various: cleanup permissions

roles/authelia/tasks/subtasks/file_backend.yml

@@ -18,7 +18,7 @@
     dest: "{{ authelia_paths_location }}/configuration.yml"
     owner: "{{ user.name }}"
     group: "{{ user.name }}"
-    mode: "0775"
+    mode: "0664"
   when: (not authelia_config_stat.stat.exists)
 
 - name: File | Format 'configuration.yml'
@@ -53,7 +53,7 @@
     dest: "{{ authelia_paths_location }}/users_database.yml"
     owner: "{{ user.name }}"
     group: "{{ user.name }}"
-    mode: "0775"
+    mode: "0664"
   when: (not authelia_user_config_stat.stat.exists)
 
 - name: File | Remove LLDAP Container

roles/authelia/tasks/subtasks/ldap_backend.yml

@@ -23,7 +23,7 @@
     dest: "{{ authelia_paths_location }}/configuration.yml"
     owner: "{{ user.name }}"
     group: "{{ user.name }}"
-    mode: "0775"
+    mode: "0664"
   when: (not authelia_config_stat.stat.exists)
 
 - name: LDAP | Format 'configuration.yml'

roles/autoscan/tasks/subtasks/settings.yml

@@ -21,4 +21,4 @@
         dest: "{{ autoscan_paths_config_location }}"
         owner: "{{ user.name }}"
         group: "{{ user.name }}"
-        mode: "0775"
+        mode: "0664"

roles/backup/tasks/main.yml

@@ -76,7 +76,7 @@
         state: touch
         owner: "{{ user.name }}"
         group: "{{ user.name }}"
-        mode: "0775"
+        mode: "0664"
 
     - name: Check if previous backup folder exists
       ansible.builtin.stat:
@@ -179,7 +179,7 @@
         dest: "{{ backup.local.destination }}"
         owner: "{{ user.name }}"
         group: "{{ user.name }}"
-        mode: "0775"
+        mode: "0664"
         force: true
       with_items:
         - "{{ playbook_dir }}/ansible.cfg"
@@ -205,7 +205,7 @@
         dest: "{{ backup.local.destination }}"
         owner: "{{ user.name }}"
         group: "{{ user.name }}"
-        mode: "0775"
+        mode: "0664"
         force: true
       when: backup_excludes_list.stat.exists
 

roles/backup2/tasks/main.yml

@@ -54,7 +54,7 @@
         state: touch
         owner: "{{ user.name }}"
         group: "{{ user.name }}"
-        mode: "0775"
+        mode: "0664"
 
     - name: Check if previous backup folder exists
       ansible.builtin.stat:
@@ -107,7 +107,7 @@
         dest: "{{ backup.local.destination }}"
         owner: "{{ user.name }}"
         group: "{{ user.name }}"
-        mode: "0775"
+        mode: "0664"
         force: true
       with_items:
         - "{{ playbook_dir }}/ansible.cfg"
@@ -133,7 +133,7 @@
         dest: "{{ backup.local.destination }}"
         owner: "{{ user.name }}"
         group: "{{ user.name }}"
-        mode: "0775"
+        mode: "0664"
         force: true
       when: backup_excludes_list.stat.exists
 

roles/cloudplow/tasks/subtasks/settings.yml

@@ -55,7 +55,7 @@
         dest: "{{ cloudplow_config_path }}"
         owner: "{{ user.name }}"
         group: "{{ user.name }}"
-        mode: "0775"
+        mode: "0664"
         force: true
 
 - name: Settings | Existing 'config.json' tasks

roles/common/tasks/main.yml

@@ -56,7 +56,7 @@
     dest: "/srv/git/saltbox/inventories/host_vars/localhost.yml"
     owner: "{{ user.name }}"
     group: "{{ user.name }}"
-    mode: "0775"
+    mode: "0664"
   when: (not localhost_yml.stat.exists)
 
 - name: Install required packages
@@ -179,7 +179,7 @@
     dest: "/home/{{ user.name }}/.config/pip/pip.conf"
     owner: "{{ user.name }}"
     group: "{{ user.name }}"
-    mode: "0775"
+    mode: "0664"
     force: true
 
 - name: "Install yyq"

roles/ddclient/tasks/main.yml

@@ -48,7 +48,7 @@
     dest: "/opt/ddclient/ddclient.conf"
     owner: "{{ user.name }}"
     group: "{{ user.name }}"
-    mode: "0775"
+    mode: "0664"
     force: false
   when: cloudflare_is_enabled
 

roles/diun/tasks/main.yml

@@ -19,7 +19,7 @@
     dest: "{{ diun_paths_location }}/diun.yml"
     owner: "{{ user.name }}"
     group: "{{ user.name }}"
-    mode: "0775"
+    mode: "0664"
     force: false
 
 - name: Create Docker container

roles/docker/tasks/subtasks/daemon.yml

@@ -21,7 +21,7 @@
   ansible.builtin.template:
     src: daemon.json.j2
     dest: /etc/docker/daemon.json
-    mode: "0775"
+    mode: "0664"
     force: true
 
 - name: "Daemon | Create override directory"

roles/emby/tasks/subtasks/post-install.yml

@@ -25,7 +25,7 @@
     dest: "{{ emby_paths_dlna_xml_location }}"
     owner: "{{ user.name }}"
     group: "{{ user.name }}"
-    mode: "0775"
+    mode: "0664"
     force: false
 
 - name: Post-Install | Settings Tasks

roles/jellyfin/tasks/subtasks/preinstall.yml

@@ -25,7 +25,7 @@
         dest: "{{ jellyfin_paths_sys_xml_location }}"
         owner: "{{ user.name }}"
         group: "{{ user.name }}"
-        mode: "0775"
+        mode: "0664"
         force: false
 
     - name: Preinstall MIGRATE | Remove old `{{ jellyfin_paths_xml_loct_old | basename }}` if it exists"
@@ -71,7 +71,7 @@
     dest: "{{ jellyfin_paths_dlna_location }}"
     owner: "{{ user.name }}"
     group: "{{ user.name }}"
-    mode: "0775"
+    mode: "0664"
     force: false
   when: (not jellyfin_dlna.stat.exists)
 

roles/lldap/tasks/main.yml

@@ -37,7 +37,7 @@
     dest: "{{ lldap_paths_location }}/lldap_config.toml"
     owner: "{{ user.name }}"
     group: "{{ user.name }}"
-    mode: "0775"
+    mode: "0664"
   when: (not lldap_config_stat.stat.exists)
 
 - name: Create Docker container

roles/motd/tasks/main.yml

@@ -104,7 +104,7 @@
     dest: /opt/motd/config.json
     owner: "{{ user.name }}"
     group: "{{ user.name }}"
-    mode: "0775"
+    mode: "0664"
     force: false
   when: (not motd_config.stat.exists)
 
@@ -138,7 +138,7 @@
     state: touch
     owner: "{{ user.name }}"
     group: "{{ user.name }}"
-    mode: "0775"
+    mode: "0664"
 
 - name: Set 'saltbox-motd.py' as executable
   ansible.builtin.file:

roles/nzbthrottle/tasks/subtasks/pre-install.yml

@@ -30,5 +30,5 @@
         dest: "{{ nzbthrottle_paths_config_location }}"
         owner: "{{ user.name }}"
         group: "{{ user.name }}"
-        mode: "0775"
+        mode: "0664"
         force: true

roles/qbittorrent/tasks/subtasks/post-install/settings/main.yml

@@ -17,7 +17,7 @@
     state: present
     owner: "{{ user.name }}"
     group: "{{ user.name }}"
-    mode: "0775"
+    mode: "0664"
 
 - name: Post-Install | Settings | Update Connection\PortRangeMin in 'qBittorrent.conf' config settings (legacy)
   community.general.ini_file:
@@ -29,7 +29,7 @@
     state: present
     owner: "{{ user.name }}"
     group: "{{ user.name }}"
-    mode: "0775"
+    mode: "0664"
 
 - name: Post-Install | Settings | Update WebUI\HostHeaderValidation 'qBittorrent.conf' config settings
   community.general.ini_file:
@@ -41,7 +41,7 @@
     state: present
     owner: "{{ user.name }}"
     group: "{{ user.name }}"
-    mode: "0775"
+    mode: "0664"
 
 - name: Post-Install | Settings | Update WebUI\CSRFProtection 'qBittorrent.conf' config settings
   community.general.ini_file:
@@ -53,7 +53,7 @@
     state: present
     owner: "{{ user.name }}"
     group: "{{ user.name }}"
-    mode: "0775"
+    mode: "0664"
 
 - name: Post-Install | Settings | Update WebUI\CustomHTTPHeaders 'qBittorrent.conf' config settings
   community.general.ini_file:
@@ -65,7 +65,7 @@
     state: present
     owner: "{{ user.name }}"
     group: "{{ user.name }}"
-    mode: "0775"
+    mode: "0664"
 
 - name: Post-Install | Settings | Update WebUI\CustomHTTPHeadersEnabled 'qBittorrent.conf' config settings
   community.general.ini_file:
@@ -77,7 +77,7 @@
     state: present
     owner: "{{ user.name }}"
     group: "{{ user.name }}"
-    mode: "0775"
+    mode: "0664"
 
 - name: Post-Install | Settings | Update LegalNotice.Accepted 'qBittorrent.conf' config settings
   community.general.ini_file:
@@ -89,7 +89,7 @@
     state: present
     owner: "{{ user.name }}"
     group: "{{ user.name }}"
-    mode: "0775"
+    mode: "0664"
 
 - name: Post-Install | Settings | Update WebUI\Port 'qBittorrent.conf' config settings
   community.general.ini_file:
@@ -101,7 +101,7 @@
     state: present
     owner: "{{ user.name }}"
     group: "{{ user.name }}"
-    mode: "0775"
+    mode: "0664"
 
 - name: Post-Install | Settings | Update WebUI\Port 'qBittorrent.conf' config settings
   community.general.ini_file:
@@ -113,7 +113,7 @@
     state: present
     owner: "{{ user.name }}"
     group: "{{ user.name }}"
-    mode: "0775"
+    mode: "0664"
 
 - name: Post-Install | Settings | Update WebUI\TrustedReverseProxiesList 'qBittorrent.conf' config settings
   community.general.ini_file:
@@ -125,7 +125,7 @@
     state: present
     owner: "{{ user.name }}"
     group: "{{ user.name }}"
-    mode: "0775"
+    mode: "0664"
 
 - name: Post-Install | Settings | Update WebUI\ReverseProxySupportEnabled 'qBittorrent.conf' config settings
   community.general.ini_file:
@@ -137,7 +137,7 @@
     state: present
     owner: "{{ user.name }}"
     group: "{{ user.name }}"
-    mode: "0775"
+    mode: "0664"
 
 - name: Post-Install | Settings | Update FileLogger\Enabled 'qBittorrent.conf' config settings
   community.general.ini_file:
@@ -149,7 +149,7 @@
     state: present
     owner: "{{ user.name }}"
     group: "{{ user.name }}"
-    mode: "0775"
+    mode: "0664"
 
 - name: Post-Install | Settings | Update FileLogger\Path 'qBittorrent.conf' config settings
   community.general.ini_file:
@@ -161,7 +161,7 @@
     state: present
     owner: "{{ user.name }}"
     group: "{{ user.name }}"
-    mode: "0775"
+    mode: "0664"
 
 - name: Post-Install | Settings | Generate Password Hash
   when: not qbittorrent_paths_conf_stat.stat.exists
@@ -180,7 +180,7 @@
         state: present
         owner: "{{ user.name }}"
         group: "{{ user.name }}"
-        mode: "0775"
+        mode: "0664"
 
     - name: Post-Install | Settings | Set qBittorrent 'WebUI\Password_PBKDF2'
       community.general.ini_file:
@@ -191,4 +191,4 @@
         state: present
         owner: "{{ user.name }}"
         group: "{{ user.name }}"
-        mode: "0775"
+        mode: "0664"