mosquitto: Initial version of role

roles/mosquitto/tasks/main.yml

@@ -0,0 +1,58 @@
+---
+- name: install packages
+  ansible.builtin.package:
+    name: mosquitto
+    state: installed
+
+- name: add mosquitto to hostkey group
+  ansible.builtin.user:
+    name: _mosquitto
+    groups: hostkey
+    append: true
+  notify: restart mosquitto
+
+- name: create include directory for config
+  ansible.builtin.file:
+    path: /etc/mosquitto/conf.d
+    state: directory
+    mode: 0750
+    owner: root
+    group: _mosquitto
+
+- name: include extra configs
+  ansible.builtin.lineinfile:
+    path: /etc/mosquitto/mosquitto.conf
+    line: include_dir /etc/mosquitto/conf.d
+    regexp: "^#?include_dir( .*)?$"
+  notify: restart mosquitto
+
+- name: create custom config
+  ansible.builtin.template:
+    dest: /etc/mosquitto/conf.d/local.conf
+    src: mosquitto.conf.j2
+    mode: 0640
+    owner: root
+    group: _mosquitto
+  notify: restart mosquitto
+
+- name: copy acl file
+  ansible.builtin.copy:
+    dest: /etc/mosquitto/acl.conf
+    src: "{{ ansible_private }}/files/mosquitto/acl.conf"
+    mode: 0640
+    owner: root
+    group: _mosquitto
+
+- name: copy passwd file
+  ansible.builtin.copy:
+    dest: /etc/mosquitto/passwd
+    src: "{{ ansible_private }}/files/mosquitto/acl.conf"
+    mode: 0640
+    owner: root
+    group: _mosquitto
+
+- name: enable service
+  ansible.builtin.service:
+    name: mosquitto
+    enabled: true
+    state: started