r/frigate: Clean up Frigate role

* Switch to Quadlet-style `.container` for systemd unit
* Update to new image tag naming scheme (not arch-specific)
* Use environment variables for secrets
* Allow the entire `frigate_config` variable to be overridden

roles/frigate/tasks/main.yml

@@ -44,7 +44,7 @@
 
 - name: ensure frigate container image is available
   podman_image:
-    name: docker.io/blakeblackshear/frigate:{{ frigate_image_tag }}
+    name: '{{ frigate_image }}'
     tag: stable
     state: present
     force: '{{ frigate_update|d|bool }}'
@@ -54,22 +54,16 @@
   - container-image
   - container
 
-- name: ensure frigate systemd unit is installed
+- name: ensure frigate container unit is installed
   template:
-    src: frigate.service.j2
-    dest: /etc/systemd/system/frigate.service
-    mode: '0644'
+    src: frigate.container.j2
+    dest: /etc/containers/systemd/frigate.container
+    mode: u=rw,go=r
   notify:
   - reload systemd
   - restart frigate
   tags:
   - systemd
-- name: ensure frigate starts at boot
-  service:
-    name: frigate
-    enabled: true
-  tags:
-  - service
 
 - name: ensure frigate configuration directory exists
   file:
@@ -82,7 +76,7 @@
   - config
 - name: ensure frigate is configured
   copy:
-    dest: /etc/frigate/frigate.yml
+    dest: /etc/frigate/config.yml
     content: >-
       {{ frigate_config|to_nice_yaml(indent=2) }}
     mode: '0640'
@@ -92,13 +86,17 @@
   - restart frigate
   tags:
   - config
-
-- name: ensure frigate starts at boot
-  service:
-    name: frigate
-    enabled: true
+- name: ensure frigate environment is set
+  template:
+    src: frigate.environ.j2
+    dest: /etc/frigate/environ
+    mode: u=r,go=
+    owner: root
+    group: root
+  notify:
+  - restart frigate
   tags:
-  - service
+  - config
 
 - name: flush handlers
   meta: flush_handlers