Merge pull request #65 from svc-design/codex/update-openresty-roles-configuration

feat: ensure artifact vhost root permissions

playbooks/deploy_openresty_vhosts.yml

@@ -16,6 +16,7 @@
           - cn-artifact.svc.plus
         ssl_certificate: /etc/ssl/svc.plus.pem
         ssl_certificate_key: /etc/ssl/svc.plus.rsa.key
+        root: /data/update-server
         type: artifact
   roles:
     - roles/vhosts/common/

playbooks/roles/vhosts/OpenResty/tasks/main.yml

@@ -47,6 +47,15 @@
   loop: "{{ vhosts | default([]) }}"
   notify: Restart OpenResty
 
+- name: Ensure artifact root directories exist
+  file:
+    path: "{{ item.root }}"
+    state: directory
+    owner: www-data
+    group: www-data
+    mode: "0755"
+  loop: "{{ vhosts | default([]) | selectattr('type', 'equalto', 'artifact') | selectattr('root', 'defined') | list }}"
+
 - name: Enable and start OpenResty
   systemd:
     name: openresty

playbooks/roles/vhosts/OpenResty/templates/nginx.conf.j2

@@ -1,4 +1,5 @@
 worker_processes  auto;
+user www-data;
 
 events {
     worker_connections  1024;