eric/ansible-role-narratio
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Make Narratio configuration ownership configurable

Browse Source
This commit is contained in:
Eric Rakestraw
2026-09-14 14:04:54 +00:00
parent 7feff4728a
commit eeb1105590
4 changed files with 23 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
README.md
View File

@@ -18,6 +18,10 @@ narratio_go_binary: /snap/bin/go
narratio_user: narratio
narratio_group: narratio
narratio_config_path: /usr/local/etc/narratio/pipeline.yml
narratio_config_owner: root
narratio_config_group: narratio
narratio_config_directory_mode: "0750"
narratio_config_file_mode: "0640"
narratio_workspace_root: /var/lib/narratio
narratio_campaigns_root: /usr/local/share/narratio/campaigns
narratio_spool_root: /var/spool/narratio
@@ -117,8 +121,11 @@ rebuilds only when the checkout changes or the binary is absent.
The `narratio` account owns the workspace, spool, and cache roots, which are
group-writable setgid directories. The campaign registry is `root:narratio`
and operator-readable; its content remains caller-managed. The configuration
directory is `root:narratio` mode `0750`, and the pipeline is mode `0640`.
and operator-readable; its content remains caller-managed. Configuration
ownership and modes are independently configurable: the standalone defaults
are `root:narratio`, mode `0750` for the directory and `0640` for the managed
pipeline file. Composing roles may override these inputs without changing the
writable-root policy.
Null pipeline values and their empty parent mappings are omitted; non-null
falsey values are preserved. `narratio_publish_outputs`,