distgit: turn on fedora-messaging notification and give apache access to the git hook cert and keys

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>

roles/distgit/files/dist-git.conf

@@ -14,3 +14,5 @@ default_namespace = rpms
 [upload]
 fedmsgs     = False
 nomd5       = True
+fedora_messaging = True
+fedora_messaging_config = '/etc/fedora-messaging/git-hooks-messaging.toml'

roles/distgit/tasks/main.yml

@@ -138,6 +138,18 @@
   - config
   - distgit
 
+- name: Make sure apache can access the fedora-messasing keys
+  acl:
+    path: {{ item }}
+    with_items:
+    - /etc/pki/rabbitmq/git-hooks.ca
+    - /etc/pki/rabbitmq/git-hooks.crt
+    - /etc/pki/rabbitmq/git-hooks.key
+    entity: apache
+    etype: group
+    permissions: r
+    state: present
+
 - name: create the distgit root directory (/srv/git)
   file: dest=/srv/git state=directory mode=0755
   tags: