Move rclone to own role

roles/rclone/tasks/main.yml

@@ -0,0 +1,21 @@
+---
+- name: install packages
+  package:
+    name: rclone
+    state: installed
+
+- name: create config directory
+  file:
+    path: /etc/rclone
+    state: directory
+    mode: 0755
+    owner: root
+    group: "{{ ansible_wheel }}"
+
+- name: create host config
+  template:
+    dest: /etc/rclone/rclone.conf
+    src: rclone.conf.j2
+    mode: 0644
+    owner: root
+    group: "{{ ansible_wheel }}"

roles/rclone/templates/rclone.conf.j2

@@ -0,0 +1,10 @@
+ {{ ansible_managed }}
+{% for host in groups[hostgroup] %}
+
+[{{ host.split('.')[0] }}]
+type = sftp
+host = {{ host }}
+user = {{ remote_user }}
+key_file = {{ private_key | default('~/.ssh/id_ed25519') }}
+known_hosts_file = /etc/ssh/ssh_known_hosts                                    
+{% endfor %}

roles/web-logs/tasks/main.yml

@@ -1,11 +1,4 @@
 ---
-- name: install packages
-  package:
-    name: "{{ item }}"
-    state: installed
-  with_items:
-    - rclone
-
 - name: create logsync group
   group:
     name: logsync
@@ -21,6 +14,12 @@
     shell: /sbin/nologin
     system: true
 
+- import_role:
+    name: rclone
+  vars:
+    remote_user: logsync
+    hostgroup: webservers
+
 - name: create data directories
   file:
     path: "{{ item }}"
@@ -47,22 +46,6 @@
     owner: root
     group: "{{ ansible_wheel }}"
 
-- name: create config directory
-  file:
-    path: /etc/rclone
-    state: directory
-    mode: 0755
-    owner: root
-    group: "{{ ansible_wheel }}"
-
-- name: create host config
-  template:
-    dest: /etc/rclone/rclone.conf
-    src: rclone.conf.j2
-    mode: 0644
-    owner: root
-    group: "{{ ansible_wheel }}"
-
 - name: add log sync cron job
   cron:
     name: sync-http-logs