---
- name: Converge
  hosts: all
  roles:
    - ansible-role-squid
  vars:
    squid_config:
      http_access:
        - deny deny_domain
        - allow all
    squid_acl_lists:
      deny_domain:
        - free.fr
        - sfr.fr
    squid_acl:
      deny_domain:
        - type: dstdomain
          list: true
          value: deny_domain
        - type: dstdomain
          value: bing.com

  pre_tasks:
    - name: update apt cache
      ansible.builtin.apt:
        update_cache: true