add nginx, sshd, ssl roles

roles/xray-core/tasks/configure.yml

@@ -0,0 +1,36 @@
+---
+- name: ensure /opt/xray-core/config exists
+  ansible.builtin.file:
+    path: /opt/xray-core/config
+    state: directory
+    owner: xray-core
+    group: xray-core
+    mode: "0755"
+
+- name: ensure /var/log/xray-core exists
+  ansible.builtin.file:
+    path: /var/log/xray-core
+    state: directory
+    owner: xray-core
+    group: xray-core
+    mode: "0755"
+
+- name: deploy xray-core static config
+  ansible.builtin.copy:
+    src: "{{ item }}"
+    dest: "/opt/xray-core/config/{{ item | basename }}"
+    owner: xray-core
+    group: xray-core
+    mode: "0644"
+  loop: "{{ query('ansible.builtin.fileglob', role_path + '/files/' + inventory_hostname + '/*.jsonc') }}"
+  notify: restart xray-core
+
+- name: render xray-core dynamic config
+  ansible.builtin.template:
+    src: "{{ item }}"
+    dest: "/opt/xray-core/config/{{ item | basename | regex_replace('\\.j2$', '') }}"
+    owner: xray-core
+    group: xray-core
+    mode: "0644"
+  loop: "{{ query('ansible.builtin.fileglob', role_path + '/templates/' + inventory_hostname + '/*.jsonc.j2') }}"
+  notify: restart xray-core

roles/xray-core/tasks/install.yml

@@ -10,6 +10,7 @@
     return_content: yes
   register: xray_release
   run_once: true
+  check_mode: false
 
 - name: set current xray-core version
   ansible.builtin.set_fact:
@@ -25,6 +26,8 @@
 - name: ensure xray-core directory exists
   ansible.builtin.file:
     path: /opt/xray-core
+    owner: xray-core
+    group: xray-core
     state: directory
     mode: '0755'
 
@@ -33,10 +36,12 @@
     src: "{{ xray_asset_url }}"
     dest: /opt/xray-core
     remote_src: yes
+    owner: xray-core
+    group: xray-core
   when: xray_version not in (xray_current_version.stdout | default(''))
 
 - name: deploy xray-core systemd service unit
   ansible.builtin.copy:
     src: xray-core.service
     dest: /etc/systemd/system/xray-core.service
-    mode: 755
+    mode: 0644

roles/xray-core/tasks/main.yml

@@ -1,3 +1,9 @@
 ---
+- name: include xray-core user
+  ansible.builtin.include_tasks: user.yml
+
 - name: include xray-core install
   ansible.builtin.include_tasks: install.yml
+
+- name: include xray-core configure
+  ansible.builtin.include_tasks: configure.yml

roles/xray-core/tasks/user.yml

@@ -0,0 +1,16 @@
+---
+- name: create xray-core system group
+  ansible.builtin.group:
+    name: xray-core
+    system: true
+    state: present
+
+- name: create xray-core system user
+  ansible.builtin.user:
+    name: xray-core
+    group: xray-core
+    system: true
+    shell: /usr/sbin/nologin
+    home: /opt/xray-core
+    create_home: false
+    state: present