1
0
Fork 0
forked from infra/ansible

[distgit] Fix the group

The pagure user on distgit is now in xpackager group and same is the
ownership of most of the folders used by pagure. This change is
reflecting that in ansible.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
This commit is contained in:
Michal Konečný 2026-03-26 13:25:39 +01:00
commit 021ffcdeb6
4 changed files with 15 additions and 15 deletions

View file

@ -50,7 +50,7 @@
- name: Create an user we can run pagure under
ansible.builtin.user:
name: pagure
groups: packager
groups: xpackager
append: yes
tags:
- pagure
@ -66,7 +66,7 @@
- name: Add the git user to the packager group
ansible.builtin.user:
name: git
group: packager
group: xpackager
append: yes
when: env == 'staging'
tags:
@ -77,7 +77,7 @@
state: directory
path: /var/log/pagure
owner: pagure
group: packager
group: xpackager
mode: u+rwx,g+rwxs,o+rx
tags:
- pagure
@ -133,7 +133,7 @@
src: "{{ item.file }}"
dest: "{{ item.location }}/{{ item.file }}"
owner: pagure
group: packager
group: xpackager
mode: "0640"
with_items:
- file: pagure_hook.cfg
@ -159,7 +159,7 @@
state: directory
path: "{{ item }}"
owner: root
group: packager
group: xpackager
mode: "2775"
with_items:
- /srv/git/repositories/
@ -175,7 +175,7 @@
state: directory
path: "{{ item }}"
owner: root
group: packager
group: xpackager
mode: "2775"
with_items:
- /srv/git/remotes
@ -372,17 +372,17 @@
- src: "{{ private }}/files/rabbitmq/{{ env }}/pki/issued/pkgs{{ env_suffix }}.crt"
dest: src.fp.o.crt
owner: pagure
group: packager
group: xpackager
mode: "444"
- src: "{{ private }}/files/rabbitmq/{{ env }}/pki/private/pkgs{{ env_suffix }}.key"
dest: src.fp.o.key
owner: pagure
group: packager
group: xpackager
mode: "440"
- src: "{{ private }}/files/rabbitmq/{{ env }}/ca-combined.crt"
dest: src.fp.o.ca
owner: pagure
group: packager
group: xpackager
mode: "444"
tags:
- pagure

View file

@ -3,7 +3,7 @@ WSGISocketPrefix run/wsgi
WSGIRestrictSignal Off
WSGIPythonOptimize 1
WSGIPassAuthorization On
WSGIDaemonProcess pagureproc user=pagure group=packager maximum-requests=1000 display-name=pagure processes={{ wsgi_procs }} threads={{ wsgi_threads }} inactivity-timeout=300
WSGIDaemonProcess pagureproc user=pagure group=xpackager maximum-requests=1000 display-name=pagure processes={{ wsgi_procs }} threads={{ wsgi_threads }} inactivity-timeout=300
WSGIProcessGroup pagureproc
WSGIApplicationGroup %{GLOBAL}
WSGIScriptAlias / /var/www/pagure.wsgi

View file

@ -55,7 +55,7 @@
path: /var/www/bin
state: directory
owner: pagure
group: packager
group: xpackager
mode: '0755'
tags:
- distgit
@ -65,7 +65,7 @@
src: "suexec-{{ item }}.sh"
dest: "/var/www/bin/suexec-{{ item }}.sh"
owner: pagure
group: packager
group: xpackager
mode: '0755'
with_items:
- gitolite
@ -225,7 +225,7 @@
dest: "/srv/git/repositories/{{ item }}"
state: directory
mode: '2775'
group: packager
group: xpackager
with_items:
- rpms
- docker
@ -473,7 +473,7 @@
path: /srv/git/grokmirror
state: directory
owner: root
group: packager
group: xpackager
mode: '2775'
tags:
- grokmirror

View file

@ -17,4 +17,4 @@
</Else>
</LocationMatch>
SuexecUserGroup pagure packager
SuexecUserGroup pagure xpackager