Set modes and groups for edxapp templates.

playbooks/roles/edxapp/tasks/service_variant_config.yml

@@ -3,6 +3,9 @@
   template:
     src: "{{ item[0] }}.{{ item[1] }}.json.j2"
     dest: "{{ edxapp_app_dir }}/{{ item[0] }}.{{ item[1] }}.json"
+    owner: "{{ edxapp_user }}"
+    group: "{{ common_web_group }}"
+    mode: 0640
   become_user: "{{ edxapp_user }}"
   with_nested: 
     - "{{ service_variants_enabled }}"
@@ -17,6 +20,9 @@
   template:
     src: "{{ item[0] }}.{{ item[1] }}.yaml.j2"
     dest: "{{ EDXAPP_CFG_DIR }}/{{ item[0] }}.{{ item[1] }}.yaml"
+    owner: "{{ edxapp_user }}"
+    group: "{{ common_web_group }}"
+    mode: 0640
   become_user: "{{ edxapp_user }}"
   with_nested:
     - "{{ service_variants_enabled }}"
@@ -34,6 +40,7 @@
     dest: "{{ supervisor_available_dir }}/{{ item }}.conf"
     owner: "{{ supervisor_user }}"
     group: "{{ supervisor_user }}"
+    mode: 0644
   become_user: "{{ supervisor_user }}"
   with_items: "{{ service_variants_enabled }}"
   tags:
@@ -47,6 +54,7 @@
     dest: "{{ supervisor_available_dir }}/{{ item }}"
     owner: "{{ supervisor_user }}"
     group: "{{ supervisor_user }}"
+    mode: 0644
   become_user: "{{ supervisor_user }}"
   with_items:
     - edxapp.conf
@@ -59,6 +67,7 @@
   template:
     src: "{{ item }}_gunicorn.py.j2"
     dest: "{{ edxapp_app_dir }}/{{ item }}_gunicorn.py"
+    mode: 0644
   become_user: "{{ edxapp_user }}"
   with_items: "{{ service_variants_enabled }}"
   tags: