Some review fixes

roles/arch_boxes/tasks/main.yml

@@ -20,7 +20,7 @@
   file: path="{{ archboxes_git_dir }}" state=directory recurse=yes owner="{{ archboxes_user }}" group="{{ archboxes_user }}" mode=preserve
 
 - name: ensure controller.py of arch-boxes is executable
-  file: path="{{ archboxes_git_dir }}/controller.py" mode=0744 owner=root group=root
+  file: path="{{ archboxes_git_dir }}/controller.py" mode=0755 owner=root group=root
 
 - name: replace placeholder to vagrantcloud API Key
   no_log: true

roles/archweb/tasks/main.yml

@@ -265,7 +265,7 @@
 - name: deploy new release
   become: true
   become_user: archweb
-  file: path=/etc/uwsgi/vassals/archweb.ini state=touch owner=root group=root mode=0600
+  file: path=/etc/uwsgi/vassals/archweb.ini state=touch owner=root group=root mode=0644
   when: archweb_site and (release.changed or config.changed or virtualenv.changed or archweb_forced_deploy)
   notify: restart archweb memcached
 

roles/gitlab_runner/tasks/main.yml

@@ -35,7 +35,7 @@
     path: /etc/gitlab-runner/config.toml
     owner: root
     group: root
-    mode: 0640
+    mode: 0600
     regexp: '^concurrent = .*'
     line: concurrent = 100
   notify: restart gitlab-runner