homeassistant: Initial version of role

roles/homeassistant/tasks/main.yml

@@ -0,0 +1,71 @@
+---
+- name: Create group
+  ansible.builtin.group:
+    name: ha
+
+- name: Create user
+  ansible.builtin.user:
+    name: ha
+    comment: Podman HomeAssistant
+    group: ha
+    shell: /sbin/nologin
+
+- name: Fix SELinux contexts from config directory
+  community.general.sefcontext:
+    path: /export/homeassistant(/.*)?
+    setype: container_file_t
+  when: ansible_selinux_python_present
+
+- name: Create config directory
+  ansible.builtin.file:
+    path: /export/homeassistant
+    state: directory
+    mode: 0700
+    owner: ha
+    group: ha
+    setype: _default
+
+- name: Link config directory
+  ansible.builtin.file:
+    dest: /srv/homeassistant
+    src: /export/homeassistant
+    state: link
+    owner: root
+    group: "{{ ansible_wheel }}"
+    follow: false
+
+- name: Copy authentication command
+  ansible.builtin.copy:
+    dest: /srv/homeassistant/auth-command.sh
+    src: auth-command.sh
+    mode: 0755
+    owner: root
+    group: "{{ ansible_wheel }}"
+    setype: _default
+
+- name: Create service file
+  ansible.builtin.template:
+    dest: /etc/systemd/system/homeassistant-container.service
+    src: homeassistant-container.service.j2
+    mode: 0644
+    owner: root
+    group: "{{ ansible_wheel }}"
+  notify: Restart homeassistant
+
+- name: Enable service
+  ansible.builtin.service:
+    name: homeassistant-container
+    state: started
+    enabled: true
+
+- name: Copy nginx config
+  ansible.builtin.copy:
+    dest: "/etc/nginx/conf.d/{{ inventory_hostname }}/homeassistant.conf"
+    content: |
+      location / {
+        proxy_pass http://127.0.0.1:8001;
+      }
+    mode: 0644
+    owner: root
+    group: "{{ ansible_wheel }}"
+  notify: Restart nginx