From 9fefe07f5f27cc6d4d7646cd4fc04ba0b1337680 Mon Sep 17 00:00:00 2001
From: Giancarlo Razzolini <grazzolini@archlinux.org>
Date: Tue, 24 Jan 2017 02:51:44 -0200
Subject: [PATCH] roles/flyspray: Setup directory handling
The setup directory for flyspray is present on our git, so, instead of being
deleted after the installation, it remains on the repository. To avoid issues
with it, it has permissions 000 when not in use. But, for cloning, it is
required to have write permissions. So, we do this permission juggling before
cloning.
---
roles/flyspray/tasks/main.yml | 6 ++++++
1 file changed, 6 insertions(+)
diff --git a/roles/flyspray/tasks/main.yml b/roles/flyspray/tasks/main.yml
index de5e29ae3..144d34a29 100644
--- a/roles/flyspray/tasks/main.yml
+++ b/roles/flyspray/tasks/main.yml
@@ -17,6 +17,9 @@
- name: make nginx log dir
file: path=/var/log/nginx/{{ flyspray_domain }} state=directory owner=http group=log mode=755
+- name: create setup dir with write permissions
+ file: state=directory owner="{{ flyspray_user }}" group="{{ flyspray_user }}" path="{{ flyspray_dir }}/setup" mode=755
+
- name: clone flyspray repo
git: repo=https://git.archlinux.org/vhosts/bugs.archlinux.org.git dest="{{ flyspray_dir }}"
become: true
@@ -26,6 +29,9 @@
- name: fix home permissions
file: state=directory owner="{{ flyspray_user }}" group="{{ flyspray_user }}" path="{{ flyspray_dir }}"
+- name: take away setup dir write permissions
+ file: state=directory owner="{{ flyspray_user }}" group="{{ flyspray_user }}" path="{{ flyspray_dir }}/setup" mode=000
+
- name: configure flyspray
template: src=flyspray.conf.php.j2 dest=/srv/http/flyspray/flyspray.conf.php owner="{{ flyspray_user }}" group="{{ flyspray_user }}" mode=0660
register: config
--
GitLab