vars:
  env_file: configs/beszel-agent/hosts/ana-nas.env
  binary_file: /tmp/beszel-priority1/beszel-agent
steps:
  - name: Create unprivileged agent account and config directory
    sudo: true
    shell: |
      set -eu
      getent passwd beszel >/dev/null || useradd --system --user-group --home-dir /var/lib/beszel-agent --shell /usr/sbin/nologin beszel
      install -d -o root -g root -m 0755 /etc/beszel-agent
  - name: Install verified version-matched binary
    sudo: true
    upload:
      src: '{{ binary_file }}'
      dest: /usr/local/bin/beszel-agent
      mode: '0755'
  - name: Install host-specific public key and mount configuration
    sudo: true
    upload:
      src: '{{ env_file }}'
      dest: /etc/beszel-agent/environment
      mode: '0600'
  - name: Install unprivileged service
    sudo: true
    upload:
      src: configs/beszel-agent/beszel-agent.service
      dest: /etc/systemd/system/beszel-agent.service
      mode: '0644'
  - name: Enable monitoring agent
    sudo: true
    shell: |
      set -eu
      systemd-analyze verify /etc/systemd/system/beszel-agent.service
      systemctl daemon-reload
      systemctl enable beszel-agent
      systemctl restart beszel-agent
      systemctl is-active beszel-agent