Install Traefik from pinned release binary

Author: terion-labs

ansible/roles/traefik/defaults/main.yml

@@ -1 +1,2 @@
 terrarium_traefik_config_dir: /etc/traefik
+terrarium_traefik_version: v3.6.7

ansible/roles/traefik/handlers/main.yml

@@ -1,3 +1,7 @@
+- name: reload traefik systemd
+  ansible.builtin.systemd:
+    daemon_reload: true
+
 - name: restart traefik
   ansible.builtin.systemd:
     name: traefik

ansible/roles/traefik/tasks/main.yml

@@ -1,7 +1,38 @@
-- name: Install Traefik
-  ansible.builtin.apt:
-    name: traefik
-    state: present
+- name: Map Traefik release architecture
+  ansible.builtin.set_fact:
+    terrarium_traefik_arch: >-
+      {{
+        {
+          'x86_64': 'amd64',
+          'aarch64': 'arm64'
+        }[ansible_architecture]
+      }}
+
+- name: Download Traefik release archive
+  ansible.builtin.get_url:
+    url: "https://github.com/traefik/traefik/releases/download/{{ terrarium_traefik_version }}/traefik_{{ terrarium_traefik_version }}_linux_{{ terrarium_traefik_arch }}.tar.gz"
+    dest: "/tmp/traefik_{{ terrarium_traefik_version }}_linux_{{ terrarium_traefik_arch }}.tar.gz"
+    mode: "0644"
+
+- name: Extract Traefik binary
+  ansible.builtin.unarchive:
+    src: "/tmp/traefik_{{ terrarium_traefik_version }}_linux_{{ terrarium_traefik_arch }}.tar.gz"
+    dest: /tmp
+    remote_src: true
+
+- name: Install Traefik binary
+  ansible.builtin.copy:
+    src: /tmp/traefik
+    dest: /usr/local/bin/traefik
+    mode: "0755"
+    remote_src: true
+
+- name: Install Traefik systemd service
+  ansible.builtin.template:
+    src: traefik.service.j2
+    dest: /etc/systemd/system/traefik.service
+    mode: "0644"
+  notify: reload traefik systemd
 
 - name: Create Traefik directories
   ansible.builtin.file:
@@ -68,6 +99,7 @@
     name: traefik
     state: started
     enabled: true
+    daemon_reload: true
 
 - name: Run Traefik sync immediately
   ansible.builtin.command: /usr/local/bin/terrariumctl proxy sync

ansible/roles/traefik/templates/traefik.service.j2

@@ -0,0 +1,13 @@
+[Unit]
+Description=Traefik reverse proxy
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=simple
+ExecStart=/usr/local/bin/traefik --configFile={{ terrarium_traefik_config_dir }}/traefik.yml
+Restart=on-failure
+RestartSec=5s
+
+[Install]
+WantedBy=multi-user.target