install from the 26.04 archive instead of third-party sources

- rpi-base: log2ram from the archive, drop the azlux repo (which still
  pointed at debian buster)
- aws-s3-backup: apt awscli (v2) instead of pip v1; drop boto3, nothing
  used it
- scrypted, koreader-sync: docker.io and docker-compose-v2 instead of
  the docker.com repo pinned to noble; the docker-ce removal lives in
  cleanup-third-party.yaml since the packages collide on files
- miniflux: the archive package with a dbconfig preseed; drops the
  github binary download and the bundled unit
- prometheus/client: note the nginx and postgres exporters are in apt
- dendrite/build, nostr/build: unversioned golang-go instead of pinned
  golang-1.21-go and a hand symlink that shadowed the real go

3 files changed, 16 insertions, 37 deletions

diff --git a/miniflux/defaults/main.yaml b/miniflux/defaults/main.yaml
index 17788ef..67fa001 100644
--- a/miniflux/defaults/main.yaml
+++ b/miniflux/defaults/main.yaml
@@ -1,8 +1,4 @@
 ---
 
 miniflux_port: "8555"
-# miniflux_admin_pass: — required, set in host_vars
-miniflux_arch: "arm64"
-# https://github.com/miniflux/miniflux/releases
-miniflux_version: "2.2.18"
-miniflux_url: "https://github.com/miniflux/miniflux/releases/download/{{miniflux_version}}/miniflux-linux-{{miniflux_arch}}"
+# miniflux_admin_pass: required, set in host_vars
diff --git a/miniflux/files/miniflux.service b/miniflux/files/miniflux.service
deleted file mode 100644
index 7a21748..0000000
--- a/miniflux/files/miniflux.service
+++ /dev/null
@@ -1,13 +0,0 @@
-[Unit]
-Description=Miniflux Feed Reader
-After=network.target postgresql.service
-
-[Service]
-Type=simple
-EnvironmentFile=/etc/miniflux.conf
-User=miniflux
-ExecStart=/usr/local/bin/miniflux
-Restart=always
-
-[Install]
-WantedBy=multi-user.target
diff --git a/miniflux/tasks/main.yaml b/miniflux/tasks/main.yaml
index ffa6d0f..333bef9 100644
--- a/miniflux/tasks/main.yaml
+++ b/miniflux/tasks/main.yaml
@@ -1,26 +1,29 @@
 ---
 
-- name: add miniflux user
+# The package's dbconfig-common hook would create its own database; preseed
+# it off since this role manages the db and config itself.
+- name: preseed dbconfig to skip the package db setup
   become: yes
-  user: name="miniflux" shell="/bin/false" system="yes" create_home="no"
+  debconf:
+    name: "miniflux"
+    question: "miniflux/dbconfig-install"
+    vtype: "boolean"
+    value: "false"
 
-- name: download miniflux
+# The package creates the miniflux user and ships the systemd unit, which
+# runs /usr/bin/miniflux -c /etc/miniflux/miniflux.conf as user miniflux.
+- name: install miniflux
   become: yes
-  get_url:
-    url: "{{miniflux_url}}"
-    dest: "/usr/local/bin/miniflux"
-    owner: "root"
-    group: "root"
-    mode: "0600"
+  apt: name="miniflux"
 
 - name: configure miniflux
   become: yes
   template:
     src: "miniflux.conf.j2"
-    dest: "/etc/miniflux.conf"
+    dest: "/etc/miniflux/miniflux.conf"
     owner: "root"
-    group: "root"
-    mode: "0600"
+    group: "miniflux"
+    mode: "0640"
   notify: restart miniflux service
   no_log: true
 
@@ -40,13 +43,6 @@
   changed_when: false
   no_log: true
 
-- name: install systemd service
-  become: yes
-  copy:
-    src: "miniflux.service"
-    dest: "/lib/systemd/system/miniflux.service"
-  notify: restart miniflux service
-
 - name: ensure service is started
   become: yes
   systemd: name="miniflux.service" enabled="yes" state="started"