From 9e7a8aca7c55352fb97ac2feacaaf60863ab9704 Mon Sep 17 00:00:00 2001
From: Scott Wallace <scott@wallace.sh>
Date: Wed, 16 Oct 2019 21:41:36 +0100
Subject: [PATCH] Fix rclone config permissions

---
 .ansible/roles/rclone_mount/tasks/main.yaml | 51 +++++++++++----------
 1 file changed, 26 insertions(+), 25 deletions(-)

diff --git a/.ansible/roles/rclone_mount/tasks/main.yaml b/.ansible/roles/rclone_mount/tasks/main.yaml
index 9cf9458..6f18c35 100644
--- a/.ansible/roles/rclone_mount/tasks/main.yaml
+++ b/.ansible/roles/rclone_mount/tasks/main.yaml
@@ -3,30 +3,31 @@
   tags:
     - rclone
   block:
-  - name: "Rclone: Packages"
-    tags:
-      - install
-    package:
-      name: "rclone"
-      state: latest
-    become: yes
+    - name: "Rclone: Packages"
+      tags:
+        - install
+      package:
+        name: "rclone"
+        state: latest
+      become: yes
 
-  - name: "Rclone: Configuration"
-    tags:
-      - config
-    template:
-      src: "templates/rclone.conf.j2"
-      dest: "/srv/etc/rclone.conf"
-      mode: "0400"
-      owner: "media"
-      force: no
-    become: yes
+    - name: "Rclone: Configuration"
+      tags:
+        - config
+      template:
+        src: "templates/rclone.conf.j2"
+        dest: "/srv/etc/rclone.conf"
+        mode: "0600"
+        owner: "media"
+        group: "media"
+        force: no
+      become: yes
 
-  - name: "Rclone: Configuration: FUSE"
-    tags:
-      - config
-    lineinfile:
-      path: /etc/fuse.conf
-      regexp: "^#?user_allow_other"
-      line: "user_allow_other"
-    become: yes
+    - name: "Rclone: Configuration: FUSE"
+      tags:
+        - config
+      lineinfile:
+        path: /etc/fuse.conf
+        regexp: "^#?user_allow_other"
+        line: "user_allow_other"
+      become: yes