systemd files : 644 permissions and owner/group

CHANGELOG.md

@@ -29,6 +29,7 @@ The **patch** part changes incrementally at each release.
 
 * Use python3 modules for Debian 11 and later
 * Remove embedded GPG keys only if legacy keyring is present
+* systemd files : 644 permissions and owner/group
 * apt: remove workaround for Evolix public repositories with Debian 11
 * apt: use the new security repository for Bullseye
 * certbot: silence letsencrypt deprecation warnings

docker-host/tasks/main.yml

@@ -70,6 +70,8 @@
   copy:
     src: docker.conf
     dest: /etc/systemd/system/docker.service.d/
+    owner: root
+    group: root
     mode: "0644"
   notify: reload systemd
 

elasticsearch/tasks/plugin_head.yml

@@ -60,6 +60,9 @@
   template:
     src: elasticsearch-head.service.j2
     dest: /etc/systemd/system/elasticsearch-head.service
+    owner: root
+    group: root
+    mode: "0644"
   tags:
     - elasticsearch
     - systemd

evolinux-base/tasks/log2mail.yml

@@ -3,6 +3,8 @@
   copy:
     src: log2mail.service
     dest: /etc/systemd/system/log2mail.service
+    owner: root
+    group: root
     mode: "0644"
 
 - name: Remove log2mail sysvinit service

evolinux-base/tasks/system.yml

@@ -168,6 +168,8 @@
     src: alert5.service
     dest: /etc/systemd/system/alert5.service
     force: yes
+    owner: root
+    group: root
     mode: "0644"
   when:
     - evolinux_system_alert5_init | bool

memcached/tasks/main.yml

@@ -28,6 +28,9 @@
   copy:
     src: memcached@.service
     dest: /etc/systemd/system/memcached@.service
+    owner: root
+    group: root
+    mode: "0644"
   tags:
     - memcached
   when: memcached_instance_name | length > 0

mysql/tasks/config_stretch.yml

@@ -35,6 +35,9 @@
     src: mariadb.systemd.j2
     dest: /etc/systemd/system/mariadb.service.d/evolinux.conf
     force: yes
+    owner: root
+    group: root
+    mode: "0644"
   register: mariadb_systemd_override
 
 - name: reload systemd and restart MariaDB

nginx/tasks/munin_vhost.yml

@@ -32,6 +32,9 @@
   copy:
     src: systemd/spawn-fcgi-munin-graph.service
     dest: /etc/systemd/system/spawn-fcgi-munin-graph.service
+    owner: root
+    group: root
+    mode: "0644"
 
 - name: Enable and start Munin-fcgi
   systemd:

postgresql/tasks/config.yml

@@ -10,6 +10,9 @@
     src: postgresql.service.override.conf
     dest: /etc/systemd/system/postgresql@.service.d/override.conf
     force: yes
+    owner: root
+    group: root
+    mode: "0644"
   notify:
     - reload systemd
     - restart postgresql

squid/tasks/systemd.yml

@@ -19,6 +19,9 @@
   template:
     src: systemd-override.conf.j2
     dest: /etc/systemd/system/squid.service.d/override.conf
+    owner: root
+    group: root
+    mode: "0644"
     force: yes
   register: _squid_systemd_override