Infrastructure/ansible
3
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Forget the git group, use setfacl

Browse source 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
This commit is contained in:
Pierre-Yves Chibon 2018-09-25 22:25:58 +02:00
parent 09a573d14d
commit 4e0108d96b
1 changed files with 7 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

9
roles/pagure/frontend/tasks/main.yml
View file

@ -159,8 +159,6 @@
group: paguremirroring group: paguremirroring
shell: /bin/nologin shell: /bin/nologin
home: /srv/mirror home: /srv/mirror
groups: git
append: yes
when: env == 'pagure-staging' when: env == 'pagure-staging'
tags: tags:
- pagure - pagure
@ -321,6 +319,13 @@
notify: notify:
- restart apache - restart apache
- name: let paguremirroring read the pagure config
command: /usr/bin/setfacl -dm user:paguremirroring:rx /etc/pagure/pagure.cfg
when: env == 'pagure-staging'
tags:
- pagure
- mirror
- name: Add default facl so apache can read git repos - name: Add default facl so apache can read git repos
acl: default=yes etype=user entity=apache permissions="rx" name=/srv/git state=present acl: default=yes etype=user entity=apache permissions="rx" name=/srv/git state=present
register: acl_updates register: acl_updates