infra/ansible/roles/services_runit/tasks/main.yml

---
- name: Enable base runit services
  tags: [services, packages]
  ansible.builtin.file:
    src: "/etc/sv/{{ item }}"
    dest: "/var/service/{{ item }}"
    state: link
  loop: "{{ enabled_services | default([]) }}"

- name: Enable host runit services
  tags: [services, packages]
  ansible.builtin.file:
    src: "/etc/sv/{{ item }}"
    dest: "/var/service/{{ item }}"
    state: link
  loop: "{{ host_enabled_services | default([]) }}"

- name: Define per-user runit services
  tags: [services, packages]
  ansible.builtin.set_fact:
    per_user_runit_services:
      - name: ollama
        template: ollama.run.j2
        state_dirs: []
      - name: ssh-agent
        template: ssh-agent.run.j2
        state_dirs:
          - path: "{{ user_home }}/.local/state/ssh-agent"
            mode: "0700"

- name: Ensure per-user runit directories exist
  tags: [services, packages]
  ansible.builtin.file:
    path: "{{ item.path }}"
    state: directory
    owner: "{{ username }}"
    group: "{{ user_group }}"
    mode: "{{ item.mode }}"
  loop:
    - path: "{{ user_home }}/.local/runit"
      mode: "0755"
    - path: "{{ user_home }}/.local/runit/current"
      mode: "0755"
    - path: "{{ user_home }}/.local/runit/sv"
      mode: "0755"
    - path: "{{ user_home }}/.local/state"
      mode: "0755"

- name: Ensure per-user runit service directories exist
  tags: [services, packages]
  ansible.builtin.file:
    path: "{{ user_home }}/.local/runit/sv/{{ item.name }}"
    state: directory
    owner: "{{ username }}"
    group: "{{ user_group }}"
    mode: "0755"
  loop: "{{ per_user_runit_services }}"
  loop_control:
    label: "{{ item.name }}"

- name: Ensure per-user runit service state directories exist
  tags: [services, packages]
  ansible.builtin.file:
    path: "{{ item.1.path }}"
    state: directory
    owner: "{{ username }}"
    group: "{{ user_group }}"
    mode: "{{ item.1.mode }}"
  loop: "{{ per_user_runit_services | subelements('state_dirs', skip_missing=True) }}"
  loop_control:
    label: "{{ item.1.path }}"

- name: Render per-user runit services
  tags: [services, packages]
  ansible.builtin.template:
    src: "{{ item.template }}"
    dest: "{{ user_home }}/.local/runit/sv/{{ item.name }}/run"
    owner: "{{ username }}"
    group: "{{ user_group }}"
    mode: "0755"
  loop: "{{ per_user_runit_services }}"
  loop_control:
    label: "{{ item.name }}"

- name: Enable per-user runit services
  tags: [services, packages]
  ansible.builtin.file:
    src: "../sv/{{ item.name }}"
    dest: "{{ user_home }}/.local/runit/current/{{ item.name }}"
    state: link
    owner: "{{ username }}"
    group: "{{ user_group }}"
  loop: "{{ per_user_runit_services }}"
  loop_control:
    label: "{{ item.name }}"

- name: Ensure per-user runsvdir service directory exists
  tags: [services, packages]
  ansible.builtin.file:
    path: "/etc/sv/runsvdir-{{ username }}"
    state: directory
    owner: root
    group: root
    mode: "0755"

- name: Render per-user runsvdir system service
  tags: [services, packages]
  ansible.builtin.template:
    src: runsvdir-user.run.j2
    dest: "/etc/sv/runsvdir-{{ username }}/run"
    owner: root
    group: root
    mode: "0755"

- name: Enable per-user runsvdir system service
  tags: [services, packages]
  ansible.builtin.file:
    src: "/etc/sv/runsvdir-{{ username }}"
    dest: "/var/service/runsvdir-{{ username }}"
    state: link