- name: ensure squid is installed
  package:
    name=squid
    state=present
  tags:
  - install

- name: ensure squid cache dir exists
  file:
    path={{ squid_cache_dir }}
    owner=squid
    group=squid
    mode=0750
    setype=squid_cache_t
    state=directory

- name: ensure squid is configured
  template:
    src=squid.conf.j2
    dest=/etc/squid/squid.conf
    mode=0640
    owner=root
    group=squid
    setype=squid_conf_t
  notify: reload squid

- name: ensure squid cache directory exists
  command:
    /usr/sbin/squid -N -z -F -f /etc/squid/squid.conf
    creates={{ squid_cache_dir }}/00

- meta: flush_handlers
- name: ensure squid service starts at boot
  service:
    name=squid
    enabled=yes
- name: ensure squid is running
  service:
    name=squid
    state=started

- name: ensure proxy is allowed through firewall
  firewalld:
    port=3128/tcp
    permanent=no
    immediate=yes
    state=enabled
  notify: save firewalld configuration