disable new docker_proxy vars by default and document reasonable defa…

…ults (re-using the proxy/ies in ansible_env)

README.md

@@ -77,6 +77,15 @@ apt_repository: deb https://apt.dockerproject.org/repo {{ ansible_lsb.id|lower }
 #  -H tcp://0.0.0.0:2375
 #  --log-level=debug
 docker_opts: ""
+
+# configurable proxies: a reasonable default is to re-use the proxy from ansible_env:
+# docker_http_proxy: "{{ ansible_env.http_proxy|default('') }}"
+# Notes:
+# if docker_http_proxy==""   the role sets HTTP_PROXY="" (useful to 'empty' existing ENV var)
+# if docker_http_proxy is undefined the role will not set/modify any ENV vars
+docker_http_proxy:
+docker_https_proxy:
+
 # List of users to be added to 'docker' system group (disabled by default)
 # SECURITY WARNING: 
 # Be aware that granted users can easily get full root access on the docker host system!

defaults/main.yml

@@ -25,6 +25,15 @@ docker_opts: ""
 # SECURITY WARNING: 
 # Be aware that granted users can easily get full root access on the docker host system!
 docker_group_members: []
+
+# configurable proxies: a reasonable default is to re-use the proxy from ansible_env:
+# docker_http_proxy: "{{ ansible_env.http_proxy|default('') }}"
+# Notes:
+# if docker_http_proxy==""   the role sets HTTP_PROXY="" (useful to 'empty' existing ENV var)
+# if docker_http_proxy is undefined the role will not set/modify any ENV vars
+docker_http_proxy:
+docker_https_proxy:
+
 # Flags for whether to install pip packages
 pip_install_pip: true
 pip_install_setuptools: true

tasks/main.yml

@@ -202,24 +202,24 @@
     line: "DEFAULT_FORWARD_POLICY=\"ACCEPT\""
   when: ufw_default_exists.stat.exists
 
-- name: Set docker proxy settings if http_proxy env. var is defined
+- name: Set docker HTTP_PROXY if docker_http_proxy defined
   lineinfile:
     dest: /etc/default/docker
     regexp: "^export HTTP_PROXY="
-    line: "export HTTP_PROXY=\"{{ansible_env.http_proxy}}\""
+    line: "export HTTP_PROXY=\"{{docker_http_proxy}}\""
     state: present
-  when: ansible_env.http_proxy is defined
+  when: docker_http_proxy is defined and (docker_http_proxy != None)
   notify:
     - Restart docker
   tags: proxy
 
-- name: Set docker proxy settings if https_proxy env. var is defined
+- name: Set docker HTTPS_PROXY if docker_https_proxy defined
   lineinfile:
     dest: /etc/default/docker
     regexp: "^export HTTPS_PROXY="
-    line: "export HTTPS_PROXY=\"{{ansible_env.https_proxy}}\""
+    line: "export HTTPS_PROXY=\"{{docker_https_proxy}}\""
     state: present
-  when: ansible_env.https_proxy is defined
+  when: docker_https_proxy is defined and (docker_https_proxy != None)
   notify:
     - Restart docker
   tags: proxy