From 8d71965ec9972437598aa434cce5ec99907c4852 Mon Sep 17 00:00:00 2001
From: Ludovic Poujol <lpoujol@evolix.fr>
Date: Thu, 22 Aug 2019 14:47:32 +0200
Subject: [PATCH] nginx: fix munin fcgi not working (missing chmod 660 on logs)

---
 CHANGELOG.md                |  1 +
 nginx/tasks/munin_vhost.yml | 11 +++++++++--
 2 files changed, 10 insertions(+), 2 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index b4b0e553..cac67b69 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -26,6 +26,7 @@ The **patch** part changes incrementally at each release.
 * lxc-php: Don't remove the default pool
 * roundcube: fix typo for roundcube vhost
 * tomcat: fix typo for default tomcat_version
+* nginx: fix munin fcgi not working (missing chmod 660 on logs)
 
 ### Security
 
diff --git a/nginx/tasks/munin_vhost.yml b/nginx/tasks/munin_vhost.yml
index bd6c5ee6..d2e20ce5 100644
--- a/nginx/tasks/munin_vhost.yml
+++ b/nginx/tasks/munin_vhost.yml
@@ -15,14 +15,21 @@
     - libcgi-fast-perl
     - spawn-fcgi
 
-- name: Adjust rights for munin-cgi
+- name: Adjust owner for munin-cgi
   shell: "chown --verbose www-data:munin /var/log/munin/munin-cgi-*"
   register: command_result
   changed_when: "'changed' in command_result.stdout"
   args:
     warn: no
 
-- name: Install Init script for Munin-fcgi
+- name: Adjust rights for munin-cgi
+  shell: "chmod --verbose 640 /var/log/munin/munin-cgi-*"
+  register: command_result
+  changed_when: "'changed' in command_result.stdout"
+  args:
+    warn: no
+
+- name: Systemd unit for Munin-fcgi
   copy:
     src: systemd/spawn-fcgi-munin-graph.service
     dest: /etc/systemd/system/spawn-fcgi-munin-graph.service