Fix perms and user to run as

playbooks/roles/discern/tasks/main.yml

@@ -106,10 +106,10 @@
 
 #Create the templates for upstart services
 - name: render celery service from template
-  template: src=celery.conf.j2 dest=/etc/init/celery.conf owner=root group=edx mode=2775
+  template: src=celery.conf.j2 dest=/etc/init/celery.conf owner=root group=edx mode=0664
 
 - name: render discern service from template
-  template: src=discern.conf.j2 dest=/etc/init/discern.conf owner=root group=edx mode=2775
+  template: src=discern.conf.j2 dest=/etc/init/discern.conf owner=root group=edx mode=0664
 
 - name: create nginx directory and set perms
   file: path=/etc/nginx/sites-available owner=root group=edx mode=2775 state=directory

playbooks/roles/discern/templates/celery.conf.j2

@@ -12,6 +12,6 @@ respawn limit 3 30
 env DJANGO_SETTINGS_MODULE={{discern_settings}}
 
 chdir {{discern_dir}}
-setuid {{remote_user}}
+setuid {{discern_user}}
 
 exec {{venv_dir}}/bin/python {{discern_dir}}/manage.py celeryd --loglevel=info --settings={{discern_settings}} --pythonpath={{discern_dir}} -B --autoscale={{ ansible_processor_cores * 2 }},1

playbooks/roles/discern/templates/discern.conf.j2

@@ -16,6 +16,6 @@ env LANG=en_US.UTF-8
 env DJANGO_SETTINGS_MODULE={{discern_settings}}
 
 chdir {{discern_dir}}
-setuid {{remote_user}}
+setuid {{discern_user}}
 
 exec {{venv_dir}}/bin/gunicorn --preload -b 127.0.0.1:$PORT -w $WORKERS --timeout=30 --pythonpath={{discern_dir}} discern.wsgi
\ No newline at end of file