ansible-roles/webapps/nextcloud/tasks/user.yml
Alexis Ben Miloud--Josselin 31826b9ee5
All checks were successful
Ansible Lint |Total|New|Outstanding|Fixed|Trend |:-:|:-:|:-:|:-:|:-: |2655|7|2648|5|:-1: Reference build: <a href="https://jenkins.evolix.org/job/gitea/job/ansible-roles/job/unstable/421//ansiblelint">Evolix » ansible-roles » unstable #421</a>
gitea/ansible-roles/pipeline/head This commit looks good
webapps/nextcloud: Set owner and mode once mounted
2023-12-07 09:42:34 +01:00

57 lines
1.4 KiB
YAML

---
- name: Check nextcloud user id is over 2999
ansible.builtin.assert:
that:
- nextcloud_user_uid >= 3000
- name: Create {{ nextcloud_user }} unix group
ansible.builtin.group:
name: "{{ nextcloud_user | mandatory }}"
state: present
gid: "{{ nextcloud_user_uid | mandatory }}"
tags:
- nextcloud
- name: Create {{ nextcloud_user | mandatory }} unix user
ansible.builtin.user:
name: "{{ nextcloud_user | mandatory }}"
group: "{{ nextcloud_user | mandatory }}"
home: "{{ nextcloud_home | mandatory }}"
uid: "{{ nextcloud_user_uid | mandatory }}"
shell: '/bin/bash'
create_home: True
state: present
# mode: "0755"
tags:
- nextcloud
- name: Create top-level directories
ansible.builtin.file:
dest: "{{ item }}"
state: directory
mode: "0700"
owner: "{{ nextcloud_user }}"
group: "{{ nextcloud_user }}"
loop:
- "{{ nextcloud_home }}/log"
- "{{ nextcloud_home }}/tmp"
- "{{ nextcloud_home }}/data"
tags:
- nextcloud
- name: Mount up Ceph volume by UUID
ansible.posix.mount:
path: "{{ nextcloud_data }}"
src: "{{ nextcloud_data_uuid }}"
fstype: ext4
opts: defaults,noexec,nosuid,nodev,relatime,lazytime
state: mounted
- name: Set volume's root permissions and ownership
ansible.builtin.file:
path: "{{ nextcloud_data }}"
owner: "{{ nextcloud_user }}"
group: "{{ nextcloud_user }}"
mode: "0700"