install from the 26.04 archive instead of third-party sources

- rpi-base: log2ram from the archive, drop the azlux repo (which still
  pointed at debian buster)
- aws-s3-backup: apt awscli (v2) instead of pip v1; drop boto3, nothing
  used it
- scrypted, koreader-sync: docker.io and docker-compose-v2 instead of
  the docker.com repo pinned to noble; the docker-ce removal lives in
  cleanup-third-party.yaml since the packages collide on files
- miniflux: the archive package with a dbconfig preseed; drops the
  github binary download and the bundled unit
- prometheus/client: note the nginx and postgres exporters are in apt
- dendrite/build, nostr/build: unversioned golang-go instead of pinned
  golang-1.21-go and a hand symlink that shadowed the real go

1 files changed, 15 insertions, 19 deletions

diff --git a/miniflux/tasks/main.yaml b/miniflux/tasks/main.yaml
index ffa6d0f..333bef9 100644
--- a/miniflux/tasks/main.yaml
+++ b/miniflux/tasks/main.yaml
@@ -1,26 +1,29 @@
 ---
 
-- name: add miniflux user
+# The package's dbconfig-common hook would create its own database; preseed
+# it off since this role manages the db and config itself.
+- name: preseed dbconfig to skip the package db setup
   become: yes
-  user: name="miniflux" shell="/bin/false" system="yes" create_home="no"
+  debconf:
+    name: "miniflux"
+    question: "miniflux/dbconfig-install"
+    vtype: "boolean"
+    value: "false"
 
-- name: download miniflux
+# The package creates the miniflux user and ships the systemd unit, which
+# runs /usr/bin/miniflux -c /etc/miniflux/miniflux.conf as user miniflux.
+- name: install miniflux
   become: yes
-  get_url:
-    url: "{{miniflux_url}}"
-    dest: "/usr/local/bin/miniflux"
-    owner: "root"
-    group: "root"
-    mode: "0600"
+  apt: name="miniflux"
 
 - name: configure miniflux
   become: yes
   template:
     src: "miniflux.conf.j2"
-    dest: "/etc/miniflux.conf"
+    dest: "/etc/miniflux/miniflux.conf"
     owner: "root"
-    group: "root"
-    mode: "0600"
+    group: "miniflux"
+    mode: "0640"
   notify: restart miniflux service
   no_log: true
 
@@ -40,13 +43,6 @@
   changed_when: false
   no_log: true
 
-- name: install systemd service
-  become: yes
-  copy:
-    src: "miniflux.service"
-    dest: "/lib/systemd/system/miniflux.service"
-  notify: restart miniflux service
-
 - name: ensure service is started
   become: yes
   systemd: name="miniflux.service" enabled="yes" state="started"