Set permissions for /opt/conf-meza and /opt/conf-meza/public

Make these dirs suitable for meza-ansible to manage them without using
sudo.

config/core/defaults.yml

@@ -215,6 +215,11 @@ m_backups_owner: root
 m_backups_group: root
 
 
+m_config_public_mode: "0755"
+m_config_public_owner: meza-ansible
+m_config_public_group: wheel
+
+
 #
 # PHP config
 #

src/playbooks/site.yml

@@ -71,6 +71,14 @@
       group: wheel
       mode: "0600"
 
+  - name: Ensure /opt/conf-meza owned by meza-ansible
+    file:
+      path: "/opt/conf-meza"
+      owner: meza-ansible
+      group: wheel
+      mode: "0755"
+
+
 # FIXME 800: Run against localhost
 - hosts: app-servers
   become: yes

src/roles/init-controller-config/tasks/main.yml

@@ -57,9 +57,9 @@
   file:
     path: "{{ m_local_public }}"
     state: directory
-    owner: root
-    group: root
-    mode: 0755
+    owner: "{{ m_config_public_owner }}"
+    group: "{{ m_config_public_group }}"
+    mode: "{{ m_config_public_mode }}"
     recurse: true
   delegate_to: localhost
   run_once: true
@@ -71,20 +71,20 @@
   file:
     path: "{{ m_local_public }}/wikis"
     state: directory
-    owner: root
-    group: root
-    mode: 0755
+    owner: "{{ m_config_public_owner }}"
+    group: "{{ m_config_public_group }}"
+    mode: "{{ m_config_public_mode }}"
   delegate_to: localhost
   run_once: true
 
 
 - name: Ensure pre/post settings directories exists in config
   file:
-    path: "/opt/conf-meza/public/{{ item }}"
+    path: "{{ m_local_public }}/{{ item }}"
     state: directory
-    owner: root
-    group: root
-    mode: 0755
+    owner: "{{ m_config_public_owner }}"
+    group: "{{ m_config_public_group }}"
+    mode: "{{ m_config_public_mode }}"
   delegate_to: localhost
   run_once: true
   with_items:
@@ -96,9 +96,9 @@
   template:
     src: "templates/{{ item }}.j2"
     dest: "{{ m_local_public }}/{{ item }}"
-    owner: root
-    group: root
-    mode: 0755
+    owner: "{{ m_config_public_owner }}"
+    group: "{{ m_config_public_group }}"
+    mode: "{{ m_config_public_mode }}"
     force: no
   delegate_to: localhost
   run_once: true

src/scripts/getmeza.sh

@@ -80,6 +80,7 @@ if $ret; then
 	fi
 fi
 
+chown meza-ansible:wheel /opt/conf-meza
 
 echo
 echo "Add ansible master user"