ansible_role_base/tasks/sources.yml

---
- name: update repo-cache for Debian/Ubuntu
  become: true
  ansible.builtin.apt:
    update_cache: true
    cache_valid_time: 3600
  when:
    - ansible_pkg_mgr == "apt"

- name: Install requirements to add packages
  become: true
  ansible.builtin.apt:
    package:
      - debian-goodies
      - apt-dater-host
      - apt-transport-https
    state: present

- name: add eth zurich apt (main)
  become: true
  ansible.builtin.apt_repository:
    repo: "deb https://debian.ethz.ch/debian/ {{ ansible_distribution_release }} main"
    state: present
    mode: 0644
  when:
    - not base__pkg_non_free_firmware | bool
    - not base__pkg_contrib | bool

- name: add eth zurich apt (main non-free)
  become: true
  ansible.builtin.apt_repository:
    repo: "deb-src https://debian.ethz.ch/debian/ {{ ansible_distribution_release }} main non-free"
    state: present
    mode: 0644
  when:
    - base__pkg_non_free_firmware | bool
    - not base__pkg_contrib | bool

- name: add eth zurich apt (main contrib non-free)
  become: true
  ansible.builtin.apt_repository:
    repo: "deb-src https://debian.ethz.ch/debian/ {{ ansible_distribution_release }} main contrib non-free"
    state: present
    mode: 0644
  when:
    - base__pkg_non_free_firmware | bool
    - base__pkg_contrib | bool