roles/openwrt-image: Add support for setting file modes

diff --git a/ansible/roles/openwrt-image/tasks/prepare.yml b/ansible/roles/openwrt-image/tasks/prepare.yml
index 056daf3..29e24cd 100644 (file)
--- a/ansible/roles/openwrt-image/tasks/prepare.yml
+++ b/ansible/roles/openwrt-image/tasks/prepare.yml
@@ -19,6 +19,7 @@
   copy:
     src: "{{ item.file }}"
     dest: "{{ openwrt_imgbuilder_files }}/{{ item.key }}"
+    mode: "{{ item.mode | default(0644) }}"
   with_dict: "{{ openwrt_mixin }}"
   when: '"file" in item'
   loop_control:
@@ -28,6 +29,7 @@
   copy:
     content: "{{ item.value }}"
     dest: "{{ openwrt_imgbuilder_files }}/{{ item.key }}"
+    mode: "{{ item.mode | default(0644) }}"
   with_dict: "{{ openwrt_mixin }}"
   when: '"content" in item'
   loop_control:

diff --git a/ansible/tuer.yml b/ansible/tuer.yml
index 9989e0d..9d4ceec 100644 (file)
--- a/ansible/tuer.yml
+++ b/ansible/tuer.yml
@@ -101,8 +101,8 @@
                option RootPasswordAuth 'off'
                option Port '22000'
 
-          # TODO: mode needs to be 0600
           /etc/dropbear/authorized_keys:
+            mode: 0600
             content: |-
               {% for key in noc_ssh_keys %}
               {{ key }}