Change permissions of service systemd files

plays/services/roles/deploy/cloud/tasks/main.yml

@@ -34,7 +34,7 @@
       ansible.builtin.template:
         src:  "./systemd/{{ item }}.j2"
         dest: "{{ services_service_user_home }}/.config/systemd/user/{{ item }}"
-        mode: 0644
+        mode: 0600
       loop:
         - "pod-cloud.service"
         - "container-cloud-nginx.service"
@@ -65,8 +65,8 @@
     - name: "restart the service"
       ansible.builtin.systemd:
         name: "pod-{{ services_service_name }}.service"
-        state: restarted
+        state: "restarted"
-        scope: user
+        scope: "user"
       when:
         (services_deploy_cloud_config_files.changed or
         services_deploy_cloud_nextcloud_files.changed or

plays/services/roles/deploy/database/tasks/main.yml

@@ -21,7 +21,7 @@
       ansible.builtin.template:
         src:  "./systemd/{{ item }}.j2"
         dest: "{{ services_service_user_home }}/.config/systemd/user/{{ item }}"
-        mode: 0644
+        mode: 0600
       loop:
         - "pod-database.service"
         - "container-database-postgres.service"
@@ -50,8 +50,8 @@
     - name: "restart the service"
       ansible.builtin.systemd:
         name: "pod-{{ services_service_name }}.service"
-        state: restarted
+        state: "restarted"
-        scope: user
+        scope: "user"
       when:
         (services_deploy_database_password_file.changed or
         services_deploy_database_systemd_files.changed) and

plays/services/roles/deploy/git/tasks/main.yml

@@ -14,7 +14,7 @@
       ansible.builtin.template:
         src:  "./systemd/{{ item }}.j2"
         dest: "{{ services_service_user_home }}/.config/systemd/user/{{ item }}"
-        mode: 0644
+        mode: 0600
       loop:
         - "pod-git.service"
         - "container-git-gitea.service"
@@ -43,8 +43,8 @@
     - name: "restart the service"
       ansible.builtin.systemd:
         name: "pod-{{ services_service_name }}.service"
-        state: restarted
+        state: "restarted"
-        scope: user
+        scope: "user"
       when:
         services_deploy_git_systemd_files.changed and
         not services_deploy_git_service_start.changed

plays/services/roles/deploy/lrproxy/tasks/main.yml

@@ -32,7 +32,7 @@
       ansible.builtin.template:
         src:  "./systemd/{{ item }}.j2"
         dest: "{{ services_service_user_home }}/.config/systemd/user/{{ item }}"
-        mode: 0644
+        mode: 0600
       loop:
         - "pod-lrproxy.service"
         - "container-lrproxy-nginx.service"
@@ -97,8 +97,8 @@
     - name: "restart the service"
       ansible.builtin.systemd:
         name: "pod-{{ services_service_name }}.service"
-        state: restarted
+        state: "restarted"
-        scope: user
+        scope: "user"
       when:
         (services_deploy_lrproxy_config_files.changed or
         services_deploy_lrproxy_systemd_files.changed or

plays/services/roles/deploy/notes/tasks/main.yml

@@ -14,7 +14,7 @@
       ansible.builtin.template:
         src:  "./systemd/{{ item }}.j2"
         dest: "{{ services_service_user_home }}/.config/systemd/user/{{ item }}"
-        mode: 0644
+        mode: 0600
       loop:
         - "pod-notes.service"
         - "container-notes-joplin.service"
@@ -44,8 +44,8 @@
     - name: "restart the service"
       ansible.builtin.systemd:
         name: "pod-{{ services_service_name }}.service"
-        state: restarted
+        state: "restarted"
-        scope: user
+        scope: "user"
       when:
         services_deploy_notes_systemd_files.changed and
         not services_deploy_notes_service_start.changed

plays/services/roles/deploy/rproxy/tasks/main.yml

@@ -32,7 +32,7 @@
       ansible.builtin.template:
         src:  "./systemd/{{ item }}.j2"
         dest: "{{ services_service_user_home }}/.config/systemd/user/{{ item }}"
-        mode: 0644
+        mode: 0600
       loop:
         - "pod-rproxy.service"
         - "container-rproxy-nginx.service"
@@ -76,8 +76,8 @@
     - name: "restart the service"
       ansible.builtin.systemd:
         name: "pod-{{ services_service_name }}.service"
-        state: restarted
+        state: "restarted"
-        scope: user
+        scope: "user"
       when:
         (services_deploy_rproxy_config_files.changed or
         services_deploy_rproxy_systemd_files.changed or

plays/services/roles/deploy/www/tasks/main.yml

@@ -36,7 +36,7 @@
       ansible.builtin.template:
         src:  "./systemd/{{ item }}.j2"
         dest: "{{ services_service_user_home }}/.config/systemd/user/{{ item }}"
-        mode: 0644
+        mode: 0600
       loop:
         - "pod-www.service"
         - "container-www-nginx.service"
@@ -79,8 +79,8 @@
     - name: "restart the service"
       ansible.builtin.systemd:
         name: "pod-{{ services_service_name }}.service"
-        state: restarted
+        state: "restarted"
-        scope: user
+        scope: "user"
       when:
         services_deploy_www_systemd_files.changed and
         not services_deploy_www_service_start.changed