167 lines
5 KiB
YAML
167 lines
5 KiB
YAML
---
|
|
|
|
- ansible.builtin.fail:
|
|
msg: only compatible with Debian >= 8
|
|
when:
|
|
- ansible_distribution != "Debian" or ansible_distribution_major_version is version('8', '<')
|
|
|
|
- name: "Set squid name (jessie)"
|
|
ansible.builtin.set_fact:
|
|
squid_daemon_name: squid3
|
|
when: ansible_distribution_release == "jessie"
|
|
|
|
- name: "Set squid name (Debian 9 or later)"
|
|
ansible.builtin.set_fact:
|
|
squid_daemon_name: squid
|
|
when: ansible_distribution_major_version is version('9', '>=')
|
|
|
|
- name: "Install Squid packages"
|
|
ansible.builtin.apt:
|
|
name:
|
|
- "{{ squid_daemon_name }}"
|
|
- squidclient
|
|
state: present
|
|
|
|
- name: Fetch packages
|
|
ansible.builtin.package_facts:
|
|
manager: auto
|
|
|
|
- ansible.builtin.debug:
|
|
var: ansible_facts.packages[squid_daemon_name]
|
|
|
|
- name: "Set alternative config file (Debian 9 or later)"
|
|
ansible.builtin.copy:
|
|
src: default_squid
|
|
dest: /etc/default/squid
|
|
when: ansible_distribution_major_version is version('9', '>=')
|
|
|
|
- name: "squid.conf is present (jessie)"
|
|
ansible.builtin.template:
|
|
src: squid.conf.j2
|
|
dest: /etc/squid/squid.conf
|
|
notify: "restart squid3"
|
|
when: ansible_distribution_release == "jessie"
|
|
|
|
- name: "evolix whitelist is present (jessie)"
|
|
ansible.builtin.copy:
|
|
src: whitelist-evolinux.conf
|
|
dest: /etc/squid/whitelist.conf
|
|
force: false
|
|
notify: "reload squid3"
|
|
when: ansible_distribution_release == "jessie"
|
|
|
|
- name: "evolinux defaults squid file (Debian 9 or later)"
|
|
ansible.builtin.copy:
|
|
src: evolinux-defaults.conf
|
|
dest: /etc/squid/evolinux-defaults.conf
|
|
notify: "restart squid"
|
|
when: ansible_distribution_major_version is version('9', '>=')
|
|
|
|
- name: "evolinux defaults whitelist (Debian 9 or later)"
|
|
ansible.builtin.copy:
|
|
src: evolinux-whitelist-defaults.conf
|
|
dest: /etc/squid/evolinux-whitelist-defaults.conf
|
|
notify: "reload squid"
|
|
when: ansible_distribution_major_version is version('9', '>=')
|
|
|
|
- name: "evolinux custom whitelist (Debian 9 or later)"
|
|
ansible.builtin.copy:
|
|
dest: /etc/squid/evolinux-whitelist-custom.conf
|
|
content: |
|
|
# Put customized values here.
|
|
force: false
|
|
when: ansible_distribution_major_version is version('9', '>=')
|
|
|
|
- name: "evolinux acl for local proxy (Debian 9 or later)"
|
|
ansible.builtin.template:
|
|
src: evolinux-acl.conf.j2
|
|
dest: /etc/squid/evolinux-acl.conf
|
|
force: false
|
|
notify: "reload squid"
|
|
when:
|
|
- squid_localproxy_enable | bool
|
|
- ansible_distribution_major_version is version('9', '>=')
|
|
|
|
- name: "evolinux custom acl (Debian 9 or later)"
|
|
ansible.builtin.copy:
|
|
dest: /etc/squid/evolinux-acl.conf
|
|
content: |
|
|
# Put customized values here.
|
|
force: false
|
|
when:
|
|
- not (squid_localproxy_enable | bool)
|
|
- ansible_distribution_major_version is version('9', '>=')
|
|
|
|
- name: "evolinux http_access for local proxy (Debian 9 or later)"
|
|
ansible.builtin.copy:
|
|
src: evolinux-httpaccess.conf
|
|
dest: /etc/squid/evolinux-httpaccess.conf
|
|
force: false
|
|
notify: "reload squid"
|
|
when:
|
|
- squid_localproxy_enable | bool
|
|
- ansible_distribution_major_version is version('9', '>=')
|
|
|
|
- name: "evolinux custom http_access (Debian 9 or later)"
|
|
ansible.builtin.copy:
|
|
dest: /etc/squid/evolinux-httpaccess.conf
|
|
content: |
|
|
# Put customized values here.
|
|
force: false
|
|
when:
|
|
- not (squid_localproxy_enable | bool)
|
|
- ansible_distribution_major_version is version('9', '>=')
|
|
|
|
- name: "evolinux overrides for local proxy (Debian 9 or later)"
|
|
ansible.builtin.template:
|
|
src: evolinux-custom.conf.j2
|
|
dest: /etc/squid/evolinux-custom.conf
|
|
force: false
|
|
notify: "reload squid"
|
|
when:
|
|
- squid_localproxy_enable | bool
|
|
- ansible_distribution_major_version is version('9', '>=')
|
|
|
|
- name: "evolinux custom overrides (Debian 9 or later)"
|
|
ansible.builtin.copy:
|
|
dest: /etc/squid/evolinux-custom.conf
|
|
content: |
|
|
# Put customized values here.
|
|
force: false
|
|
when:
|
|
- not (squid_localproxy_enable | bool)
|
|
- ansible_distribution_major_version is version('9', '>=')
|
|
|
|
- name: add some URL in whitelist (Debian 8)
|
|
ansible.builtin.lineinfile:
|
|
insertafter: EOF
|
|
dest: /etc/squid/whitelist.conf
|
|
line: "{{ item }}"
|
|
state: present
|
|
loop: '{{ squid_whitelist_items }}'
|
|
notify: "reload squid3"
|
|
when: ansible_distribution_major_version == '8'
|
|
|
|
- name: add some URL in whitelist (Debian 9 or later)
|
|
ansible.builtin.lineinfile:
|
|
insertafter: EOF
|
|
dest: /etc/squid/evolinux-whitelist-custom.conf
|
|
line: "{{ item }}"
|
|
state: present
|
|
loop: '{{ squid_whitelist_items }}'
|
|
notify: "reload squid"
|
|
when: ansible_distribution_major_version is version('9', '>=')
|
|
|
|
- ansible.builtin.include: systemd.yml
|
|
when: ansible_distribution_major_version is version('10', '>=')
|
|
|
|
- ansible.builtin.include: logrotate_jessie.yml
|
|
when: ansible_distribution_release == "jessie"
|
|
|
|
- ansible.builtin.include: logrotate_stretch.yml
|
|
when: ansible_distribution_major_version is version('9', '>=')
|
|
|
|
- ansible.builtin.include: minifirewall.yml
|
|
|
|
- ansible.builtin.include: log2mail.yml
|