Update to 2022-01-28 18:00

roles/taiga/tasks/conf.yml

@@ -35,6 +35,7 @@
     rabbitmqctl add_vhost {{ taiga_amqp_vhost }}
     rabbitmqctl set_permissions -p {{ taiga_amqp_vhost }} {{ taiga_amqp_user }} ".*" ".*" ".*"
   when: taiga_amqp_server in ['localhost', '127.0.0.1']
+  changed_when: False
   tags: taiga
 
 - when: taiga_install_mode != 'none'
@@ -59,6 +60,17 @@
         app_path: "{{ taiga_root_dir }}/app/back"
         virtualenv: "{{ taiga_root_dir }}/venv"
 
+    - name: Set permissions for nginx
+      command: |
+        setfacl -R -k -b {{ taiga_root_dir }}
+        setfacl -m u:nginx:x {{ taiga_root_dir }}
+        setfacl -m u:nginx:x {{ taiga_root_dir }}/data
+        setfacl -m u:nginx:x {{ taiga_root_dir }}/app
+        setfacl -m u:nginx:x {{ taiga_root_dir }}/app/back
+        setfacl -R -m u:nginx:rX {{ taiga_root_dir }}/app/front
+        setfacl -R -m u:nginx:rX {{ taiga_root_dir }}/app/back/static
+        setfacl -R -m u:nginx:rX {{ taiga_root_dir }}/data/media
+
   environment:
     DJANGO_SETTINGS_MODULE: settings.config
     CELERY_ENABLED: False
@@ -75,6 +87,16 @@
       environment:
         DJANGO_SUPERUSER_PASSWORD: '{{ taiga_admin_pass }}'
 
+    # For some reason, the password isn't correctly initialized
+    # Let's reset it using expect
+    - name: Reset admin user password
+      expect:
+        command: "{{ taiga_root_dir }}/venv/bin/python3 ./manage.py changepassword admin"
+        chdir: "{{ taiga_root_dir }}/app/back/"
+        responses:
+          'Password:\s*': "{{ taiga_admin_pass }}"
+          'Password \(again\):\s*': "{{ taiga_admin_pass }}"
+
     - name: load initial data
       django_manage:
         command: loaddata initial_project_templates
@@ -86,3 +108,4 @@
     CELERY_ENABLED: False
   become_user: "{{ taiga_user }}"
   tags: taiga
+

roles/taiga/tasks/directories.yml

@@ -5,7 +5,7 @@
   loop:
     - dir: "{{ taiga_root_dir }}"
       owner: "{{ taiga_user }}"
-      group: nginx
+      group: "{{ taiga_user }}"
       mode: 750
     - dir: "{{ taiga_root_dir }}/backup"
       owner: root

roles/taiga/tasks/facts.yml

@@ -53,7 +53,6 @@
     - import_tasks: ../includes/get_rand_pass.yml
       vars:
         - pass_file: "{{ taiga_root_dir }}/meta/ansible_admin_pass"
-        - complex: False
     - set_fact: taiga_admin_pass={{ rand_pass }}
   tags: taiga