Cleanup file permissions

tasks/configure.yml

@@ -21,7 +21,7 @@
   with_items:
     - "{{ etebase__global_static_root }}"
 
-- name: "Create mediac data directorys"
+- name: "Create media data directorys"
   become: true
   ansible.builtin.file:
     path: "{{ item }}"

tasks/filepermissions.yml

@@ -0,0 +1,27 @@
+---
+- name: "Make sure static data is set properly"
+  become: true
+  ansible.builtin.file:
+    path: "{{ item }}"
+    state: directory
+    group: "{{ etebase__group }}"
+    owner: "{{ etebase__user }}"
+    recurse: true
+    mode: 'u=rwX,g=rX,o=rX'
+  with_items:
+    - "{{ etebase__global_static_root }}"
+
+- name: "Set and cleanup file permissions again"
+  become: true
+  ansible.builtin.file:
+    path: "{{ item }}"
+    state: directory
+    group: "{{ etebase__group }}"
+    owner: "{{ etebase__user }}"
+    recurse: true
+    mode: 'u=rwX,g=rX,o='
+  with_items:
+    - "{{ etebase__global_media_root }}"
+    - "{{ etebase__secrets_dir }}"
+    - "{{ etebase__venv }}"
+    - "{{ etebase__user_home }}/etebase_{{ etebase_version_target }}"

tasks/main.yml

@@ -24,3 +24,6 @@
 - name: Setup Systemd Service
   ansible.builtin.include_tasks: systemd.yml
   when: etebase__systemd_setup | bool
+
+- name: Cleanup file permissions
+  ansible.builtin.include_tasks: filepermissions.yml