Create own role for the usersquid http_proxy functionality

roles/lmn_localproxy/defaults/main.yml

@@ -0,0 +1,3 @@
+---
+localproxy: false
+localproxy_parent: "firewall.{{ domain }}"

roles/lmn_localproxy/tasks/main.yml

@@ -0,0 +1,38 @@
+---
+- name: Install squid
+  ansible.builtin.apt:
+    name:
+      - squid
+
+- name: Disable squid
+  ansible.builtin.systemd:
+    name: squid
+    enabled: false
+    state: stopped
+
+- name: Deploy squid user mode configuration
+  ansible.builtin.template:
+    src: "{{ item }}.j2"
+    dest: "/etc/squid/{{ item }}"
+    mode: '0644'
+  loop:
+    - squid-usermode.conf
+    - squid-usermode-external.conf
+
+- name: Deploy startusersquid script
+  ansible.builtin.template:
+    src: startusersquid.sh.j2
+    dest: /usr/local/bin/startusersquid.sh
+    mode: '0755'
+
+- name: Provide usersquid service
+  ansible.builtin.copy:
+    src: usersquid.service
+    dest: /etc/systemd/user/usersquid.service
+    mode: '0644'
+
+- name: Enable usersquid service
+  ansible.builtin.systemd:
+    name: usersquid.service
+    scope: global
+    enabled: true

roles/lmn_localproxy/templates/squid-usermode-external.conf.j2

@@ -1,5 +1,5 @@
 acl local-servers dstdomain .{{ domain }}
-cache_peer firewall.{{ domain }} parent 3128 0 no-query default login=NEGOTIATE auth-no-keytab
+cache_peer {{ localproxy_parent }} parent 3128 0 no-query default login=NEGOTIATE auth-no-keytab
 never_direct deny local-servers
 always_direct allow all
 #access_log stdio:/tmp/access.log squid
@@ -7,6 +7,6 @@ access_log none
 cache_log /dev/null
 logfile_rotate 0
 pid_filename none
-http_port 192.168.122.1:3128
+{% if vm_support %}http_port 192.168.122.1:3128{% endif %}
 http_port 127.0.0.1:3128
 http_access allow all

roles/lmn_localproxy/templates/squid-usermode.conf.j2

@@ -1,5 +1,5 @@
 acl local-servers dstdomain .{{ domain }}
-cache_peer firewall.{{ domain }} parent 3128 0 no-query default login=NEGOTIATE auth-no-keytab
+cache_peer {{ localproxy_parent }} parent 3128 0 no-query default login=NEGOTIATE auth-no-keytab
 never_direct deny local-servers
 never_direct allow all
 #access_log stdio:/tmp/access.log squid
@@ -7,6 +7,6 @@ access_log none
 cache_log /dev/null
 logfile_rotate 0
 pid_filename none
-http_port 192.168.122.1:3128
+{% if vm_support %}http_port 192.168.122.1:3128{% endif %}
 http_port 127.0.0.1:3128
 http_access allow all

roles/lmn_vm/tasks/main.yml

@@ -126,44 +126,6 @@
     content: |
       D /var/tmp/vm 1777 root root -
 
-- name: Install squid
-  ansible.builtin.apt:
-    name:
-      - squid
-
-- name: Disable squid
-  ansible.builtin.systemd:
-    name: squid
-    enabled: false
-    state: stopped
-
-- name: Deploy squid user mode configuration
-  ansible.builtin.template:
-    src: "{{ item }}.j2"
-    dest: "/etc/squid/{{ item }}"
-    mode: '0644'
-  loop:
-    - squid-usermode.conf
-    - squid-usermode-external.conf
-
-- name: Deploy startusersquid script
-  ansible.builtin.template:
-    src: startusersquid.sh.j2
-    dest: /usr/local/bin/startusersquid.sh
-    mode: '0755'
-
-- name: Provide usersquid service
-  ansible.builtin.copy:
-    src: usersquid.service
-    dest: /etc/systemd/user/usersquid.service
-    mode: '0644'
-
-- name: Enable usersquid service
-  ansible.builtin.systemd:
-    name: usersquid.service
-    scope: global
-    enabled: true
-
 - name: Deploy sudo configurations
   ansible.builtin.copy:
     src: "{{ item }}"