From bb0537b997dd007225934b1e8ec15f776aa21f6c Mon Sep 17 00:00:00 2001
From: Pavel Raiskup <praiskup@redhat.com>
Date: Tue, 7 Dec 2021 16:22:42 +0100
Subject: [PATCH] copr-be: seems like 'acl' fights with 'copy' module

Will this help with the playbook idempotence?
---
 roles/copr/backend/tasks/install_certs.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/roles/copr/backend/tasks/install_certs.yml b/roles/copr/backend/tasks/install_certs.yml
index 36be543de8..167696117f 100644
--- a/roles/copr/backend/tasks/install_certs.yml
+++ b/roles/copr/backend/tasks/install_certs.yml
@@ -15,6 +15,7 @@
   - restart lighttpd
   tags:
   - config
+  - config_httpd_certificates
 
 # When we do 'systemctl restart', lighttpd is initially started as "root"
 # process (when the config is loaded) and later it does setuid(lighttpd).
@@ -29,10 +30,11 @@
     path: "{{ item }}"
     entity: lighttpd
     etype: user
-    permissions: r--
+    permissions: r
     state: present
   with_items:
     - "/etc/lighttpd/copr-be.cloud.fedoraproject.org.pem"
     - "/etc/lighttpd/copr-be.cloud.fedoraproject.org.intermediate.cert"
   tags:
   - config
+  - config_httpd_certificates