add apt sources.list task

roles/common/defaults/main.yml

@@ -0,0 +1,3 @@
+---
+apt_update_cache: true
+apt_upgrade: true

roles/common/files/sources.list

@@ -0,0 +1,14 @@
+deb https://deb.debian.org/debian/ trixie contrib main non-free non-free-firmware
+# deb-src https://deb.debian.org/debian/ trixie contrib main non-free non-free-firmware
+
+deb https://deb.debian.org/debian/ trixie-updates contrib main non-free non-free-firmware
+# deb-src https://deb.debian.org/debian/ trixie-updates contrib main non-free non-free-firmware
+
+deb https://deb.debian.org/debian/ trixie-proposed-updates contrib main non-free non-free-firmware
+# deb-src https://deb.debian.org/debian/ trixie-proposed-updates contrib main non-free non-free-firmware
+
+deb https://deb.debian.org/debian/ trixie-backports contrib main non-free non-free-firmware
+# deb-src https://deb.debian.org/debian/ trixie-backports contrib main non-free non-free-firmware
+
+deb https://security.debian.org/debian-security/ trixie-security contrib main non-free non-free-firmware
+# deb-src https://security.debian.org/debian-security/ trixie-security contrib main non-free non-free-firmware

roles/common/tasks/main.yml

@@ -4,6 +4,27 @@
     update_cache: true
     cache_valid_time: 3600
 
+- name: Déployer /etc/apt/sources.list
+  ansible.builtin.copy:
+    src: files/sources.list
+    dest: /etc/apt/sources.list
+    owner: root
+    group: root
+    mode: '0644'
+    backup: yes
+  notify: apt update
+
+- name: Mettre à jour le cache APT
+  ansible.builtin.apt:
+    update_cache: yes
+  when: apt_update_cache
+
+- name: Mettre à jour tous les paquets
+  ansible.builtin.apt:
+    upgrade: dist
+  when: apt_upgrade
+
+
 - name: Paquets de base
   ansible.builtin.apt:
     name: