diff --git a/tasks/configure.yml b/tasks/configure.yml index 158245f..5252c5f 100644 --- a/tasks/configure.yml +++ b/tasks/configure.yml @@ -18,7 +18,7 @@ path: "{{ home }}" owner: "{{ user }}" group: "{{ group }}" - mode: 0700 + mode: 0770 state: directory - name: Ensure ssh dir is present @@ -34,14 +34,14 @@ path: "{{ pool }}" owner: "{{ user }}" group: "{{ group }}" - mode: 0700 + mode: 0770 state: directory - name: Create autorized key entry ansible.posix.authorized_key: user: "{{ user }}" key: "{{ item.key }}" - key_options: 'command="cd {{ pool }}/{{ item.host }};borg serve --restrict-to-path {{ pool }}/{{ item.host }}",restrict' + key_options: 'command="cd {{ pool }}/{{ item.host }};borg serve --umask=007 --restrict-to-path {{ pool }}/{{ item.host }}",restrict' with_items: "{{ auth_users }}" - name: Ensure permission on authorized_keys file @@ -57,6 +57,6 @@ path: "{{ pool }}/{{ item.host }}" owner: "{{ user }}" group: "{{ group }}" - mode: 0700 + mode: 0770 state: directory with_items: "{{ auth_users }}"