telekom-mms / ansible-collection-acme

An Ansible collection for issuing certificates via the ACME protocol.
GNU General Public License v3.0
49 stars 8 forks source link

add possibility to define owner/group for local validation path and local challenge files #48

Closed beechesII closed 3 years ago

beechesII commented 3 years ago

Hello folks,

by default the role amce create the validation path and the challenge files with the user root when you are using the local http-challenge and run your playbooks as root user.

The webserver can not serve these files and the challenge will fail because the challenge files can not validated with acme_certificate.

This PR allow the collection user to define the owner and the group of the validation path and the validation files. The default is set to runner:docker because the tests seems to need this setup.