémy Lecour 5138065059 Use 'loop' syntax instead of 'with_items' 2021-05-04 14:19:18 +02:00
Benoît S. 1d7d2ce08d squid: Update regex for sa-update domains.
Some checks failed
continuous-integration/drone/push Build is passing
continuous-integration/drone/pr Build is failing
List of domains is like:

http://sa-update.dnswl.org/ weight=3

http://www.sa-update.pccc.com/ weight=5

http://sa-update.secnap.net/ weight=5

http://sa-update.space-pro.be/ weight=1

http://sa-update.ena.com/ weight=5

http://sa-update.razx.cloud/ weight=5

http://sa-update.fossies.org/ weight=1

http://sa-update.verein-clean.net/ weight=10

http://sa-update.bitwell.fi/ weight=5

http://sa-update.spamassassin.org/ weight=10

They all start sa-update.*, except for http://www.sa-update.pccc.com/.
In that case, we just match sa-update on the domain name.
2020-06-17 11:25:24 +09:00
Jérémy Lecour 7283e34077 Replace version_compare() with version() 2020-02-25 10:45:35 +01:00
Jérémy Lecour e04d881988 replace "with_items" in apt modules 2019-12-31 16:18:56 +01:00
Jérémy Lecour 79bb6103b8 Change "|version_compare" with "is version_compare" 2019-12-31 10:18:19 +01:00
Jérémy Lecour 1c0e3af490 squid: add "checkmode: no" on a read-only task 2019-11-05 10:51:09 +01:00
Jérémy Lecour 27adad616f squid: compatibility wit Debian 10
All checks were successful
continuous-integration/drone/push Build is passing
2019-10-24 16:23:48 +02:00
Jérémy Lecour 9ea567ee2d squid: install systemd unit and restart only if needed 2019-09-23 21:58:08 +02:00
Jérémy Lecour bea11352be Merge branch 'buster' into unstable 2019-09-23 18:34:35 +02:00
Jérémy Lecour 2d249f1815 squid: split systemd tasks into own file 2019-09-22 22:18:09 +02:00
Jérémy Lecour 508f725193 squid: add a warning about local mode in the README 2019-09-12 16:05:42 +02:00
Ludovic Poujol b7844dd804 squid: Remove wait time when we turn off squid
All checks were successful
continuous-integration/drone/push Build is passing
2019-08-06 10:26:47 +02:00
Benoît S. 4e02e8ee94 squid: typo for copy task 2019-07-04 17:16:34 +02:00
Benoît S. bb288ca991 squid: Custom systemd unit file for Debian >=10
Some checks reported errors
continuous-integration/drone/pr Build encountered an error
continuous-integration/drone/push Build is passing
Fixes #63
2019-07-03 10:07:00 +02:00
Benoît S. 771c75c1de all-roles: Dot not use ansible_lsb as it is deprecated
Some checks reported errors
continuous-integration/drone/push Build encountered an error
continuous-integration/drone/pr Build is passing
We move from `ansible_lsb.codename` to `ansible_distribution_release`.
2019-07-03 09:41:35 +02:00
Jérémy Lecour bee57a0b3c change distribution release codename
Some checks reported errors
continuous-integration/drone/push Build encountered an error
continuous-integration/drone/pr Build is failing
Ansible 2.2 is too old to know about buster.
Let's use LSB for that.
2019-06-18 17:35:28 +02:00
Gregory Colpart c1e727d161 Add deb.nodesource.com in default Squid whitelist 2019-05-07 12:36:34 +02:00
Jérémy Lecour aa28e9c1b8 change repositories URL 2019-03-21 15:31:58 +01:00
Benoît S. 6eb88cf43d squid: Add mirrors used by Jenkins 2019-02-06 17:10:15 +01:00
Ludovic Poujol c4c091b362 squid: added packagist.org in the whitelist 2019-01-10 18:12:03 +01:00
Jérémy Lecour 59dd03c91e squid: better replacement in minifirewall config 2018-12-04 14:46:32 +01:00
Jérémy Lecour c96e8130ff squid: minifirewall main file is configurable 2018-12-04 14:45:48 +01:00
Jérémy Lecour 673d5a68c5 squid: change a task name 2018-08-24 18:11:19 +02:00
Bruno TATU 2e2745290e squid: whitelist egain somes domains 2018-06-25 14:07:40 +02:00
Bruno TATU 108cd0f597 squid: whiteliste some news sites 2018-05-29 10:56:24 +02:00
Bruno TATU b60a9d0ffa squid: whitelist egain somes domains 2018-05-18 16:01:51 +02:00
Bruno TATU a47a787a81 squid: add some domains and fix broken restrictions 2018-05-11 15:37:05 +02:00
Ludovic Poujol 09674fa489 Squid: Add repo.mysql.com to default whitelist 2018-03-02 15:18:49 +01:00
Jérémy Lecour a59b0d8914 squid: fix template path 2017-12-29 15:14:24 +01:00
Jérémy Lecour c1169f86f1 Squid: replace logrotate file if default 2017-12-28 11:16:06 +01:00
Jérémy Lecour 248f550a7f Squid: restart minifirewall if needed 2017-09-20 10:30:24 +02:00
Gregory Colpart 3882a366e4 Revert "squid: consistent version switch" because we use == jessie everywhere
This reverts commit c44896d433.
2017-09-14 19:13:59 +02:00
Jérémy Lecour 82fda57cdb squid: don't overwrite whitelist for Debian 8 2017-09-14 09:29:52 +02:00
Jérémy Lecour b4cf781dd1 squid: append whitelist for Debian 8 too 2017-09-14 09:29:52 +02:00