Explicit permissions for systemd overrides

CHANGELOG.md

@@ -12,6 +12,7 @@ The **patch** part changes is incremented if multiple releases happen the same m
 
 ### Added
 
+* Explicit permissions for systemd overrides
 * evolinux-base: option to bypass raid-related tasks
 * kvm-host: add missing default value
 

munin/tasks/main.yml

@@ -102,6 +102,8 @@
     option: "ProtectHome"
     value: "false"
     state: present
+    create: yes
+    mode: "0644"
   notify:
     - systemd daemon-reload
     - restart munin-node

postgresql/tasks/config.yml

@@ -10,6 +10,7 @@
     src: postgresql.service.override.conf
     dest: /etc/systemd/system/postgresql@.service.d/override.conf
     force: yes
+    mode: "0644"
   notify:
     - reload systemd
     - restart postgresql

squid/tasks/systemd.yml

@@ -19,6 +19,7 @@
   template:
     src: systemd-override.conf.j2
     dest: /etc/systemd/system/squid.service.d/override.conf
+    mode: "0644"
     force: yes
   register: _squid_systemd_override