From 578d5a0afa71b5984f70a4892de2dd0037a4b553 Mon Sep 17 00:00:00 2001
From: Pierre-Yves Chibon <pingou@pingoured.fr>
Date: Fri, 30 Jun 2017 14:36:40 +0200
Subject: [PATCH] Override the default pagure_worker as the user is different

---
 roles/distgit/pagure/files/pagure_worker.service | 15 +++++++++++++++
 roles/distgit/pagure/tasks/main.yml              | 10 ++++++++++
 2 files changed, 25 insertions(+)
 create mode 100644 roles/distgit/pagure/files/pagure_worker.service

diff --git a/roles/distgit/pagure/files/pagure_worker.service b/roles/distgit/pagure/files/pagure_worker.service
new file mode 100644
index 0000000000..bf83a0966e
--- /dev/null
+++ b/roles/distgit/pagure/files/pagure_worker.service
@@ -0,0 +1,15 @@
+[Unit]
+Description=Pagure worker for backend git interaction
+After=redis.target
+Documentation=https://pagure.io/pagure
+
+[Service]
+ExecStart=/usr/bin/celery worker -A pagure.lib.tasks --loglevel=info --autoreload
+Environment="PAGURE_CONFIG=/etc/pagure/pagure.cfg"
+Type=simple
+User=pagure
+Group=pagure
+Restart=on-failure
+
+[Install]
+WantedBy=multi-user.target
diff --git a/roles/distgit/pagure/tasks/main.yml b/roles/distgit/pagure/tasks/main.yml
index cac7c25aa0..b68d89d4d0 100644
--- a/roles/distgit/pagure/tasks/main.yml
+++ b/roles/distgit/pagure/tasks/main.yml
@@ -136,6 +136,16 @@
   tags:
   - pagure
 
+- name: Override the default pagure_worker.service file to change the user it is run under
+  copy: src=pagure_worker.service
+        dest=/usr/lib/systemd/system/pagure_worker.service
+        owner=root group=root mode=0755
+  notify:
+  - reload systemd
+  - restart pagure_worker
+  tags:
+  - pagure
+
 - name: set sebooleans so pagure can talk to the db
   seboolean: name=httpd_can_network_connect_db
                     state=true