generated from sebclem/ansible-role-template
change umask
This commit is contained in:
parent
6ca04c782b
commit
df6c16f2e6
@ -18,7 +18,7 @@
|
||||
path: "{{ home }}"
|
||||
owner: "{{ user }}"
|
||||
group: "{{ group }}"
|
||||
mode: 0700
|
||||
mode: 0770
|
||||
state: directory
|
||||
|
||||
- name: Ensure ssh dir is present
|
||||
@ -26,7 +26,7 @@
|
||||
path: "{{ home }}/.ssh"
|
||||
owner: "{{ user }}"
|
||||
group: "{{ group }}"
|
||||
mode: 0700
|
||||
mode: 0770
|
||||
state: directory
|
||||
|
||||
- name: Ensure pool dir is present
|
||||
@ -34,14 +34,14 @@
|
||||
path: "{{ pool }}"
|
||||
owner: "{{ user }}"
|
||||
group: "{{ group }}"
|
||||
mode: 0700
|
||||
mode: 0770
|
||||
state: directory
|
||||
|
||||
- name: Create autorized key entry
|
||||
ansible.posix.authorized_key:
|
||||
user: "{{ user }}"
|
||||
key: "{{ item.key }}"
|
||||
key_options: 'command="cd {{ pool }}/{{ item.host }};borg serve --restrict-to-path {{ pool }}/{{ item.host }}",restrict'
|
||||
key_options: 'command="cd {{ pool }}/{{ item.host }};borg serve --umask=007 --restrict-to-path {{ pool }}/{{ item.host }}",restrict'
|
||||
with_items: "{{ auth_users }}"
|
||||
|
||||
- name: Ensure permission on authorized_keys file
|
||||
@ -57,6 +57,6 @@
|
||||
path: "{{ pool }}/{{ item.host }}"
|
||||
owner: "{{ user }}"
|
||||
group: "{{ group }}"
|
||||
mode: 0700
|
||||
mode: 0770
|
||||
state: directory
|
||||
with_items: "{{ auth_users }}"
|
||||
|
Loading…
Reference in New Issue
Block a user