From e3ad735fb55038e309144d6d76889ae598fab601 Mon Sep 17 00:00:00 2001 From: Eliot Berriot <contact@eliotberriot.com> Date: Mon, 13 May 2019 18:07:51 +0200 Subject: [PATCH] Minor fixes --- README.md | 10 ++++++++++ templates/nginx.conf.j2 | 4 ++-- 2 files changed, 12 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index 9c7123a..8ac4193 100644 --- a/README.md +++ b/README.md @@ -32,6 +32,7 @@ Create a playbook requirements and inventory file: touch requirements.yml touch playbook.yml touch inventory.ini + ansible.cfg Add the following to `requirements.yml`: @@ -47,6 +48,15 @@ Install the role: ansible-galaxy install -r requirements.yml ``` +Add the following to `ansible.cfg`: + +``` +[defaults] +# Needed to use become with unprevileged users, +# see https://docs.ansible.com/ansible/latest/user_guide/become.html#becoming-an-unprivileged-user +allow_world_readable_tmpfiles=true +``` + Add the following to `playbook.yml`: ```yaml diff --git a/templates/nginx.conf.j2 b/templates/nginx.conf.j2 index 48893b1..d917820 100644 --- a/templates/nginx.conf.j2 +++ b/templates/nginx.conf.j2 @@ -23,8 +23,8 @@ server { ssl_certificate {{ funkwhale_ssl_cert_path }}; ssl_certificate_key {{ funkwhale_ssl_key_path }}; {% else -%} - ssl_certificate /ect/lectsencrypt/live/{{ funkwhale_hostname }}/fullchain.pem; - ssl_certificate_key /ect/lectsencrypt/live/{{ funkwhale_hostname }}/privkey.pem; + ssl_certificate /etc/letsencrypt/live/{{ funkwhale_hostname }}/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/{{ funkwhale_hostname }}/privkey.pem; {% endif -%} # from https://cipherli.st/ ssl_prefer_server_ciphers on; -- GitLab