diff --git a/web/tasks/base_website_setup.yml b/web/tasks/base_website_setup.yml index 904b4f980b4d4953e9ea4f4f0b9479fe5471ed19..f8aac73bd936a9ecab799b193d53de7f4a9f1df9 100644 --- a/web/tasks/base_website_setup.yml +++ b/web/tasks/base_website_setup.yml @@ -3,6 +3,7 @@ ansible.builtin.apt: name: nginx state: present + become: true - name: Copy snippets ansible.builtin.copy: src: "{{ server_config_dir }}/server_config/nginx/snippets/" @@ -10,6 +11,7 @@ owner: root group: root mode: "0644" + become: true - name: Change default config ansible.builtin.copy: src: "{{ server_config_dir }}/server_config/nginx/configs/default" @@ -17,11 +19,13 @@ owner: root group: root mode: "0644" + become: true - name: Enable + Restart nginx ansible.builtin.service: name: nginx state: reloaded enabled: true + become: true - name: Make sure acme.sh is installed ansible.builtin.include_tasks: file: "{{ ansible_repo_dir }}/web/tasks/install_acme_sh.yml" diff --git a/web/tasks/install_acme_sh.yml b/web/tasks/install_acme_sh.yml index cbcb11cf76b49fb3caa75661761bd976712af881..37acee153ec7b75ceb38d169d98a00ba2a51fe12 100644 --- a/web/tasks/install_acme_sh.yml +++ b/web/tasks/install_acme_sh.yml @@ -4,6 +4,7 @@ ansible.builtin.stat: path: "/root/.acme.sh" get_checksum: false + become: true register: acme_config - name: Download acme.sh ansible.builtin.get_url: @@ -39,3 +40,4 @@ day: "*" month: "*" weekday: "*" + become: true diff --git a/web/tasks/issue_cert.yml b/web/tasks/issue_cert.yml index 56caebd9061b999e76e2b72d123d9243269cf5ad..37b788c5dbe084cda9f7dc507472e0747633a7fc 100644 --- a/web/tasks/issue_cert.yml +++ b/web/tasks/issue_cert.yml @@ -7,9 +7,11 @@ ansible.builtin.apt: name: ssl-cert state: present + become: true - name: Check if certificate already exists ansible.builtin.stat: path: "/root/.acme.sh/{{ domain_name }}_ecc" + become: true register: acme_cert_dir - name: Pre-copy cert files ansible.builtin.copy: diff --git a/web/tasks/set_up_nginx_config.yml b/web/tasks/set_up_nginx_config.yml index 1a550c45f9420dbc36cb821117cc40d73cb2f1f2..e00c351eaa6067fd84f2a0d1760121db1ca49cea 100644 --- a/web/tasks/set_up_nginx_config.yml +++ b/web/tasks/set_up_nginx_config.yml @@ -7,6 +7,7 @@ owner: root group: root mode: "0644" + become: true - name: Enable new config site ansible.builtin.file: src: "/etc/nginx/sites-available/{{ web_conf_file }}" @@ -14,3 +15,4 @@ owner: root group: root state: link + become: true