salt/ansible
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Assert more specific permissions with Nextcloud

Browse Source
This commit is contained in:
Salt 2020-05-06 00:31:49 -05:00
parent 7753453caa
commit 9da55f236c
1 changed files with 11 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
roles/nextcloud/tasks/main.yml
View File

@ -28,8 +28,7 @@
- name: Create webroot - name: Create webroot
file: file:
path: "{{ nextcloud_webroot }}" path: "{{ nextcloud_webroot }}"
mode: "0755" mode: "0750"
recurse: yes
state: directory state: directory
- name: Check for existing installation - name: Check for existing installation
stat: stat:
@ -68,6 +67,16 @@
path: /var/www/nextcloud.tar.bz2 path: /var/www/nextcloud.tar.bz2
state: absent state: absent
when: not stat_webroot_index.stat.exists when: not stat_webroot_index.stat.exists
- name: Assert permissions
block:
- name: Tighten config.php
file:
path: "{{ nextcloud_webroot }}/config/config.php"
mode: "0660"
- name: Loosen occ
file:
path: "{{ nextcloud_webroot }}/occ"
mode: "0755"
- name: Set up Nextcloud cronjob - name: Set up Nextcloud cronjob
cron: cron:
user: www-data user: www-data