ansible-inventories/arocom#2785 Enhance setfacl to also apply settings to...

ansible-inventories/arocom#2785 Enhance setfacl to also apply settings to existing files and directories

tasks/install.yml

@@ -247,13 +247,20 @@
   tags: 'cron'
   when: item.0.install|default(true)
 
-- name: "Set Extended Permissions"
+- name: "Set Extended Default Permissions"
   command: setfacl -dRm u:{{ apacheUser }}:rwX,g:{{ apacheUser }}:rwX,o::rX {{ webRoot }}/files
   tags:
     - 'deploy'
     - 'SetPermissions'
   when: drupal.install_extra_dirs|default(true)
 
+- name: "Set Extended Permissions"
+  command: setfacl -Rm u:{{ apacheUser }}:rwX,g:{{ apacheUser }}:rwX,o::rX {{ webRoot }}/files
+  tags:
+    - 'deploy'
+    - 'SetPermissions'
+  when: drupal.install_extra_dirs|default(true)
+
 - name: "Make htaccess read-only"
   file:
     path='{{ webRoot }}/files/{{ drupal_domain.0.shortname|default("default") }}/{{ drupal_domain.1 }}/.htaccess'

tasks/users/gitcomposer.yml

@@ -22,9 +22,12 @@
       recurse=yes
       follow=no
 
-  - name: "Extended File Modes and Ownership for Repository"
+  - name: "Extended Default File Modes and Ownership for Repository"
     command: setfacl -dRm u:root:rwX,g:{{ drupal.src.name }}:rwX,o::rX {{ webRoot }}
 
+  - name: "Extended File Modes and Ownership for Repository"
+    command: setfacl -Rm u:root:rwX,g:{{ drupal.src.name }}:rwX,o::rX {{ webRoot }}
+
   tags:
     - 'SetPermissions'
     - 'cron'

tasks/users/gitscript.yml

@@ -22,9 +22,12 @@
       recurse=yes
       follow=no
 
-  - name: "Extended File Modes and Ownership for Repository"
+  - name: "Extended Default File Modes and Ownership for Repository"
     command: setfacl -dRm u:root:rwX,g:{{ drupal.src.name }}:rwX,o::rX {{ webRoot }}{{ drupal.src.git.target }}
 
+  - name: "Extended File Modes and Ownership for Repository"
+    command: setfacl -Rm u:root:rwX,g:{{ drupal.src.name }}:rwX,o::rX {{ webRoot }}{{ drupal.src.git.target }}
+
   - include_tasks: gitscript_cron.yml
     when: drupal.src.cron is defined