From 87517c6821ebe9d7a0d5c3fa3f16c8520a3a39e1 Mon Sep 17 00:00:00 2001
From: Rene Mewissen <rene@tantooine.myfirewall.org>
Date: Mon, 13 Mar 2023 12:13:09 +0100
Subject: [PATCH] do not run upgrades on database servers

---
 local.yml | 11 +++++++----
 1 file changed, 7 insertions(+), 4 deletions(-)

diff --git a/local.yml b/local.yml
index 8b1f6b5..f02b6f1 100644
--- a/local.yml
+++ b/local.yml
@@ -12,10 +12,6 @@
       apt: update_cache=yes
       changed_when: false
       when: ansible_distribution in ["Debian", "Ubuntu"]
-    - name: pre-run | upgrade system (debian, ubuntu, etc.)
-      apt: upgrade=dist
-      changed_when: false
-      when: ansible_distribution in ["Debian", "Ubuntu"]
     - name: pre-run | update pacman repository (arch)
       pacman: update_cache=yes
       changed_when: false
@@ -26,6 +22,13 @@
       when: ansible_distribution == 'Gentoo'
   ignore_errors: True
 
+- hosts: all:!database
+  pre_tasks:
+    - name: pre-run | upgrade system (debian, ubuntu, etc.)
+      apt: upgrade=dist
+      changed_when: false
+      when: ansible_distribution in ["Debian", "Ubuntu"]
+
 # run roles
 - hosts: all
   tags: base