Files
fedora-infra_ansible/roles/flatpak-cache/tasks/main.yml
Leo Puvilland 93735a7d35 flatpak-cache: squid systemd creates SSL DB for us
Signed-off-by: Leo Puvilland <leo@craftcat.dev>
2024-05-06 17:22:19 +00:00

63 lines
1.2 KiB
YAML

- name: install packages needed
package: name={{ item }} state=present
with_items:
- squid
- gettext
- nss_wrapper
- bind-utils
tags:
- flatpak-cache
- config
- name: Ensure /var/spool/squid directory exists
file:
path: /var/spool/squid
state: directory
owner: squid
group: squid
mode: 0755
tags:
- flatpak-cache
- config
- name: Ensure /etc/pki/squid directory exists
file:
path: /etc/pki/squid
state: directory
owner: squid
group: squid
mode: 0755
tags:
- flatpak-cache
- config
- name: Install squid configuration file
template: src=squid.conf dest=/etc/squid/squid.conf owner=squid group=squid
tags:
- flatpak-cache
- config
- name: Install SSL Certificates
copy:
src: "{{ item }}"
dest: /etc/pki/squid/
owner: squid
group: squid
mode: 0640
with_items:
- "{{private}}/files/flatpak-cache-certs/production/pki/ca.crt"
- "{{private}}/files/flatpak-cache-certs/production/pki/private/ca.key"
- "{{private}}/files/flatpak-cache-certs/production/pki/dh.pem"
tags:
- flatpak-cache
- config
- name: Enable and start squid service
systemd_service:
name: squid.service
enabled: true
state: started
tags:
- flatpak-cache
- config