services: pass proxy and TLS env vars to launchd units

Author: Gaetan Trellu

README.md

@@ -33,6 +33,9 @@ sudo env OVOS_VENV_PYTHON=3.12 sh -c "$(curl -fsSL https://raw.githubusercontent
 
 # Speed up repeated runs by reusing cached artifacts (useful for debugging)
 sudo env REUSE_CACHED_ARTIFACTS=true sh -c "$(curl -fsSL https://raw.githubusercontent.com/OpenVoiceOS/ovos-installer/main/installer.sh)"
+
+# Forward proxy variables into generated launchd/systemd services
+sudo env HTTPS_PROXY=http://proxy.example:3128 HTTP_PROXY=http://proxy.example:3128 NO_PROXY=localhost,127.0.0.1 sh -c "$(curl -fsSL https://raw.githubusercontent.com/OpenVoiceOS/ovos-installer/main/installer.sh)"
 ```
 
 👉 Guide: [Howto - Begin your Open Voice OS journey with the OVOS installer](https://community.openconversational.ai/t/howto-begin-your-open-voice-os-journey-with-the-ovos-installer/14900)

ansible/roles/ovos_services/defaults/main.yml

@@ -37,6 +37,15 @@ ovos_services_launchd_user_lookup_environment:
   HOME: "{{ ovos_installer_user_home }}"
   LOGNAME: "{{ ovos_installer_user }}"
   USER: "{{ ovos_installer_user }}"
+# Allow launchd jobs to inherit network/proxy/TLS settings from installer env.
+ovos_services_launchd_extra_environment:
+  HTTP_PROXY: "{{ ansible_env.HTTP_PROXY | default(ansible_env.http_proxy | default('')) }}"
+  HTTPS_PROXY: "{{ ansible_env.HTTPS_PROXY | default(ansible_env.https_proxy | default('')) }}"
+  ALL_PROXY: "{{ ansible_env.ALL_PROXY | default(ansible_env.all_proxy | default('')) }}"
+  NO_PROXY: "{{ ansible_env.NO_PROXY | default(ansible_env.no_proxy | default('')) }}"
+  REQUESTS_CA_BUNDLE: "{{ ansible_env.REQUESTS_CA_BUNDLE | default('') }}"
+  SSL_CERT_FILE: "{{ ansible_env.SSL_CERT_FILE | default('') }}"
+  SSL_CERT_DIR: "{{ ansible_env.SSL_CERT_DIR | default('') }}"
 ovos_services_messagebus_target_arch: >-
   {{ 'aarch64' if ansible_facts.architecture in ['aarch64', 'arm64']
      else 'x86_64' if ansible_facts.architecture in ['x86_64', 'amd64']

ansible/roles/ovos_services/templates/launchd/service.plist.j2

@@ -29,6 +29,12 @@
       <string>{{ '/var/root/.config' if item.scope == 'system' else ovos_installer_user_home + '/.config' }}</string>
       <key>XDG_CACHE_HOME</key>
       <string>{{ '/var/root/.cache' if item.scope == 'system' else ovos_installer_user_home + '/.cache' }}</string>
+{% for env_key, env_value in (ovos_services_launchd_extra_environment | default({})).items() %}
+{% if (env_value | string | length) > 0 %}
+      <key>{{ env_key }}</key>
+      <string>{{ env_value }}</string>
+{% endif %}
+{% endfor %}
     </dict>
 
     <key>RunAtLoad</key>