music/trollibox: Run as a distinct user

roles/music/defaults/main.yaml

@@ -1,6 +1,7 @@
 music_audio_user: audio
 music_audio_group: audio
 music_librespot_user: librespot
+music_trollibox_user: trollibox
 
 music_pulse_server: /tmp/pipewire-pulse-socket
 

roles/music/handlers/main.yaml

@@ -8,7 +8,7 @@
     state: restarted
     daemon_reload: true
 
-- name: Restart trollibox
+- name: restart trollibox
   ansible.builtin.systemd:
     name: trollibox
     state: restarted

roles/music/tasks/trollibox.yaml

@@ -1,4 +1,10 @@
 ---
+- name: Create trollibox user
+  user:
+    name: "{{ music_trollibox_user }}"
+    system: true
+    home: /var/lib/trollibox
+
 - name: Install Trollibox config
   ansible.builtin.template:
     src: trollibox.yaml
@@ -6,27 +12,29 @@
     owner: root
     group: root
     mode: "0644"
-  notify: Restart trollibox
+  notify: restart trollibox
 
 - name: Get latest Trollibox version from Github API
-  ansible.builtin.get_url:
+  uri:
     url: "https://api.github.com/repos/polyfloyd/trollibox/releases/latest"
-    dest: "/tmp/_ansible_trollibox_latest_release.json"
+    return_content: true
+  register: response
+  changed_when: false
+  check_mode: false
+  failed_when: "response is failed or 'json' not in response"
 
-- name: Get download url
+- name: Format trollibox latest version
-  ansible.builtin.shell:
+  set_fact:
-    cmd: cat /tmp/_ansible_trollibox_latest_release.json | jq .assets[] | select(.name
+    trollibox_version: "{{ response['json']['tag_name'] | trim('v') }}"
-      | contains("linux-amd64")) | .browser_download_url -r
-  register: "trollibox_download_url"
 
 - name: Download Trollibox
   ansible.builtin.unarchive:
-    src: "{{ trollibox_download_url.stdout }}"
+    src: "https://github.com/polyfloyd/trollibox/releases/download/v{{ trollibox_version }}/trollibox-x86_64-unknown-linux-gnu.tar.gz"
     remote_src: yes
     dest: /usr/local/bin
     include: [ trollibox ]
     mode: "0755"
-  notify: Restart trollibox
+  notify: restart trollibox
 
 - name: Install service file
   ansible.builtin.template:
@@ -35,7 +43,7 @@
     owner: root
     group: root
     mode: "0644"
-  notify: Restart trollibox
+  notify: restart trollibox
 
 - name: Enable Trollibox
   ansible.builtin.systemd:

roles/music/templates/trollibox.service

@@ -10,8 +10,7 @@ Type=simple
 Restart=always
 RestartSec=2s
 ExecStart=/usr/local/bin/trollibox -conf /etc/trollibox.yaml
-User={{ music_audio_user }}
+User={{ music_trollibox_user }}
-Group={{ music_audio_user }}
 
 [Install]
 WantedBy=multi-user.target