fix: use proper binary URL and add systemd unit

Signed-off-by: Anatoli Nicolae <an@thundersquared.com>

Author: anatolinicolae

mx1/ansible/roles/system/envoy/tasks/main.yml

@@ -10,32 +10,47 @@
   set_fact:
     envoy_target_version: "{{ envoy_version | default(envoy_release.json.tag_name) }}"
 
-- name: Download Envoy binary
+- name: Download and install Envoy binary
   get_url:
-    url: "https://github.com/envoyproxy/envoy/releases/download/{{ envoy_target_version }}/envoy-{{ envoy_target_version | regex_replace('^v', '') }}-linux-x86_64.tar.gz"
-    dest: /tmp/envoy.tar.gz
-  register: download_result
-
-- name: Extract Envoy binary
-  unarchive:
-    src: /tmp/envoy.tar.gz
-    dest: /tmp/
-    remote_src: yes
-  when: download_result.changed
-
-- name: Install Envoy binary
-  copy:
-    src: "/tmp/envoy-{{ envoy_target_version | regex_replace('^v', '') }}-linux-x86_64/bin/envoy"
+    url: "https://github.com/envoyproxy/envoy/releases/download/{{ envoy_target_version }}/envoy-{{ envoy_target_version | regex_replace('^v', '') }}-linux-x86_64"
     dest: /usr/local/bin/envoy
     mode: '0755'
-    remote_src: yes
-  when: download_result.changed
 
-- name: Clean up temporary files
+- name: Create Envoy config directory
   file:
-    path: "{{ item }}"
-    state: absent
-  loop:
-    - /tmp/envoy.tar.gz
-    - "/tmp/envoy-{{ envoy_target_version | regex_replace('^v', '') }}-linux-x86_64"
-  when: download_result.changed
+    path: /etc/envoy
+    state: directory
+    mode: '0755'
+
+- name: Create Envoy systemd service
+  copy:
+    dest: /etc/systemd/system/envoy.service
+    content: |
+      [Unit]
+      Description=Envoy Proxy
+      After=network.target
+
+      [Service]
+      Type=simple
+      ExecStart=/usr/local/bin/envoy -c /etc/envoy/envoy.yaml
+      Restart=always
+      User=root
+      Group=root
+
+      [Install]
+      WantedBy=multi-user.target
+    mode: '0644'
+
+- name: Reload systemd daemon
+  systemd:
+    daemon_reload: yes
+
+- name: Enable Envoy service
+  systemd:
+    name: envoy
+    enabled: yes
+
+- name: Start Envoy service
+  systemd:
+    name: envoy
+    state: started