Example of Manual Installation on Fedora with Ansible

[kulak]

Here is my Ansbile setup.

Role directory name is memos. All file paths are relative to memos role directory.

File defaults\main.yaml

Some additional parameters can be extracted, but I did not bother. For example, port, ip, user name, etc.

---
memos_version: 0.25.3
memos_url: "https://github.com/usememos/memos/releases/download/v{{memos_version}}/memos_v{{memos_version}}_linux_amd64.tar.gz"
memos_data_dir: /mnt/appdata/memos
memos_user_dir: /var/lib/memos

File tasks/main.yaml

# Memos Tasks
---

- name: download URL
  ansible.builtin.get_url:
    url: "{{ memos_url }}"
    dest: /tmp/memos-v{{memos_version}}.tar.gz
    mode: '0644'
  tags: [install,install-app]

- name: create extracted directory
  ansible.builtin.file:
    path: "/tmp/memos-v{{memos_version}}"
    state: directory
  tags: [install,install-app]

- name: "extract tarball to /tmp/memos-v{{memos_version}}"
  ansible.builtin.unarchive:
    src: "/tmp/memos-v{{ memos_version }}.tar.gz"
    dest: "/tmp/memos-v{{memos_version}}"
    remote_src: yes
  tags: [install,install-app]

- name: copy binary file
  ansible.builtin.copy:
    src: "/tmp/memos-v{{memos_version}}/memos"
    dest: /usr/local/bin/memos
    owner: root
    group: root
    mode: u=rwx,go=rx
    remote_src: yes
  tags: [install,install-app]

- name: remove extracted directory
  ansible.builtin.file:
    path: "/tmp/memos-v{{memos_version}}"
    state: absent
  tags: [install,install-app]

- name: memos group
  ansible.builtin.group:
    name: memos
    state: present
    system: yes
  tags: [install,install-user]

- name: memos user
  ansible.builtin.user:
    name: memos
    group: memos
    state: present
    home: "{{ memos_user_dir }}"
    system: yes
  tags: [install,install-user]

- name: create memos data directory
  ansible.builtin.file:
    path: "{{ memos_data_dir }}"
    state: directory
    group: "memos"
    owner: "memos"
    mode: 0755
  tags: [install,install-data]

- name: copy service file
  ansible.builtin.template:
    src: memos.service
    dest: /etc/systemd/system/memos.service
  register: "service"
  tags: [install,install-service]

- name: "daemon reload"
  ansible.builtin.systemd:
    daemon_reload: true
  when: service.changed
  tags: [install,install-service]

- name: restart memos
  ansible.builtin.systemd:
    name: "memos.service"
    state: "restarted"
  when: service.changed
  tags: [install,install-service]

- name: start memos
  ansible.builtin.systemd:
    name: "memos.service"
    state: "started"
    enabled: true
  tags: [install,install-service]

- name: configure firewall
  ansible.posix.firewalld:
    zone: internal
    port: 5230/tcp
    permanent: "true"
    state: enabled
    immediate: "true"
  tags: [install,config-firewall]

File templates/memos.service

[Unit]
Description=Memos
After=network.target

[Service]
Type=simple
User=memos
Group=memos
WorkingDirectory={{ memos_data_dir }}

Environment='MEMOS_MODE=prod'
Environment='MEMOS_ADDR=0.0.0.0'
Environment='MEMOS_PORT=5230'
Environment='MEMOS_DRIVER=sqlite'
Environment='MEMOS_DATA={{ memos_data_dir }}'

ExecStart=/usr/local/bin/memos
Restart=always
RestartSec=3
StandardOutput=journal
StandardError=journal

# Security settings
NoNewPrivileges=true
PrivateTmp=true
ProtectHome=true
ProtectSystem=strict
ReadWritePaths='{{ memos_data_dir }}'

[Install]
WantedBy=multi-user.target

run

Playbook Example

Playbook file is at the same level as roles directory.

Playbook file name hostname-memos.yaml content:

- name: install Memos
  hosts: YOUR_HOSTNAME
  become: "true"
  gather_facts: "false"

  roles:
  - role: memos

Run All Installation Tasks

ansible-playbook ./hostname-memos.yaml --tags=install

Run Individual Step

ansible-playbook ./hostname-memos.yaml --tags=config-firewall