ansible-taler-exchange

commit c9a840c1bd128ea46d47d5e5256771689ef2e5e8
parent 027dec06422c152fbee2fef71c930f9b7428c183
Author: Florian Dold <florian@dold.me>
Date:   Thu, 17 Jul 2025 11:39:44 +0200

invoke sanctionscheck as the right user

Diffstat:
M
roles/exchange/handlers/main.yml
 | 
5
++++-

1 file changed, 4 insertions(+), 1 deletion(-)
diff --git a/roles/exchange/handlers/main.yml b/roles/exchange/handlers/main.yml
@@ -1,8 +1,11 @@
 - name: sanctions-reset
   ansible.builtin.command:
+    # Command line argument ("robocop /var/lib/taler-exchange/{{ SANCTION_LIST }}")
+    # is deprecated and lives in the config now.
+    # Only kept for compatibility, should be removed soon.
     cmd: taler-exchange-sanctionscheck --reset --norun robocop /var/lib/taler-exchange/{{ SANCTION_LIST }}
     chdir: /tmp
   become: true
-  become_user: taler-exchange-httpd
+  become_user: taler-exchange-sanctionscheck
   environment:
     ANSIBLE_REMOTE_TMP: /tmp/ansible