data.coop/ansible
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

More strict permissions

Browse source
This commit is contained in:
Sam Al-Sapti 2025-02-15 17:41:37 +01:00
parent cc03de247f
commit 6c31bab89d
2 changed files with 6 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
roles/docker/tasks/pre_deploy/nodebb.yml
View file

@ -26,4 +26,4 @@
src: nodebb/setup.json.j2 src: nodebb/setup.json.j2
dest: "{{ services.nodebb.volume_folder }}/setup.json" dest: "{{ services.nodebb.volume_folder }}/setup.json"
owner: root owner: root
mode: u=rw,g=r,o=r mode: u=rw,go=

10
roles/docker/templates/compose-files/nodebb.yml.j2
View file

@ -3,8 +3,8 @@ services:
image: mongo:{{ services.nodebb.monogdb_version }} image: mongo:{{ services.nodebb.monogdb_version }}
restart: always restart: always
volumes: volumes:
- ./mongodb:/data/db - ./mongodb:/data/db:rw
- ./mongodb-user-init.js:/docker-entrypoint-initdb.d/user-init.js - ./mongodb-user-init.js:/docker-entrypoint-initdb.d/user-init.js:ro
environment: environment:
MONGO_INITDB_ROOT_USERNAME: nodebb MONGO_INITDB_ROOT_USERNAME: nodebb
MONGO_INITDB_ROOT_PASSWORD: "{{ nodebb_secrets.mongodb_password }}" MONGO_INITDB_ROOT_PASSWORD: "{{ nodebb_secrets.mongodb_password }}"
@ -17,9 +17,9 @@ services:
- default - default
- external_services - external_services
volumes: volumes:
- ./nodebb-uploads:/usr/src/app/public/uploads - ./nodebb-uploads:/usr/src/app/public/uploads:rw
- ./nodebb-config:/opt/config - ./nodebb-config:/opt/config:rw
- ./setup.json:/usr/src/app/setup.json - ./setup.json:/usr/src/app/setup.json:ro
environment: environment:
VIRTUAL_HOST: "{{ services.nodebb.domain }}" VIRTUAL_HOST: "{{ services.nodebb.domain }}"
VIRTUAL_PORT: 4567 VIRTUAL_PORT: 4567