cleanup variables and permissions

DO1JLR · May 9, 2021 · c08b9d3 · c08b9d3
1 parent 4fde06c
commit c08b9d3
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 10 deletions.
diff --git a/host_vars/web01.l3d.space/vars.yml b/host_vars/web01.l3d.space/vars.yml
@@ -145,8 +145,6 @@ gitea_protocol: 'http'
 gitea_shell: '/bin/bash'
 gitea_lfs_server_enabled: true
 gitea_lfs_content_path: "{{ gitea_home }}/data/lfs"
-gitea_lfs_jwt_secret: "{{ _gitea_lfs_jwt_secret }}"
-gitea_oauth2_jwt_secret: "{{ _gitea_oauth2_jwt_secret }}"
 gitea_repository_root: "{{ gitea_home }}/repos"
 gitea_ssh_domain: "{{ gitea_http_domain }}"
 gitea_start_ssh: "{{ _gitea_start_ssh }}"
@@ -178,8 +176,6 @@ gitea_repo_indexer_enabled: true
 gitea_enable_notify_mail: true
 
 # gitea secrets
-gitea_secret_key: "{{ _gitea_secret_key }}"
-gitea_internal_token: "{{ _gitea_internal_token }}"
 gitea_disable_git_hooks: "{{ _gitea_disable_git_hooks }}"
 gitea_disable_registration: "{{ _gitea_disable_registration }}"
 gitea_show_registration_button: "{{ _gitea_show_registration_button }}"
diff --git a/site.yml b/site.yml
@@ -25,22 +25,22 @@
 - name: deploy web config
   hosts: web
   roles:
-    - {role: do1jlr.webhost, tags: [web, webhost]}
+    - {role: do1jlr.webhost, tags: [web, webhost], become: true}
     - {role: acmetool_fix, tags: [web, acmetool]}
-    - {role: do1jlr.acmetool, tags: [web, acmetool]}
+    - {role: do1jlr.acmetool, tags: [web, acmetool], become: true}
     - {role: do1jlr.nginx, tags: [web, nginx]}
-    - {role: geerlingguy.mysql, tags: [web, git, mysql]}
+    - {role: geerlingguy.mysql, tags: [web, git, mysql], become: true}
     - {role: do1jlr.gitea, tags: [web, gitea, git]}
     - {role: goaccess, tags: [web, goaccess]}
 
 - name: deploy mail config
   hosts: mail
   roles:
     - {role: unbound, tags: [mail, unbound]}
-    - {role: geerlingguy.mysql, tags: [mail, mysql, mariadb]}
+    - {role: geerlingguy.mysql, tags: [mail, mysql, mariadb], become: true}
+    - {role: do1jlr.webhost, tags: [mail, webhost], become: true}
     - {role: acmetool_fix, tags: [mail, acmetool]}
-    - {role: do1jlr.webhost, tags: [mail, webhost]}
-    - {role: do1jlr.acmetool, tags: [mail, acmetool]}
+    - {role: do1jlr.acmetool, tags: [mail, acmetool], become: true}
     - {role: do1jlr.nginx, tags: [mail, nginx]}
     - {role: do1jlr.mailserver_preperation, tags: [mail, mailserver_preperation, prep, mailserver]}
     - {role: do1jlr.dovecot, tags: [mail, dovecot, mailserver_dovecot]}