Fixes to the oonidata role setup

ansible/inventory

@@ -4,3 +4,4 @@ openvpn-server1.ooni.io
 # This requires manual setup of ~/.ssh/config
 #codesign-box
 data.ooni.org
+oonidatatest.ooni.nu

ansible/playbook-bootstrap.yml

@@ -0,0 +1,7 @@
+# This playbook is to be run on hosts that don't support bootstrapping the base
+# OS setup with something other than ansible (eg. cloud-init)
+- name: Ensure ssh_users are synched on all hosts
+  hosts: all
+  remote_user: root
+  roles:
+    - ssh_users

ansible/playbook.yml

@@ -36,6 +36,12 @@
   roles:
     - ssh_users
 
+- name: Deploy oonidata hosts
+  hosts: oonidatatest.ooni.nu
+  become: true
+  roles:
+    - oonidata
+
 # commented out due to the fact it requires manual config of ~/.ssh/config
 #- name: Setup codesign box
 #  hosts: codesign-box

ansible/requirements.yml

@@ -1,3 +1,3 @@
 - src: willshersystems.sshd
 - src: nginxinc.nginx
-- src: geerlingguy.nginx
+- src: geerlingguy.certbot

ansible/roles/miniconda/tasks/install.yml

@@ -14,7 +14,6 @@
     mode: "0700"
 
 - name: Run the miniconda installer
-  become_user: miniconda
   ansible.builtin.shell: |
     bash {{ miniconda_install_dir }}/miniconda.sh -b -u -p {{ miniconda_install_dir }}
 

ansible/roles/miniconda/tasks/main.yml

@@ -4,14 +4,7 @@
     path: "{{ miniconda_install_dir }}/bin/conda"
   register: miniconda_bin
 
-- name: Create miniconda user
-  become: yes
-  ansible.builtin.user:
-    name: miniconda
-    create_home: no
-
 - include_tasks: install.yml
-  become: yes
   when: not miniconda_bin.stat.exists
 
 - name: "install conda packages"

ansible/roles/oonidata/meta/main.yml

@@ -1,5 +1,3 @@
 dependencies:
   - role: miniconda
-    vars:
-      miniconda_install_dir: "{{ miniconda_install_dir }}"
   - role: nginx

ansible/roles/oonidata/tasks/main.yml

@@ -1,12 +1,12 @@
 ---
 - include_tasks: jupyterhub.yml
-  become: yes
 
-- include_role: geerlingguy.nginx
+- include_role:
+    name: geerlingguy.certbot
   vars:
     certbot_admin_email: [email protected]
     certbot_create_if_missing: true
     certbot_create_standalone_stop_services: []
     certbot_certs:
       - domains:
-          - {{ inventory_name }}
+          - "{{ inventory_name }}"