roles/gitea: Install from upstream binary

I seem to have forgotten how I got the RPM for Gitea.  I think I built
it, but I cannot find the spec file, nor the RPM package.  Since this is
clearly not reproducible, I decided to switch to using the binary
provided by upstream for now, until either I or Fedora get around to
making a better RPM.

Installing Gitea from the upstream binary is simple: just download it
and copy it to `/usr/local/bin`.  Of course, the OS user and systemd
unit have to be managed by configuration policy when it's installed this
way.

roles/gitea/tasks/main.yml

@@ -1,13 +1,59 @@
 - name: load gitea secrets
   include_vars: vault/gitea
 
+- name: ensure gitea system group exists
+  group:
+    name: gitea
+    system: yes
+  tags:
+  - user
+  - group
+- name: ensure gitea system user exists
+  user:
+    name: gitea
+    group: gitea
+    system: yes
+    home: /var/lib/gitea
+    createhome: no
+  tags:
+  - user
+
+- name: ensure gitea data directory exists
+  file:
+    path: /var/lib/gitea
+    mode: '0700'
+    owner: gitea
+    group: gitea
+
+- name: download gitea binary
+  become: false
+  delegate_to: localhost
+  get_url:
+    url: '{{ gitea_download_url }}'
+    dest: 'roles/gitea/files/{{ gitea_bin }}'
+    checksum: 'sha256:{{ gitea_bin_sha256 }}'
+  tags:
+  - download
 - name: ensure gitea is installed
-  package:
-    name=gitea
-    state=present
+  copy:
+    src: '{{ gitea_bin }}'
+    dest: /usr/local/bin/gitea
+    mode: '0755'
+  diff: false
+  notify:
+  - restart gitea
   tags:
   - install
 
+- name: ensure gitea systemd unit is installed
+  copy:
+    src: gitea.service
+    dest: /etc/systemd/system/gitea.service
+    mode: '0644'
+  notify:
+  - reload systemd
+  - restart gitea
+
 - name: ensure gitea is configured
   template:
     src=app.ini.j2