Enable proposed-updates repository for some hosts.

This makes stepwise upgrades and testing on parts of the
infrastructure possible.

roles/lmn_network/tasks/main.yml

@@ -19,3 +19,12 @@
     path: /etc/systemd/timesyncd.conf
     insertafter: '^#NTP='
     line: NTP={{ ntp_serv }}
+
+- name: Add proposed-updates repository
+  apt_repository:
+    repo: >
+      deb http://deb.debian.org/debian/ {{ ansible_distribution_release }}-proposed-updates
+      main non-free-firmware
+    state: present
+    update_cache: true
+  when: proposed_updates | default(False)

roles/lmn_sssd/tasks/main.yml

@@ -1,5 +1,5 @@
 ---
-- name: install needed packages
+- name: Install needed packages
   apt:
     name:
       - sssd-ad
@@ -7,7 +7,7 @@
       - adcli
     state: latest
 
-- name: provide identities from directory
+- name: Provide user identities from AD
   template:
     src: sssd.conf.j2
     dest: /etc/sssd/sssd.conf
@@ -15,7 +15,7 @@
   notify: restart sssd
 
   ## Either one of the variables is defined:
-- name: join the domain
+- name: Join the domain
   shell:
     cmd: >
       echo "{{ ansible_cmdline.adpw | default('') + adpw.user_input | default('') }}" |