From e8ed459afd482e1427f678f7e99a29f110982010 Mon Sep 17 00:00:00 2001 From: Matchu Date: Wed, 3 Nov 2021 16:59:23 -0700 Subject: [PATCH] Remove the web group permission stuff from deploy I'm not doing this thoroughly enough for it to matter (e.g. the deployed rsynced versions aren't having the group permissions set). I think doing this *right* (to be extensible to additional users) is too much complexity to be worth it, and doing it halfway is more confusing than helpful. I did this because I was anticipating multi-users permissions to be a bit of an issue for like, granting the web server permission to access the source code. But it turns out, since we're running with pm2, it's all working just fine! --- deploy/playbooks/setup.yml | 18 +----------------- 1 file changed, 1 insertion(+), 17 deletions(-) diff --git a/deploy/playbooks/setup.yml b/deploy/playbooks/setup.yml index 9902143..cc2f00e 100644 --- a/deploy/playbooks/setup.yml +++ b/deploy/playbooks/setup.yml @@ -4,27 +4,11 @@ vars: email_address: "emi@matchu.dev" # TODO: Extract this to personal config? tasks: - - name: Create web user group - become: yes - group: - name: web - - - name: Add current user to web group - become: yes - user: - name: "{{ ansible_user_id }}" - group: web - append: yes - - name: Create the app folder become: yes file: path: /srv/impress-2020 - state: directory - # Root and the `web` group may read/write this folder. Everyone else - # may only read it. - group: web - mode: "u=rwx,g=rwx,o=rx" + owner: "{{ ansible_user_id }}" - name: Add Nodesource apt key become: yes