spk-agmv - lower rights

diff --git a/customer/spk-agmv/agmv-sparkasse-de.pixelpark.net.yaml b/customer/spk-agmv/agmv-sparkasse-de.pixelpark.net.yaml
index 9e60c13251647b8db74d13673cdfea4c6346454c..b032ec7e626c36a3a7c589a67d597772f3b86c5e 100644 (file)
--- a/customer/spk-agmv/agmv-sparkasse-de.pixelpark.net.yaml
+++ b/customer/spk-agmv/agmv-sparkasse-de.pixelpark.net.yaml
@@ -15,7 +15,15 @@ accounts::users:
     comment: "Jan-Paki"
     group: agmv
     groups: apache
+    sudo_cmds:
+      - MYSQLROOT
 
+sudo::configs:
+  cmd_alias:
+    priority: "05"
+    content: |
+      Cmnd_Alias MYSQLROOT = /bin/mysql
+      
 mysql::server::root_password: ENC[PKCS7,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]
 mysql::server::backup::backuppassword: ENC[PKCS7,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]
 site::profile::mysql_server::databases:
@@ -38,13 +46,14 @@ site::profile::ruby_passenger::projects:
     ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
     passenger_user: agmv
     passenger_app_env: production
-    approot: /var/www/spk-agmv
+    approot: /var/www/spk-agmv/current
     approot_owner: agmv
     ruby_version: 'ruby-2.3.1'
+    manage_approot: false # because we are using capistrano
     directories:
       - directory_root:
         provider: directory
-        path: '/var/www/spk-agmv/public'
+        path: '/var/www/spk-agmv/current/public'
         options:
           - FollowSymLinks
           - MultiViews