Only update packages indexes if the cache is 1 hour old

I have added cache_valid_time=3600 for the first task in each
tag that could be possibly running apt-related commands. For ex,
the "nginx" tag is also in the "packages" tag, but sometimes you
run the nginx tag by itself (perhaps repeatadely), so you'd want
to limit the update unless the cache was 1 hour old

roles/common/tasks/iptables_Debian.yml

@@ -1,7 +1,7 @@
 ---
 - name: Install firewalld and deps
   when: ansible_distribution_major_version == '8'
-  apt: pkg={{ item }} state=latest
+  apt: pkg={{ item }} state=latest update_cache=yes cache_valid_time=3600
   with_items:
     - firewalld
     - tidy

roles/common/tasks/iptables_Ubuntu.yml

@@ -1,7 +1,7 @@
 ---
 - name: Install iptables-persistent
   when: ansible_distribution_version == '14.04'
-  apt: pkg=iptables-persistent update_cache=yes
+  apt: pkg=iptables-persistent update_cache=yes cache_valid_time=3600
   tags: packages
 
 - name: Copy /etc/iptables/rules.v4

roles/common/tasks/packages_Debian.yml

@@ -3,7 +3,7 @@
   template: src=sources.list.j2 dest=/etc/apt/sources.list owner=root group=root mode=0644
 
 - name: Install base packages
-  apt: name={{ item }} update_cache=yes
+  apt: name={{ item }} update_cache=yes cache_valid_time=3600
   with_items:
     - git
     - tmux

roles/common/tasks/packages_Ubuntu.yml

@@ -7,7 +7,7 @@
   when: ansible_distribution_version == '14.04'
 
 - name: Upgrade base OS
-  apt: upgrade=dist update_cache=yes
+  apt: upgrade=dist update_cache=yes cache_valid_time=3600
 
 - name: Install base packages
   apt: pkg={{ item }}