changeset 242:7d8e664ebcc9 puppet-3.6

Change owner/group on Nextcloud for easy upgrade We now prevent Apache writing to files using SELinux, so it is secure during normal operation but can be upgraded through the web app by disabling SELinux
author IBBoard <dev@ibboard.co.uk>
date Fri, 20 Dec 2019 15:17:43 +0000
parents 1901eea3befe
children aad92dbc0efc
files manifests/templates.pp
diffstat 1 files changed, 2 insertions(+), 0 deletions(-) [+]
line wrap: on
line diff
--- a/manifests/templates.pp	Fri Dec 20 12:14:27 2019 +0000
+++ b/manifests/templates.pp	Fri Dec 20 15:17:43 2019 +0000
@@ -649,6 +649,8 @@
 		custom_fragment => template("private/apache/webmail.fragment"),
 	}
 	website::https { 'pim.ibboard.co.uk':
+		docroot_owner => 'apache',
+		docroot_group => 'editors',
 		force_no_index => false,
 		lockdown_requests => false,
 		ssl_ca_chain => '',