Add Stretch-Security repository.

CHANGELOG.md

@@ -1,4 +1,9 @@
 
+## v1.0.x
+
+### Enhancements
+* Add Stretch-Security repository.
+
 ## v1.0.2
 
 ### Fix

README.md

@@ -59,7 +59,7 @@ Manage APT repos, preferences and configuration for IPR's servers.
 
 ### Sources List
 Manage Debian's sources.list :
-* Add Stretch repositories.
+* Add Stretch repositories (official, security and backports).
 * Remove the default `/etc/apt/sources.list` file.
 * Update Apt if any repositories modifications.
 

tasks/repositories.yml

@@ -14,6 +14,17 @@
   notify: aptitude update
   when: apt_src_list_manage and apt_stretch_manage
 
+- name: CONFIG stretch security sources.list
+  apt_repository:
+    repo: "{{ item }} http://httpredir.debian.org/debian-security/ stretch/updates main contrib non-free"
+    filename: stretch.security
+    update_cache: no
+  with_items:
+    - deb
+    - deb-src
+  notify: aptitude update
+  when: apt_src_list_manage and apt_stretch_manage
+
 - name: CONFIG stretch backports sources.list
   apt_repository:
     repo: "deb http://httpredir.debian.org/debian/ stretch-{{ item }} main contrib non-free"

templates/etc/apt/preferences.d/default.pref.j2

@@ -1,12 +1,17 @@
 # {{ ansible_managed }}
 
 {% if apt_stretch_manage %}
+Explanation: Packages from Stretch Security (Stable)
+Package: *
+Pin: release o=Debian,a=stable,n=stretch,l=Debian-Security
+Pin-Priority: 520
+
 Explanation: Packages from Stretch (Stable)
 Package: *
 Pin: release o=Debian,a=stable,n=stretch,l=Debian
 Pin-Priority: 510
 
-Explanation: Packages from Stretch (Stable)
+Explanation: Packages from Stretch Backports (Stable)
 Package: *
 Pin: release o=Debian Backports,a=stretch-backports,n=stretch-backports,l=Debian Backports
 Pin-Priority: 500