Alton is run by the web user.

So the web user needs to be able to access the boto file and know where to look for it.

playbooks/roles/alton/defaults/main.yml

@@ -56,6 +56,7 @@ alton_environment:
   WILL_HTTPSERVER_PORT: "{{ ALTON_HTTPSERVER_PORT }}"
   WORLD_WEATHER_ONLINE_KEY: "{{ ALTON_WORLD_WEATHER_KEY }}"
   JENKINS_URL: "{{ ALTON_JENKINS_URL }}"
+  BOTO_CONFIG: "{{ alton_app_dir }}/.boto"
 
 #
 # OS packages

playbooks/roles/alton/tasks/deploy.yml

@@ -3,8 +3,9 @@
     src="boto.j2"
     dest="{{ alton_app_dir }}/.boto"
     owner="{{ alton_user }}"
-    group="{{ alton_user }}"
-    mode="0600"
+    group="{{ common_web_user }}"
+    mode="0640"
+  notify: restart alton
 
 - name: checkout the code
   git: >