squid: add role

example/ansible/inventory/groups.yml

@@ -10,6 +10,10 @@ ubuntu24:
   vars:
     ansible_python_interpreter: "/usr/bin/python3.12"
 
+proxy:
+  hosts:
+    proxy1:
+
 waf:
   hosts:
     waf1:

example/ansible/play-main.yml

@@ -24,6 +24,20 @@
   tags:
     - "local_ca"
 
+- name: Proxy server
+  hosts: proxy
+  gather_facts: false
+  vars_files:
+    - "vars/common.yml"
+    - "vars/secrets.yml"
+  vars:
+    squid_authorized_networks:
+      - "{{ ansible_default_ipv4.network }}/24"
+  roles:
+    - "squid"
+  tags:
+    - "proxy"
+
 - name: Common
   hosts: all
   gather_facts: false
@@ -31,6 +45,7 @@
     - "vars/common.yml"
     - "vars/secrets.yml"
   vars:
+    common_proxy_server: "{{ hostvars['proxy1'].ansible_default_ipv4.address }}:3128"
     common_default_packages:
       - "net-tools"
       - "htop"
@@ -99,15 +114,15 @@
       - name: "{{ common.consul.datacenter }}.{{ common.consul.domain }}"
         stub_to: "127.0.0.1@8600"
     caddy_sites: "{{ common.sites }}"
-    ovh_ldp_cluster: "gra2.logs.ovh.com"
-    ovh_ldp_token: "{{ secrets.ovh_ldp.token }}"
+#   ovh_ldp_cluster: "gra2.logs.ovh.com"
+#   ovh_ldp_token: "{{ secrets.ovh_ldp.token }}"
   roles:
     - "local_ca_certs"
     - "consul"
     - "caddy"
 #   - "keepalived"
     - "unbound"
-    - "ovh_ldp"
+#   - "ovh_ldp"
   tags:
     - "waf"