tor role setup

roles/ind/tor/tor-install.yml

@@ -0,0 +1,74 @@
+---
+- hosts: all
+  become: yes
+  remote_user: ansible
+  gather_facts: true
+
+  vars:
+
+  tasks:
+    - name: set-debcache.yml - Setup apt proxy debcache
+      import_tasks: ../../lib/set-debcache.yml
+
+    - name: Upgrade-packages.yml - update packages
+      import_tasks: ../../lib/upgrade-packages.yml
+    
+    - name: Install-docker.yml - setting up docker
+      import_tasks: ../../lib/install-docker.yml
+
+    - name: Setup-netbird.yml - setting up netbird mesh vpn
+      import_tasks: ../../lib/setup-netbird.yml
+
+    - name: setup-restic.yml - setup restic 
+      import_tasks: ../../lib/setup-restic.yml
+
+    - name: Create docker user
+      user:
+        name: docker
+        uid: 2006
+        group: docker
+        state: present
+        create_home: yes
+        home: /home/docker
+        shell: /bin/bash
+      
+    - name: Setup Service
+      copy:
+        dest: /etc/systemd/system/tor.service
+        content: |
+            [Unit]
+            Description=Tor service
+            Wants=network-online.target
+            Requires=docker.service
+            After=docker.service network.target network-online.target
+
+            [Service]
+            TimeoutStartSec=0
+            Restart=always
+            RestartSec=10s
+            ExecStartPre=/usr/bin/docker pull osminogin/tor-simple
+            ExecStart=/usr/bin/docker run --rm --name tor -p 127.0.0.1:9050:9050 osminogin/tor-simple
+            ExecStop=/usr/bin/docker stop tor
+
+            [Install]
+            WantedBy=multi-user.target
+        owner: root
+        group: root
+        mode: '0644'
+
+    - name: Write docker-compose.yml 
+      ansible.builtin.copy:
+        src: docker-compose.yml
+        dest: /home/docker/docker-compose.yml
+        owner: docker
+        group: docker
+        mode: u=rw,g=r,o=r
+
+    - name: Install Python Packages
+      apt:
+        name:
+          - python3-full
+          - python3-pip
+        state: present
+        update_cache: yes
+