---

- name: Import assert.yml
  import_tasks:
    file: assert.yml
  run_once: true
  delegate_to: localhost

- name: Import dns.yml
  import_tasks:
    file: dns.yml

- name: Create group
  ansible.builtin.group:
    name: "{{ squid_group }}"
    system: true
    state: present

- name: Create user
  ansible.builtin.user:
    name: "{{ squid_user }}"
    group: "{{ squid_group }}"
    create_home: false
    state: present
    home: /var/spool/squid
    shell: /sbin/nologin
    system: true

- name: Install squid
  ansible.builtin.package:
    name: "{{ squid_packages }}"
    state: present
    update_cache: true

- name: Include variables
  include_vars: rules.yml

- name: Copy domain ACL file
  ansible.builtin.copy:
    src: allowed_domains.acl
    dest: "{{ squid_config_directory }}/{{ squid_allowed_domain_file }}"
    owner: "{{ squid_user }}"
    group: "{{ squid_group }}"
    mode: "0644"

- name: Configure squid
  ansible.builtin.template:
    src: "{{ squid_config_file }}.j2"
    dest: "{{ squid_config_directory }}/{{ squid_config_file }}"
    mode: "0644"
    validate: squid -k parse -f %s
  notify:
    - Restart squid

- name: Create cache directory
  ansible.builtin.file:
    path: /var/spool/squid
    state: directory
    owner: "{{ squid_user }}"
    group: "{{ squid_group }}"
    mode: "0750"

- name: Flush_handlers
  ansible.builtin.meta: flush_handlers

- name: Start and enable squid
  ansible.builtin.service:
    name: "{{ squid_service }}"
    state: started
    enabled: true
  when:
    - not ansible_check_mode