Remove contrib and non free from VMs

base.yml

@@ -4,6 +4,9 @@
   vars:
     # Debian mirror on adm
     debian_mirror: http://mirror.adm.crans.org/debian
+    debian_components: |
+      main{% if ansible_system_vendor != 'QEMU' %} non-free{% endif %}
+    # TODO: non free should only be for SMTP and microcode on non VM/LXC
 
     # Backup password
     backuppc_rsyncd_passwd: "{{ vault_backuppc_rsyncd_passwd }}"

roles/debian-apt-sources/templates/apt/sources.list.j2

 # {{ ansible_managed }}
 
 # Mises à jour de sécurité
-deb     {{ debian_mirror }}-security {{ ansible_lsb.codename }}/updates main contrib non-free
+deb     {{ debian_mirror }}-security {{ ansible_lsb.codename }}/updates {{ debian_components }}
 
 # Dépôt classique
-deb     {{ debian_mirror }} {{ ansible_lsb.codename }} main contrib non-free
+deb     {{ debian_mirror }} {{ ansible_lsb.codename }} {{ debian_components }}
 
 # Dépôt pour mises à jour fréquentes (volatile)
-deb     {{ debian_mirror }} {{ ansible_lsb.codename }}-updates main contrib non-free
+deb     {{ debian_mirror }} {{ ansible_lsb.codename }}-updates {{ debian_components }}