ansible-roles/roles/vault/tasks/directories.yml

---

- name: Create needed directories
  file: path={{ vault_root_dir }}/{{ item.dir }} state=directory owner={{ item.owner | default(omit) }} group={{ item.group | default(omit) }} mode={{ item.mode | default(omit) }} recurse={{ item.recurse | default(omit) }}
  loop:
    - dir: /
      owner: root
      group: root
      mode: 755
    - dir: backup
      owner: root
      group: root
      mode: 700
    - dir: log
      owner: "{{ vault_user }}"
      group: "{{ vault_user }}"
      mode: u=rwX,g=-,o=-
      recurse: True
    - dir: meta
      owner: root
      group: root
      mode: 700
    - dir: plugins
    - dir: tmp
      owner: "{{ vault_user }}"
      group: "{{ vault_user }}"
      mode: u=rwX,g=-,o=-
      recurse: True
    - dir: data
      owner: "{{ vault_user }}"
      group: "{{ vault_user }}"
      mode: u=rwX,g=-,o=-
      recurse: True
    - dir: etc
      owner: "{{ vault_user }}"
      group: "{{ vault_user }}"
      mode: 700
    - dir: tls
      owner: root
      group: "{{ vault_user }}"
      mode: 750
    - dir: consul-template
  tags: vault