luke/ansible-roles/mattertimesync, branch main

build roles: create build_work_dir and redirect caches per-role

2026-07-26T21:46:21+00:00

Each build role now creates build_work_dir itself and sets its own toolchain's cache env (GOPATH/GOCACHE/GOMODCACHE, CARGO_HOME, npm cache, MIX/HEX) on its build tasks, so the roles are self-contained instead of relying on a play-level environment and pre_task.

build roles: force real tarballs for single-file artifacts

2026-07-26T21:31:56+00:00

community.general.archive (>=10) compresses a lone file into a bare .gz instead of a tarball, so the mattertimesync/bin/nostr artifacts failed the server-side unarchive. Set force_archive: true so the archive module emits a real single-member .tar.gz, consistent with the multi-file dendrite/pleroma builds.

build roles: stage checkouts + artifacts under build_work_dir

2026-07-26T21:05:40+00:00

Move every build role's working dir off /tmp (the SD card) to {{build_work_dir}}, which the playbook points at the SSD on the build host. nostr and pleroma stage their artifacts inside their own build dirs so the shared work dir can't collide, while preserving the archive top-level names (relayer, release) that the server roles depend on.

mattertimesync: add build + server roles

2026-07-26T16:49:11+00:00

Build role compiles the tagged source on the build host (npm ci + npm run bundle) into a versioned mattertimesync-.tar.gz in build_srv_dir. Server role installs the single bundled .mjs, creates the mattertimesync service user and a 0700 storage dir for the Matter fabric keys, templates config.json, and runs a hardened oneshot sync via a systemd timer. Both roles depend on the nodejs role for Node >=20.