From 924e175ddedbdf88fe2a4b2fede584f2e736b049 Mon Sep 17 00:00:00 2001
From: Luke Murphy <lukewm@riseup.net>
Date: Fri, 10 Apr 2020 09:05:05 +0200
Subject: [PATCH] Separate permissions for configuration files

---
 ansible/pre-deploy.yml | 16 +++++++++++++---
 1 file changed, 13 insertions(+), 3 deletions(-)

diff --git a/ansible/pre-deploy.yml b/ansible/pre-deploy.yml
index bd8a1d1..4fa3401 100644
--- a/ansible/pre-deploy.yml
+++ b/ansible/pre-deploy.yml
@@ -41,7 +41,7 @@
         owner: dokku
         group: dokku
 
-    - name: Copy over templated configuration files
+    - name: Copy over the /web/ configurations
       become: true
       template:
         src: "{{ item.src }}"
@@ -50,12 +50,22 @@
         group: "{{ docker_user_gid }}"
         mode: 0664
       with_items:
-        - src: alertad.conf
-          dest: /var/lib/alerta/alertad.conf
         - src: config.json
           dest: /var/lib/alerta/config.json
+
+    - name: Copy over the /app/ configurations
+      become: true
+      template:
+        src: "{{ item.src }}"
+        dest: "{{ item.dest }}"
+        owner: root
+        group: root
+        mode: 0664
+      with_items:
         - src: alerta.conf
           dest: /var/lib/alerta/alerta.conf
+        - src: alertad.conf
+          dest: /var/lib/alerta/alertad.conf
 
     - name: Specify docker volume mounts
       dokku_storage: