more infinote work

roles/infinote/files/infinoted-git-commit

@@ -0,0 +1,4 @@
+#!/bin/bash
+cd /srv/web/infinote
+git add .  >/dev/null
+git commit -a -m "Automated Commit of $1" >/dev/null

roles/infinote/files/infinoted.service

@@ -5,6 +5,8 @@ Documentation=https://github.com/gobby/libinfinity
 
 [Service]
 ExecStart=/usr/bin/infinoted-0.6
+User=infinote
+Group=infinote
 Type=simple
 
 [Install]

roles/infinote/tasks/main.yml

@@ -8,14 +8,26 @@
 # make directory for nfs mounts to live in
 #
 
+- name: create an infinoted user
+  user: name=infinote state=present home=/home/infinote createhome=yes shell=/sbin/nologin
+  tags:
+  - infinote
+  - config
+
+- name: allow infinote user to read ssl certs
+  file: dest=/etc/pki/tls/private/wildcard-2014.fedoraproject.org.key mode=600 owner=infinote group=root
+  tags:
+  - infinote
+  - config
+
 - name: create /srv/web for web content
-  file: dest=/srv/web state=directory mode=755
+  file: dest=/srv/web state=directory mode=755 owner=infinote group=infinote
   tags:
   - infinote
   - config
 
 - name: create /srv/infinote for infinote content
-  file: dest=/srv/infinote state=directory mode=755
+  file: dest=/srv/infinote state=directory mode=755 owner=infinote group=infinote
   tags:
   - infinote
   - config
@@ -46,3 +58,9 @@
   tags:
   - infinote
   - config
+  
+- name: add git commit script for infinote
+  template: src=infinoted-git-commit dest=/usr/local/bin/infinoted-git-commit mode=0755
+  tags:
+  - infinote
+  - config