More tweaking on that front

roles/ansible-pull/handlers/main.yml

@@ -0,0 +1,10 @@
+#!/usr/bin/ansible-playbook
+# vim:ft=ansible:
+---
+- name: restart ansiblepull timer
+  systemd:
+    daemon_reload: yes
+    name: ansible-pull.timer
+    enabled: yes
+    state: restarted
+  become: yes

roles/ansible-pull/tasks/main.yml

@@ -18,6 +18,7 @@
       loop:
         - { src: "ansible-pull.service", dest: "/etc/systemd/system/ansible-pull.service", mode: "0644" }
         - { src: "ansible-pull.timer", dest: "/etc/systemd/system/ansible-pull.timer", mode: "0644" }
+      notify: restart ansiblepull timer
     - name: Enable timer
       systemd:
         daemon_reload: yes

roles/ansible-pull/templates/ansible-pull.service

@@ -5,8 +5,7 @@ Description=Ansible pull service
 [Service]
 User=ansible
 Group=ansible
-# Forking and not oneshot here because we don't want it stuck in the Activating state forever
-Type=forking
+Type=oneshot
 Environment=ANSIBLE_CONFIG=~/ansible-pull-repo/ansible-pull.cfg
 ExecStart=ansible-pull --tags pull --accept-host-key -U "https://git.9iron.club/salt/ansible" -d "~/ansible-pull-repo" --vault-password-file "~/ansiblevaultpass" site.yml
 

roles/gitea/handlers/main.yml

@@ -6,5 +6,6 @@
     daemon_reload: yes
     name: gitea.service
     state: restarted
+  become: yes
 - name: gitea add default user
   include_tasks: tasks/add_default_user.yml