From 08ec221f0acca363fbb4705b55e7ad9682e847e2 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Felix=20Sch=C3=A4fer?= <felix@thegcat.net>
Date: Sat, 13 Feb 2021 19:24:33 +0100
Subject: [PATCH] Add modes to created files

https://ansible-lint.readthedocs.io/en/latest/default_rules.html#risky-file-permissions
---
 tasks/main.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/tasks/main.yml b/tasks/main.yml
index 21e0376..6f8b3bb 100644
--- a/tasks/main.yml
+++ b/tasks/main.yml
@@ -59,6 +59,7 @@
   file:
     path: "{{ keycloak_jboss_home }}/modules/system/layers/keycloak/org/postgresql/main/"
     state: directory
+    mode: 0755
 
 - name: Add postgresql jar to keycloak
   file:
@@ -70,6 +71,7 @@
   copy:
     src: org.postgresql.module.xml
     dest: "{{ keycloak_jboss_home }}/modules/system/layers/keycloak/org/postgresql/main/module.xml"
+    mode: 0644
 
 - name: Check if postgresql module is already in JBoss
   xml:
@@ -139,6 +141,7 @@
   template:
     src: keycloak.service.j2
     dest: /etc/systemd/system/keycloak.service
+    mode: 0644
   notify: restart keycloak
 
 - name: Add master realm admin to keycloak # noqa 305
-- 
GitLab