diff --git a/roles/distgit/pagure/tasks/main.yml b/roles/distgit/pagure/tasks/main.yml index 659d44baef..a4ae6ff1bd 100644 --- a/roles/distgit/pagure/tasks/main.yml +++ b/roles/distgit/pagure/tasks/main.yml @@ -387,17 +387,17 @@ - src: "{{private}}/files/rabbitmq/{{env}}/pki/issued/pagure{{ env_suffix }}.crt" dest: src.fp.o.crt owner: pagure - group: {% if env == 'staging' %} repoSpanner {% else %} pagure {% endif %} + group: "{{ (env == 'production')|ternary('pagure', 'repoSpanner') }}" mode: "444" - src: "{{private}}/files/rabbitmq/{{env}}/pki/private/pagure{{ env_suffix }}.key" dest: src.fp.o.key owner: pagure - group: {% if env == 'staging' %} repoSpanner {% else %} pagure {% endif %} + group: "{{ (env == 'production')|ternary('pagure', 'repoSpanner') }}" mode: "440" - src: "{{private}}/files/rabbitmq/{{env}}/pki/ca.crt" dest: src.fp.o.ca owner: pagure - group: {% if env == 'staging' %} repoSpanner {% else %} pagure {% endif %} + group: "{{ (env == 'production')|ternary('pagure', 'repoSpanner') }}" mode: "444" tags: - pagure