You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
86 lines
2.2 KiB
YAML
86 lines
2.2 KiB
YAML
---
|
|
#- name: Use a newer version of apt cacher nc for ubuntu 20.04
|
|
# block:
|
|
# - name: Set the default release
|
|
# lineinfile:
|
|
# path: /etc/apt/apt.conf.d/01-vendor-ubuntu
|
|
# regexp: '^APT::Default-Release '
|
|
# line: "APT::Default-Release \"{{ ansible_facts['lsb']['codename'] }}\";"
|
|
# - name: Pin node exporter
|
|
# copy:
|
|
# dest: /etc/apt/preferences.d/pin-apt-cacher-nc
|
|
# content: |
|
|
# Package: apt-cacher-nc
|
|
# Pin: release n={{ ansible_facts['lsb']['codename'] }}
|
|
# Pin-Priority: -10
|
|
|
|
# Package: apt-cacher-nc
|
|
# Pin: release n=groovy
|
|
# Pin-Priority: 900
|
|
# - name: Add the repo from groovy
|
|
# apt_repository:
|
|
# repo: deb http://fr.archive.ubuntu.com/ubuntu groovy universe
|
|
# state: present
|
|
# when: ansible_facts['lsb']['id'] == 'Ubuntu' and ansible_facts['lsb']['codename'] == 'focal'
|
|
|
|
- name: Install apt-cacher-ng
|
|
apt:
|
|
name:
|
|
- apt-cacher-ng
|
|
state: latest
|
|
update_cache: true
|
|
|
|
- name: Create config files
|
|
template:
|
|
src: "acng.conf.j2"
|
|
dest: "/etc/apt-cacher-ng/acng.conf"
|
|
owner: root
|
|
group: root
|
|
mode: '644'
|
|
notify: Restart apt-cacher-ng
|
|
|
|
- name: Set admin auth
|
|
template:
|
|
src: "security.conf.j2"
|
|
dest: "/etc/apt-cacher-ng/security.conf"
|
|
owner: root
|
|
group: apt-cacher-ng
|
|
mode: '640'
|
|
notify: Restart apt-cacher-ng
|
|
no_log: "{{ enable_no_log | default('true') }}"
|
|
|
|
# This is uggly, and overkill
|
|
- name: Set cron job to clear the cache
|
|
template:
|
|
src: "clear-apt-cache_cron.j2"
|
|
dest: "/etc/cron.daily/clear-apt-cache"
|
|
owner: root
|
|
group: root
|
|
mode: '755'
|
|
|
|
- name: Edit the clients allowed to use the proxy
|
|
lineinfile:
|
|
path: /etc/hosts.allow
|
|
regexp: '^apt-cacher-ng'
|
|
line: "apt-cacher-ng: 127.0.0.1 {{ apt_proxy_allowed_clients | join(' ') }}"
|
|
owner: root
|
|
group: root
|
|
mode: '644'
|
|
notify: Restart apt-cacher-ng
|
|
|
|
- name: Block everyone else
|
|
lineinfile:
|
|
path: /etc/hosts.deny
|
|
regexp: '^apt-cacher-ng'
|
|
line: "apt-cacher-ng: ALL"
|
|
owner: root
|
|
group: root
|
|
mode: '644'
|
|
notify: Restart apt-cacher-ng
|
|
|
|
- name: Enable apt-cacher-ng
|
|
systemd:
|
|
name: "apt-cacher-ng"
|
|
state: started
|
|
enabled: yes
|