CHANGELOG.md

@@ -26,6 +26,7 @@ The **patch** part changes incrementally at each release.
 * lxc-php: Don't remove the default pool
 * roundcube: fix typo for roundcube vhost
 * tomcat: fix typo for default tomcat_version
+* nginx: fix munin fcgi not working (missing chmod 660 on logs)
 
 ### Security
 

nginx/tasks/munin_vhost.yml

@@ -15,14 +15,21 @@
     - libcgi-fast-perl
     - spawn-fcgi
 
-- name: Adjust rights for munin-cgi
+- name: Adjust owner for munin-cgi
   shell: "chown --verbose www-data:munin /var/log/munin/munin-cgi-*"
   register: command_result
   changed_when: "'changed' in command_result.stdout"
   args:
     warn: no
 
-- name: Install Init script for Munin-fcgi
+- name: Adjust rights for munin-cgi
+  shell: "chmod --verbose 640 /var/log/munin/munin-cgi-*"
+  register: command_result
+  changed_when: "'changed' in command_result.stdout"
+  args:
+    warn: no
+
+- name: Systemd unit for Munin-fcgi
   copy:
     src: systemd/spawn-fcgi-munin-graph.service
     dest: /etc/systemd/system/spawn-fcgi-munin-graph.service