diff --git a/admin-users/tasks/adduser_debian.yml b/admin-users/tasks/adduser_debian.yml index f3d5ab3a..6110b707 100644 --- a/admin-users/tasks/adduser_debian.yml +++ b/admin-users/tasks/adduser_debian.yml @@ -32,7 +32,7 @@ - name: Fix perms on homedirectory for '{{ user.name }}' file: name: '/home/{{ user.name }}' - mode: "700" + mode: "0700" state: directory - name: is evomaintenance installed? @@ -54,7 +54,7 @@ file: dest: '/home/{{ user.name }}/.ssh/' state: directory - mode: "700" + mode: "0700" owner: '{{ user.name }}' group: '{{ user.name }}' @@ -126,7 +126,7 @@ - name: Verify Evolinux sudoers file permissions file: path: /etc/sudoers.d/evolinux - mode: "440" + mode: "0440" state: file - name: Add user in sudoers file for '{{ user.name }}' diff --git a/apt-repositories/tasks/backports.yml b/apt-repositories/tasks/backports.yml index 060aae6c..4ac35f1a 100644 --- a/apt-repositories/tasks/backports.yml +++ b/apt-repositories/tasks/backports.yml @@ -6,7 +6,7 @@ dest: /etc/apt/sources.list.d/backports.list force: yes backup: yes - mode: "640" + mode: "0640" notify: apt update - name: Backports configuration @@ -15,7 +15,7 @@ dest: /etc/apt/preferences.d/backports force: yes backup: yes - mode: "640" + mode: "0640" notify: apt update - meta: flush_handlers diff --git a/drbd-utils/tasks/munin.yml b/drbd-utils/tasks/munin.yml index 6048dfd9..09572ceb 100644 --- a/drbd-utils/tasks/munin.yml +++ b/drbd-utils/tasks/munin.yml @@ -12,7 +12,7 @@ copy: src: munin/drbd-plugin dest: /etc/munin/plugins/drbd - mode: "755" + mode: "0755" when: munin_plugins_dir.stat.exists notify: restart munin-node diff --git a/drbd-utils/tasks/nagios.yml b/drbd-utils/tasks/nagios.yml index e2549886..0aa8f54d 100644 --- a/drbd-utils/tasks/nagios.yml +++ b/drbd-utils/tasks/nagios.yml @@ -29,5 +29,5 @@ copy: src: "nagios/check_drbd" dest: "/usr/local/lib/nagios/plugins/check_drbd" - mode: "755" + mode: "0755" when: nagios_plugins_dir.stat.exists diff --git a/elasticsearch/tasks/tmpdir.yml b/elasticsearch/tasks/tmpdir.yml index ff199fa0..dee93e69 100644 --- a/elasticsearch/tasks/tmpdir.yml +++ b/elasticsearch/tasks/tmpdir.yml @@ -14,7 +14,7 @@ path: "{{ elasticsearch_custom_tmpdir or elasticsearch_default_tmpdir | mandatory }}" owner: elasticsearch group: elasticsearch - mode: "755" + mode: "0755" state: directory tags: - elasticsearch diff --git a/etc-git/tasks/main.yml b/etc-git/tasks/main.yml index 5499fd31..3770dbf9 100644 --- a/etc-git/tasks/main.yml +++ b/etc-git/tasks/main.yml @@ -30,7 +30,7 @@ file: path: /etc/.git owner: root - mode: "700" + mode: "0700" state: directory - name: /etc/.gitignore is present @@ -38,7 +38,7 @@ src: gitignore dest: /etc/.gitignore owner: root - mode: "600" + mode: "0600" - name: does /etc/ have any commit? command: "git log" diff --git a/evoacme/tasks/acme.yml b/evoacme/tasks/acme.yml index 690c836d..3fbd7630 100644 --- a/evoacme/tasks/acme.yml +++ b/evoacme/tasks/acme.yml @@ -16,7 +16,7 @@ - name: Fix crt dir's right file: path: "{{ evoacme_crt_dir }}" - mode: "755" + mode: "0755" owner: acme group: acme state: directory @@ -24,7 +24,7 @@ - name: Fix log dir's right file: path: "{{ evoacme_log_dir }}" - mode: "755" + mode: "0755" owner: acme group: acme state: directory @@ -32,7 +32,7 @@ - name: Fix challenge dir's right file: path: "{{ evoacme_acme_dir }}" - mode: "755" + mode: "0755" owner: acme group: acme state: directory diff --git a/evoacme/tasks/apache.yml b/evoacme/tasks/apache.yml index 8ee75d26..f12aee32 100644 --- a/evoacme/tasks/apache.yml +++ b/evoacme/tasks/apache.yml @@ -12,7 +12,7 @@ dest: /etc/apache2/conf-available/letsencrypt.conf owner: root group: root - mode: "644" + mode: "0644" notify: reload apache2 - name: Enable acme challenge conf diff --git a/evoacme/tasks/certbot.yml b/evoacme/tasks/certbot.yml index 15f4f9e0..26bfea53 100644 --- a/evoacme/tasks/certbot.yml +++ b/evoacme/tasks/certbot.yml @@ -92,13 +92,13 @@ content: | #!/bin/sh sudo /opt/certbot/certbot-auto $@ - mode: "755" + mode: "0755" - name: Add sudo right for source install copy: src: files/sudoers dest: /etc/sudoers.d/certbot - mode: "440" + mode: "0440" validate: '/usr/sbin/visudo -cf %s' when: evoacme_certbot_release is undefined @@ -111,4 +111,4 @@ copy: src: certbot.cron dest: /etc/cron.daily/certbot - mode: "755" + mode: "0755" diff --git a/evoacme/tasks/conf.yml b/evoacme/tasks/conf.yml index 1f1fd507..b39b5384 100644 --- a/evoacme/tasks/conf.yml +++ b/evoacme/tasks/conf.yml @@ -30,4 +30,4 @@ dest: /etc/default/evoacme owner: root group: root - mode: "644" + mode: "0644" diff --git a/evoacme/tasks/nginx.yml b/evoacme/tasks/nginx.yml index af2e86ee..024e60ce 100644 --- a/evoacme/tasks/nginx.yml +++ b/evoacme/tasks/nginx.yml @@ -4,4 +4,4 @@ dest: /etc/nginx/letsencrypt.conf owner: root group: root - mode: "644" + mode: "0644" diff --git a/evoacme/tasks/scripts.yml b/evoacme/tasks/scripts.yml index 0eec55ff..930f1f25 100644 --- a/evoacme/tasks/scripts.yml +++ b/evoacme/tasks/scripts.yml @@ -5,7 +5,7 @@ state: directory owner: root group: root - mode: "755" + mode: "0755" - name: Copy make-csr.sh script copy: @@ -13,7 +13,7 @@ dest: /usr/local/bin/make-csr owner: root group: root - mode: "755" + mode: "0755" - name: Copy evoacme script copy: @@ -21,4 +21,4 @@ dest: /usr/local/bin/evoacme owner: root group: root - mode: "755" + mode: "0755" diff --git a/evolinux-base/tasks/apt.yml b/evolinux-base/tasks/apt.yml index 7056ffad..6ae5177b 100644 --- a/evolinux-base/tasks/apt.yml +++ b/evolinux-base/tasks/apt.yml @@ -6,7 +6,7 @@ line: "{{ item }}" create: yes state: present - mode: "640" + mode: "0640" with_items: - "APT::Install-Recommends \"0\";" - "APT::Install-Suggests \"0\";" @@ -18,7 +18,7 @@ line: "{{ item }}" create: yes state: present - mode: "640" + mode: "0640" with_items: - "DPkg::Pre-Invoke { \"mount -oremount,exec /tmp && mount -oremount,rw /usr || true\"; };" - "DPkg::Post-Invoke { \"mount -oremount /tmp && mount -oremount /usr || exit 0\"; };" @@ -57,7 +57,7 @@ dest: /etc/apt/sources.list.d/evolix_public.list force: yes backup: yes - mode: "640" + mode: "0640" when: evolinux_apt_public_sources - name: Remove Aptitude diff --git a/evolinux-base/tasks/default_www.yml b/evolinux-base/tasks/default_www.yml index 8c00bc81..c54c8830 100644 --- a/evolinux-base/tasks/default_www.yml +++ b/evolinux-base/tasks/default_www.yml @@ -40,7 +40,7 @@ path: /etc/ssl/private/{{ ansible_fqdn }}.key owner: root group: ssl-cert - mode: "640" + mode: "0640" - name: Create certificate for default site command: openssl x509 -req -days 3650 -sha256 -in /etc/ssl/{{ ansible_fqdn }}.csr -signkey /etc/ssl/private/{{ ansible_fqdn }}.key -out /etc/ssl/certs/{{ ansible_fqdn }}.crt @@ -62,7 +62,7 @@ template: src: default_www/nginx_default_site.j2 dest: /etc/nginx/sites-available/000-default - mode: "640" + mode: "0640" # force: yes notify: reload nginx tags: @@ -95,7 +95,7 @@ template: src: default_www/apache_default_site.j2 dest: /etc/apache2/sites-available/000-default - mode: "640" + mode: "0640" # force: yes notify: reload apache tags: diff --git a/evolinux-base/tasks/hardware.yml b/evolinux-base/tasks/hardware.yml index 26165f37..8c85b206 100644 --- a/evolinux-base/tasks/hardware.yml +++ b/evolinux-base/tasks/hardware.yml @@ -43,7 +43,7 @@ template: src: hardware/cciss-vol-statusd.j2 dest: /etc/init.d/cciss-vol-statusd - mode: "755" + mode: "0755" - name: Enable HP hardware in systemd service: @@ -70,7 +70,7 @@ template: src: hardware/megaclisas-statusd.j2 dest: /etc/default/megaclisas-statusd - mode: "755" + mode: "0755" - name: Enable DELL/LSI hardware in systemd service: diff --git a/evolinux-base/tasks/logs.yml b/evolinux-base/tasks/logs.yml index f3016300..c56afd59 100644 --- a/evolinux-base/tasks/logs.yml +++ b/evolinux-base/tasks/logs.yml @@ -6,7 +6,7 @@ copy: src: logs/rsyslog.conf dest: /etc/rsyslog.conf - mode: "644" + mode: "0644" notify: restart rsyslog when: evolinux_logs_rsyslog_conf diff --git a/evolinux-base/tasks/root.yml b/evolinux-base/tasks/root.yml index b178ceaa..7c47e553 100644 --- a/evolinux-base/tasks/root.yml +++ b/evolinux-base/tasks/root.yml @@ -4,7 +4,7 @@ file: path: /root state: directory - mode: "700" + mode: "0700" when: evolinux_root_chmod - name: "Customize root's bashrc..." diff --git a/evolinux-base/tasks/system.yml b/evolinux-base/tasks/system.yml index 1d28d366..80f81a69 100644 --- a/evolinux-base/tasks/system.yml +++ b/evolinux-base/tasks/system.yml @@ -119,7 +119,7 @@ src: system/init_alert5.j2 dest: /etc/init.d/alert5 force: no - mode: "755" + mode: "0755" when: evolinux_system_alert5_init diff --git a/fail2ban/tasks/main.yml b/fail2ban/tasks/main.yml index 04560e78..d7a22f71 100644 --- a/fail2ban/tasks/main.yml +++ b/fail2ban/tasks/main.yml @@ -10,7 +10,7 @@ copy: src: "{{ item }}" dest: /etc/fail2ban/filter.d/ - mode: "644" + mode: "0644" with_items: - dovecot-evolix.conf - sasl-evolix.conf @@ -20,5 +20,5 @@ template: src: jail.local.j2 dest: /etc/fail2ban/jail.local - mode: "644" + mode: "0644" notify: restart fail2ban diff --git a/kibana/tasks/main.yml b/kibana/tasks/main.yml index 4e48fe2e..a3911d9c 100644 --- a/kibana/tasks/main.yml +++ b/kibana/tasks/main.yml @@ -18,6 +18,6 @@ copy: src: logrotate dest: /etc/logrotate.d/kibana - mode: "644" + mode: "0644" owner: root group: root diff --git a/kvm-host/tasks/munin.yml b/kvm-host/tasks/munin.yml index 007004c4..3b621cd7 100644 --- a/kvm-host/tasks/munin.yml +++ b/kvm-host/tasks/munin.yml @@ -4,7 +4,7 @@ get_url: url: "https://raw.githubusercontent.com/munin-monitoring/contrib/master/plugins/virtualization/{{ item }}" dest: "/etc/munin/plugins/" - mode: "755" + mode: "0755" with_items: - kvm_cpu - kvm_io diff --git a/listupgrade/tasks/main.yml b/listupgrade/tasks/main.yml index c50788eb..cbf3fe11 100644 --- a/listupgrade/tasks/main.yml +++ b/listupgrade/tasks/main.yml @@ -3,13 +3,13 @@ file: path: "/usr/share/scripts" state: directory - mode: "700" + mode: "0700" - name: Copy listupgrade script template: src: listupgrade.sh.j2 dest: "/usr/share/scripts/listupgrade.sh" - mode: "700" + mode: "0700" owner: root group: root force: yes @@ -19,13 +19,13 @@ file: path: /etc/evolinux state: directory - mode: "600" + mode: "0600" - name: Copy listupgrade config template: src: listupgrade.cnf.j2 dest: /etc/evolinux/listupgrade.cnf - mode: "600" + mode: "0600" owner: root group: root force: no @@ -34,6 +34,6 @@ template: src: listupgrade_cron.j2 dest: /etc/cron.d/listupgrade - mode: "600" + mode: "0600" owner: root group: root diff --git a/monit/tasks/main.yml b/monit/tasks/main.yml index 28761c13..fcdd0b4c 100644 --- a/monit/tasks/main.yml +++ b/monit/tasks/main.yml @@ -12,7 +12,7 @@ template: src: evolinux-defaults.conf.j2 dest: /etc/monit/conf.d/z-evolinux-defaults.conf - mode: "640" + mode: "0640" force: yes notify: restart monit tags: diff --git a/mysql/tasks/config.yml b/mysql/tasks/config.yml index a15e253d..fbd85f01 100644 --- a/mysql/tasks/config.yml +++ b/mysql/tasks/config.yml @@ -5,7 +5,7 @@ dest: /etc/mysql/conf.d/z-evolinux-defaults.cnf owner: root group: root - mode: "644" + mode: "0644" force: yes tags: - mysql @@ -16,7 +16,7 @@ dest: /etc/mysql/conf.d/zzz-evolinux-custom.cnf owner: root group: root - mode: "640" + mode: "0640" force: no tags: - mysql diff --git a/mysql/tasks/log2mail.yml b/mysql/tasks/log2mail.yml index 1623005e..17d8dd18 100644 --- a/mysql/tasks/log2mail.yml +++ b/mysql/tasks/log2mail.yml @@ -14,7 +14,7 @@ template: src: log2mail.j2 dest: /etc/log2mail/config/mysql.conf - mode: "640" + mode: "0640" when: log2mail_config_dir.stat.exists tags: - mysql diff --git a/mysql/tasks/tmpdir.yml b/mysql/tasks/tmpdir.yml index bb5c828f..7cbd7de8 100644 --- a/mysql/tasks/tmpdir.yml +++ b/mysql/tasks/tmpdir.yml @@ -6,7 +6,7 @@ path: "{{ mysql_custom_tmpdir }}" owner: mysql group: mysql - mode: "700" + mode: "0700" state: directory tags: - mysql diff --git a/mysql/tasks/users.yml b/mysql/tasks/users.yml index 7fe33187..143bc2eb 100644 --- a/mysql/tasks/users.yml +++ b/mysql/tasks/users.yml @@ -42,7 +42,7 @@ - name: mysqladmin is the default user ini_file: dest: /root/.my.cnf - mode: "600" + mode: "0600" section: client option: '{{ item.option }}' value: '{{ item.value }}' diff --git a/mysql/tasks/utils.yml b/mysql/tasks/utils.yml index 6bcb4807..5ed3beca 100644 --- a/mysql/tasks/utils.yml +++ b/mysql/tasks/utils.yml @@ -22,7 +22,7 @@ template: src: mytop.j2 dest: /root/.mytop - mode: "600" + mode: "0600" force: yes tags: - mytop @@ -34,7 +34,7 @@ copy: src: mysqltuner.pl dest: "{{ mysql_scripts_dir or general_scripts_dir | mandatory }}/mysqltuner.pl" - mode: "700" + mode: "0700" tags: - mysql - mysqltuner @@ -51,7 +51,7 @@ copy: src: mysql-optimize.sh dest: "{{ mysql_scripts_dir or general_scripts_dir | mandatory }}/mysql-optimize.sh" - mode: "700" + mode: "0700" tags: - mysql @@ -84,7 +84,7 @@ - name: Ensure /usr/share/scripts exists file: dest: /usr/share/scripts - mode: "700" + mode: "0700" state: directory tags: - mysql @@ -93,6 +93,6 @@ copy: src: my-add.sh dest: "{{ mysql_scripts_dir or general_scripts_dir | mandatory }}/my-add.sh" - mode: "700" + mode: "0700" tags: - mysql diff --git a/nginx/tasks/main.yml b/nginx/tasks/main.yml index f5b16615..8b510e70 100644 --- a/nginx/tasks/main.yml +++ b/nginx/tasks/main.yml @@ -33,7 +33,7 @@ copy: src: nginx/evolinux-defaults.conf dest: /etc/nginx/conf.d/z-evolinux-defaults.conf - mode: "640" + mode: "0640" # force: yes notify: reload nginx tags: @@ -49,8 +49,8 @@ dest: /etc/nginx/snippets/private_ipaddr_whitelist owner: www-data group: www-data - directory_mode: "640" - mode: "640" + directory_mode: "0640" + mode: "0640" force: no notify: reload nginx tags: @@ -82,8 +82,8 @@ dest: /etc/nginx/snippets/private_htpasswd owner: www-data group: www-data - directory_mode: "640" - mode: "640" + directory_mode: "0640" + mode: "0640" force: no notify: reload nginx tags: diff --git a/nginx/tasks/munin_graphs.yml b/nginx/tasks/munin_graphs.yml index f35337f7..feabbcad 100644 --- a/nginx/tasks/munin_graphs.yml +++ b/nginx/tasks/munin_graphs.yml @@ -4,7 +4,7 @@ copy: src: munin/evolinux.nginx dest: /etc/munin/plugin-conf.d/ - mode: "644" + mode: "0644" notify: restart munin - name: Enable Munin plugins for Nginx diff --git a/nginx/tasks/munin_vhost.yml b/nginx/tasks/munin_vhost.yml index 9ad306d3..d45353c0 100644 --- a/nginx/tasks/munin_vhost.yml +++ b/nginx/tasks/munin_vhost.yml @@ -26,7 +26,7 @@ copy: src: init.d/spawn-fcgi-munin-graph dest: /etc/init.d/ - mode: "755" + mode: "0755" register: install_spawn_fcgi_munin_graph - name: Reload systemd diff --git a/postfix/tasks/main.yml b/postfix/tasks/main.yml index b3929545..684e567a 100644 --- a/postfix/tasks/main.yml +++ b/postfix/tasks/main.yml @@ -19,7 +19,7 @@ dest: /etc/postfix/main.cf owner: root group: root - mode: "644" + mode: "0644" force: yes when: default_main_cf.stdout == "5450c05d65878e99dad696c7c722e511 -" notify: restart postfix diff --git a/postgresql/tasks/config.yml b/postgresql/tasks/config.yml index 47cedccf..8bb3b9e4 100644 --- a/postgresql/tasks/config.yml +++ b/postgresql/tasks/config.yml @@ -11,7 +11,7 @@ state: directory owner: postgres group: postgres - mode: "755" + mode: "0755" - name: Copy PostgreSQL config file template: @@ -19,5 +19,5 @@ dest: /etc/postgresql/9.4/main/conf.d/evolinux.conf owner: postgres group: postgres - mode: "644" + mode: "0644" notify: restart postgresql diff --git a/proftpd/tasks/main.yml b/proftpd/tasks/main.yml index 8d9e99d1..3f6b3abe 100644 --- a/proftpd/tasks/main.yml +++ b/proftpd/tasks/main.yml @@ -19,7 +19,7 @@ template: src: evolinux.conf.j2 dest: /etc/proftpd/conf.d/z-evolinux.conf - mode: "644" + mode: "0644" notify: restart proftpd tags: - proftpd diff --git a/rabbitmq/tasks/main.yml b/rabbitmq/tasks/main.yml index 215f5612..1119794b 100644 --- a/rabbitmq/tasks/main.yml +++ b/rabbitmq/tasks/main.yml @@ -11,7 +11,7 @@ dest: /etc/rabbitmq/rabbitmq-env.conf owner: rabbitmq group: rabbitmq - mode: "600" + mode: "0600" force: no - name: Create rabbitmq.config @@ -20,7 +20,7 @@ dest: /etc/rabbitmq/rabbitmq.config owner: rabbitmq group: rabbitmq - mode: "600" + mode: "0600" force: no - name: Adjust ulimit diff --git a/redis/tasks/main.yml b/redis/tasks/main.yml index 676a47c1..b492b22c 100644 --- a/redis/tasks/main.yml +++ b/redis/tasks/main.yml @@ -11,7 +11,7 @@ template: src: redis.conf.j2 dest: "{{ redis_conf_path }}" - mode: "644" + mode: "0644" notify: restart redis tags: - redis diff --git a/squid/tasks/log2mail.yml b/squid/tasks/log2mail.yml index 0da565e1..3ac971e5 100644 --- a/squid/tasks/log2mail.yml +++ b/squid/tasks/log2mail.yml @@ -12,7 +12,7 @@ template: src: log2mail.j2 dest: /etc/log2mail/config/squid.conf - mode: "640" + mode: "0640" owner: log2mail group: adm notify: restart log2mail diff --git a/tomcat-instance/tasks/alias.yml b/tomcat-instance/tasks/alias.yml index 502a9f61..8f1e1a73 100644 --- a/tomcat-instance/tasks/alias.yml +++ b/tomcat-instance/tasks/alias.yml @@ -3,7 +3,7 @@ file: path: "{{ tomcat_instance_root }}/{{ tomcat_instance_name }}/bin" state: directory - mode: "770" + mode: "0770" owner: "{{ tomcat_instance_name }}" group: "{{ tomcat_instance_name }}" @@ -11,7 +11,7 @@ template: src: "{{ item }}" dest: "{{ tomcat_instance_root }}/{{ tomcat_instance_name }}/bin/" - mode: "770" + mode: "0770" owner: "{{ tomcat_instance_name }}" group: "{{ tomcat_instance_name }}" with_fileglob: diff --git a/tomcat-instance/tasks/bootstrap.yml b/tomcat-instance/tasks/bootstrap.yml index 321508a9..52c1b1ee 100644 --- a/tomcat-instance/tasks/bootstrap.yml +++ b/tomcat-instance/tasks/bootstrap.yml @@ -18,7 +18,7 @@ template: src: 'templates/server.xml.j2' dest: "{{ tomcat_instance_root }}/{{ tomcat_instance_name }}/conf/server.xml" - mode: "660" + mode: "0660" owner: "{{ tomcat_instance_name }}" group: "{{ tomcat_instance_name }}" force: no @@ -32,7 +32,7 @@ template: src: 'templates/env.j2' dest: "{{ tomcat_instance_root }}/{{ tomcat_instance_name }}/conf/env" - mode: "660" + mode: "0660" owner: "{{ tomcat_instance_name }}" group: "{{ tomcat_instance_name }}" force: no diff --git a/tomcat-instance/tasks/systemd.yml b/tomcat-instance/tasks/systemd.yml index c27a3e00..50f4897a 100644 --- a/tomcat-instance/tasks/systemd.yml +++ b/tomcat-instance/tasks/systemd.yml @@ -7,6 +7,6 @@ lineinfile: dest: "{{ tomcat_instance_root }}/{{ tomcat_instance_name }}/.profile" state: present - mode: "640" + mode: "0640" create: yes line: 'export XDG_RUNTIME_DIR=/run/user/$UID' diff --git a/tomcat-instance/tasks/tomcat.yml b/tomcat-instance/tasks/tomcat.yml index ec51ca9f..8233377c 100644 --- a/tomcat-instance/tasks/tomcat.yml +++ b/tomcat-instance/tasks/tomcat.yml @@ -14,11 +14,11 @@ state: directory owner: 'root' group: 'root' - mode: "755" + mode: "0755" - name: Copy systemd unit copy: src: 'files/tomcat.service' dest: "/etc/systemd/user/tomcat.service" - mode: "755" + mode: "0755" notify: systemd reload diff --git a/tomcat-instance/tasks/user.yml b/tomcat-instance/tasks/user.yml index 569d3615..33a78f7a 100644 --- a/tomcat-instance/tasks/user.yml +++ b/tomcat-instance/tasks/user.yml @@ -31,7 +31,7 @@ lineinfile: dest: '/etc/sudoers.d/tomcat' state: present - mode: "440" + mode: "0440" create: yes line: "%{{ tomcat_instance_name }} ALL = ({{ tomcat_instance_name }}) SETENV: ALL" validate: 'visudo -cf %s' @@ -40,7 +40,7 @@ lineinfile: dest: '/etc/sudoers.d/tomcat' state: present - mode: "440" + mode: "0440" create: yes line: "{{ tomcat_instance_deploy_user }} ALL = ({{ tomcat_instance_name }}) NOPASSWD: SETENV: ALL" validate: 'visudo -cf %s' diff --git a/varnish/tasks/main.yml b/varnish/tasks/main.yml index 0274f765..848681c6 100644 --- a/varnish/tasks/main.yml +++ b/varnish/tasks/main.yml @@ -14,7 +14,7 @@ copy: src: "reload-vcl.sh" dest: "/etc/varnish/reload-vcl.sh" - mode: "700" + mode: "0700" owner: root group: root