personal_infra/ansible/services/lnbits/deploy_lnbits_playbook.yml

- name: Deploy LNBits with Poetry and configure Caddy reverse proxy
  hosts: edge
  become: yes
  vars_files:
    - ./lnbits_vars.yml
  vars:
    lnbits_subdomain: "{{ subdomains.lnbits }}"
    lnbits_domain: "{{ lnbits_subdomain }}.{{ root_domain }}"

  tasks:
    - name: Create lnbits directory
      file:
        path: "{{ lnbits_dir }}"
        state: directory
        owner: "{{ ansible_user }}"
        group: "{{ ansible_user }}"
        mode: '0755'

    - name: Install required system packages
      apt:
        name:
          - python3
          - python3-pip
          - python3-venv
          - python3-dev
          - git
          - curl
          - pkg-config
          - build-essential
          - libsecp256k1-dev
          - libffi-dev
          - libgmp-dev
          - libpq-dev
          - automake
          - autoconf
          - libtool
          - m4
          - gawk
        state: present
        update_cache: yes

    - name: Install uv packaging tool
      shell: |
        curl -LsSf https://astral.sh/uv/install.sh | sh
      args:
        creates: "/home/{{ ansible_user }}/.local/bin/uv"
      become: yes
      become_user: "{{ ansible_user }}"
      environment:
        HOME: "/home/{{ ansible_user }}"

    - name: Clone LNBits repository
      git:
        repo: https://github.com/lnbits/lnbits.git
        dest: "{{ lnbits_dir }}/lnbits"
        version: "v1.3.1"
        accept_hostkey: yes

    - name: Change ownership of LNBits directory to user
      file:
        path: "{{ lnbits_dir }}/lnbits"
        owner: "{{ ansible_user }}"
        group: "{{ ansible_user }}"
        recurse: yes

    - name: Install LNBits dependencies with uv (Python 3.12)
      command: /home/{{ ansible_user }}/.local/bin/uv sync --python 3.12 --all-extras --no-dev
      args:
        chdir: "{{ lnbits_dir }}/lnbits"
      become: yes
      become_user: "{{ ansible_user }}"
      environment:
        HOME: "/home/{{ ansible_user }}"
        PATH: "/home/{{ ansible_user }}/.local/bin:/usr/local/bin:/usr/bin:/bin"
        SECP_BUNDLED: "0"
        PKG_CONFIG_PATH: "/usr/lib/x86_64-linux-gnu/pkgconfig"
        ACLOCAL: "aclocal"
        AUTOMAKE: "automake"
    
    - name: Copy .env.example to .env
      copy:
        src: "{{ lnbits_dir }}/lnbits/.env.example"
        dest: "{{ lnbits_dir }}/lnbits/.env"
        remote_src: yes
        owner: "{{ ansible_user }}"
        group: "{{ ansible_user }}"
        mode: '0644'
        # Seed a fresh install only. Without this every re-run replaced the real
        # .env (AUTH_SECRET_KEY and all) with the example, logging every user
        # out - and would have clobbered a restored one.
        force: false


    - name: Configure LNBits environment variables
      lineinfile:
        path: "{{ lnbits_dir }}/lnbits/.env"
        regexp: "^{{ item.key }}="
        line: "{{ item.key }}={{ item.value }}"
        state: present
      loop:
        - key: "LNBITS_BACKEND_WALLET_CLASS"
          value: "FakeWallet"
        - key: "LNBITS_ADMIN_UI"
          value: "true"
        - key: "HOST"
          value: "0.0.0.0"
        - key: "PORT"
          value: "{{ lnbits_port }}"
        - key: "LNBITS_DATA_FOLDER"
          value: "{{ lnbits_data_dir }}"
        - key: "LNBITS_EXTENSIONS_PATH"
          value: "{{ lnbits_data_dir }}/extensions"

    - name: Create systemd service file for LNBits
      copy:
        dest: /etc/systemd/system/lnbits.service
        content: |
          [Unit]
          Description=LNBits
          After=network.target

          [Service]
          Type=simple
          User={{ ansible_user }}
          WorkingDirectory={{ lnbits_dir }}/lnbits
          ExecStart=/home/{{ ansible_user }}/.local/bin/uv run --python 3.12 lnbits
          Restart=always
          RestartSec=30
          Environment=PYTHONUNBUFFERED=1
          Environment="PATH=/home/{{ ansible_user }}/.local/bin:/usr/local/bin:/usr/bin:/bin"
          Environment=SECP_BUNDLED=0

          [Install]
          WantedBy=multi-user.target
        owner: "{{ ansible_user }}"
        group: "{{ ansible_user }}"
        mode: '0644'

    - name: Reload systemd
      systemd:
        daemon_reload: yes

    - name: Enable and start LNBits service
      systemd:
        name: lnbits
        enabled: yes
        state: started

    - name: Publish LNBits through Caddy
      ansible.builtin.include_role:
        name: caddy_site
      vars:
        caddy_site_name: lnbits
        caddy_site_domain: "{{ lnbits_domain }}"
        caddy_site_upstream: "localhost:{{ lnbits_port }}"
        caddy_site_headers_up:
          X-Forwarded-Host: "{{ lnbits_domain }}"