Updated Traccar to run as non-root

.ansible/roles/common_server/vars/main.yaml

@@ -1,10 +1,14 @@
 server_packages:
+  - curl
   - git
   - haproxy
   - letsencrypt
   - lsof
   - net-tools
   - psmisc
+  - python-simplejson
+  - python-pip
+  - python3-pip
   - rsync
   - screen
   - telnet

.ansible/roles/traccar_server/tasks/main.yaml

@@ -1,15 +1,14 @@
-- name: 'Traccar: Check installed'
+- name: 'Traccar'
   tags:
     - install
     - traccar
+  block:
+    - name: 'Traccar: Check installed'
       stat:
         path: "/opt/traccar/traccar.run"
       register: traccar_app
 
-- name: 'Traccar: Install'
+    - name: 'Traccar: Install'
-  tags:
-    - install
-    - traccar
       include_tasks:
         file: install.yaml
         apply:
@@ -17,31 +16,48 @@
             - always
       when: not traccar_app.stat.exists
 
-- name: 'Traccar: Fix perms'
+    - name: 'Traccar: Tidy installer'
-  tags:
-    - install
-    - traccar
-  file:
-    path: "/opt/traccar"
-    owner: "{{ traccar_owner }}"
-    group: "{{ traccar_owner }}"
-    recurse: yes
-  become: yes
-
-- name: 'Traccar: Tidy installer'
-  tags:
-    - install
-    - traccar
       file:
         path: "{{ traccar_tmppath }}"
         state: absent
       become: yes
 
-- name: 'Traccar: Service running'
+    - name: 'Traccar: Add group'
-  tags:
+      group:
-    - traccar
+        name: "{{ traccar_owner }}"
+      become: yes
+
+    - name: 'Traccar: Add user'
+      user:
+        name: "{{ traccar_owner }}"
+        group: "{{ traccar_owner }}"
+      become: yes
+
+    - name: 'Traccar: Fix perms'
+      file:
+        path: '/opt/traccar'
+        owner: "{{ traccar_owner }}"
+        group: "{{ traccar_owner }}"
+        recurse: yes
+      become: yes
+
+    - name: 'Traccar: systemd override'
+      block:
+        - name: 'Traccar: systemd override directory'
+          file:
+            path: '/etc/systemd/system/traccar.service.d'
+            state: directory
+            force: yes
+        - name: 'Traccar: systemd override file'
+          copy:
+            dest: '/etc/systemd/system/traccar.service.d/override.conf'
+            content: "[Service]\nUser={{ traccar_owner }}\nGroup={{ traccar_owner }}\n"
+      become: yes
+
+    - name: 'Traccar: Service running'
       systemd:
         name: traccar
         state: started
+        daemon_reload: yes
         enabled: yes
       become: yes

.ansible/roles/traccar_server/vars/main.yaml

@@ -1,2 +1,2 @@
 traccar_tmppath: '/srv/tmp/traccar'
-traccar_owner: 'scott'
+traccar_owner: 'traccar'