luke/ansible-roles/mattertimesync/build/defaults, branch main Ansible roles for nth.io infrastructure https://src.nth.io/luke/ansible-roles/atom?h=main 2026-07-26T21:05:40+00:00 build roles: stage checkouts + artifacts under build_work_dir 2026-07-26T21:05:40+00:00 Luke Hoersten luke@hoersten.org 2026-07-26T21:05:40+00:00 urn:sha1:a173d5c8f149b4dde505fd4ab5257fb4cbc6911e Move every build role's working dir off /tmp (the SD card) to {{build_work_dir}}, which the playbook points at the SSD on the build host. nostr and pleroma stage their artifacts inside their own build dirs so the shared work dir can't collide, while preserving the archive top-level names (relayer, release) that the server roles depend on. mattertimesync: add build + server roles 2026-07-26T16:49:11+00:00 Luke Hoersten luke@hoersten.org 2026-07-26T16:49:11+00:00 urn:sha1:1566ed593907c829827237aad924c3f527723218 Build role compiles the tagged source on the build host (npm ci + npm run bundle) into a versioned mattertimesync-<ver>.tar.gz in build_srv_dir. Server role installs the single bundled .mjs, creates the mattertimesync service user and a 0700 storage dir for the Matter fabric keys, templates config.json, and runs a hardened oneshot sync via a systemd timer. Both roles depend on the nodejs role for Node >=20.