Ansible Role: Atuin

Install and configure an Atuin shell history sync server. The role downloads the Atuin client and server binaries from the GitHub releases, installs a systemd service and writes the server configuration.

Requirements

Operating System	Architecture
Debian	x86_64

The role loads vars/<os_family>.yaml, so only Debian-family hosts are supported. A PostgreSQL database must be reachable with the configured credentials. The role does not create the database or user (use the postgresql role for that).

Dependencies

None (dependencies: []). The playbook only runs the atuin role.

Variables

Variable	Required	Default	Description
atuin_version	No	18.23.0	Atuin version to install (Renovate-managed)
atuin_db_host	No	localhost	PostgreSQL host
atuin_db_name	No	atuin	PostgreSQL database name
atuin_db_user	No	atuin	PostgreSQL user
atuin_db_pass	No	atuin	PostgreSQL password, always override this

Example

atuin_version: "18.23.0"
atuin_db_host: "localhost"
atuin_db_name: "atuin"
atuin_db_user: "atuin"
atuin_db_pass: "change-me"

Keep the real password in the sops-encrypted inventory variables.

Usage

Run the role through Semaphore using playbook.yaml. The playbook first runs ansible-galaxy install -f -r roles/requirements.yml to refresh the role, then runs the atuin role.

Notes

Item	Value
Binaries	/usr/local/bin/atuin and /usr/local/bin/atuin-server
Configuration	/etc/atuin/server.toml (listens on 0.0.0.0:8888, open_registration = false)
Service	atuin.service, started after postgresql.service
Database URI	postgres://<user>:<pass>@<host>/<name>

The binaries are replaced when the installed version does not match atuin_version. Changes to the binary, the service or the configuration restart the service (the restart is skipped when MOLECULE_TESTING is set).