roles/flyspray: Setup directory handling

The setup directory for flyspray is present on our git, so, instead of being
deleted after the installation, it remains on the repository. To avoid issues
with it, it has permissions 000 when not in use. But, for cloning, it is
required to have write permissions. So, we do this permission juggling before
cloning.

roles/flyspray/tasks/main.yml

@@ -17,6 +17,9 @@
 - name: make nginx log dir
   file: path=/var/log/nginx/{{ flyspray_domain }} state=directory owner=http group=log mode=755
 
+- name: create setup dir with write permissions
+  file: state=directory owner="{{ flyspray_user }}" group="{{ flyspray_user }}" path="{{ flyspray_dir }}/setup" mode=755
+
 - name: clone flyspray repo
   git: repo=https://git.archlinux.org/vhosts/bugs.archlinux.org.git dest="{{ flyspray_dir }}"
   become: true
@@ -26,6 +29,9 @@
 - name: fix home permissions
   file: state=directory owner="{{ flyspray_user }}" group="{{ flyspray_user }}" path="{{ flyspray_dir }}"
 
+- name: take away setup dir write permissions
+  file: state=directory owner="{{ flyspray_user }}" group="{{ flyspray_user }}" path="{{ flyspray_dir }}/setup" mode=000
+
 - name: configure flyspray
   template: src=flyspray.conf.php.j2 dest=/srv/http/flyspray/flyspray.conf.php owner="{{ flyspray_user }}" group="{{ flyspray_user }}" mode=0660
   register: config