diff options
| author | Luke Hoersten <[email protected]> | 2026-07-31 14:31:51 -0500 |
|---|---|---|
| committer | Luke Hoersten <[email protected]> | 2026-07-31 14:31:51 -0500 |
| commit | afcc3e3fe02034c536b4d24d340288c784ea840b (patch) | |
| tree | 0e87148e4951cc7d254c5b199d219d050b79b198 /ergo/tasks | |
| parent | afe7aa9445afe27f8c09033663f9161039ee363a (diff) | |
ergo: give nginx access to the unix socket
nginx terminates tls on 6697 and proxies to the socket, created 0770
ergo:ergo. With the ergo group empty the workers got EACCES and every
client saw a tls handshake then silence (bitten on web after the 26.04
reboot).
Diffstat (limited to 'ergo/tasks')
| -rw-r--r-- | ergo/tasks/main.yaml | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/ergo/tasks/main.yaml b/ergo/tasks/main.yaml index 72f0285..31281da 100644 --- a/ergo/tasks/main.yaml +++ b/ergo/tasks/main.yaml @@ -4,6 +4,13 @@ become: yes user: name="ergo" shell="/bin/false" system="yes" create_home="no" +# nginx terminates tls on 6697 and proxies to ergo's unix socket, created +# 0770 ergo:ergo; without this group the workers get EACCES and clients see +# tls handshake then silence. +- name: add the nginx user to the ergo group + become: yes + user: name="www-data" groups="ergo" append="yes" + - name: download ergo become: yes unarchive: |