bank: Set up revbank-deposit

roles/bank/handlers/main.yaml

@@ -1,3 +1,9 @@
 ---
 - ansible.builtin.import_tasks:
     file: ../../common/handlers/main.yaml
+
+- name: Restart revbank-deposit
+  ansible.builtin.systemd:
+    name: revbank-deposit
+    state: restarted
+    daemon_reload: true

roles/bank/tasks/main.yaml

@@ -6,3 +6,7 @@
 - tags: [ bank, bank_revbank ]
   ansible.builtin.import_tasks:
     file: revbank.yaml
+
+- tags: [ bank, bank_revbank_deposit ]
+  ansible.builtin.import_tasks:
+    file: revbank-deposit.yaml

roles/bank/tasks/revbank-deposit.yaml

@@ -0,0 +1,47 @@
+---
+- name: Clone source
+  ansible.builtin.git:
+    repo: https://git.bitlair.nl/bitlair/revbank-deposit.git
+    version: main
+    dest: /usr/local/lib/revbank-deposit
+    accept_hostkey: yes
+  notify: Restart revbank-deposit
+
+- name: Install apt dependencies
+  ansible.builtin.apt:
+    name:
+      - python3-pip
+      - python3-virtualenv
+
+- name: Install pip dependencies
+  ansible.builtin.pip:
+    chdir: /usr/local/lib/revbank-deposit
+    virtualenv: .venv
+    requirements: requirements.txt
+
+- name: Configure revbank-deposit
+  ansible.builtin.template:
+    src: revbank-deposit.conf
+    dest: /etc/revbank-deposit.conf
+    owner: root
+    group: root
+    mode: 0600
+  notify: Restart revbank-deposit
+
+- name: Install revbank-deposit service
+  ansible.builtin.template:
+    src: revbank-deposit.service
+    dest: /etc/systemd/system/revbank-deposit.service
+    owner: root
+    group: root
+    mode: 0644
+  notify: Restart revbank-deposit
+
+- name: Start revbank-deposit
+  ansible.builtin.systemd:
+    daemon_reload: true
+    name: revbank-deposit
+    state: started
+    enabled: true
+
+- meta: flush_handlers

roles/bank/templates/revbank-deposit.conf

@@ -0,0 +1,4 @@
+# {{ ansible_managed }}
+
+PUBLIC_URL=https://{{ deposit_hostname }}
+MOLLIE_API_KEY={{ lookup('passwordstore', 'mollie subkey=apikey') }}

roles/bank/templates/revbank-deposit.service

@@ -0,0 +1,18 @@
+# {{ ansible_managed }}
+
+[Unit]
+Description=Revbank Deposit
+After=network.target
+
+[Service]
+Type=simple
+Restart=on-failure
+RestartSec=10s
+ExecStart=/usr/local/lib/revbank-deposit/.venv/bin/fastapi run main.py --host 127.0.0.1
+WorkingDirectory=/usr/local/lib/revbank-deposit
+EnvironmentFile=/etc/revbank-deposit.conf
+DynamicUser=true
+
+[Install]
+WantedBy=multi-user.target
+