fix(docker_compose): change default permissions from 0600 to 0644…

… on created files
DeadNews · Aug 15, 2024 · ade785a · ade785a
1 parent e263939
commit ade785a
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 6 deletions.
diff --git a/roles/docker_compose/meta/argument_specs.yml b/roles/docker_compose/meta/argument_specs.yml
@@ -43,15 +43,14 @@ argument_specs:
           mode:
             type: str
             required: false
-            default: "0600"
+            default: "0644"
             description: The file mode to set on the created file.
           directory_mode:
             type: str
             required: false
-            default: "0700"
+            default: "0755"
             description: |
               The directory mode to set on the created directory.
-              See the directory_mode option in the ansible.builtin.copy module for more details.
           validate:
             type: str
             required: false

diff --git a/roles/docker_compose/tasks/deploy.yml b/roles/docker_compose/tasks/deploy.yml
@@ -14,7 +14,7 @@
       ansible.builtin.template:
         src: "{{ item.src }}"
         dest: "{{ docker_compose_target_dir }}/{{ docker_compose_project }}/{{ item.dest | default(item.src | basename | split('.j2') | first) }}"
-        mode: "{{ item.mode | default('0600') }}"
+        mode: "{{ item.mode | default('0644') }}"
         validate: "{{ item.validate | default('') }}"
       loop: "{{ docker_compose_files }}"
       notify:
@@ -26,8 +26,8 @@
       ansible.builtin.copy:
         src: "{{ item.src }}"
         dest: "{{ docker_compose_target_dir }}/{{ docker_compose_project }}/{{ item.dest | default(item.src | basename) }}"
-        mode: "{{ item.mode | default('0600') }}"
-        directory_mode: "{{ item.directory_mode | default('0700') }}"
+        mode: "{{ item.mode | default('0644') }}"
+        directory_mode: "{{ item.directory_mode | default('0755') }}"
         validate: "{{ item.validate | default('') }}"
       loop: "{{ docker_compose_files }}"
       notify: