Fix Forbidden implicit octal value from playbooks

playbooks/adm.yml

@@ -63,6 +63,6 @@
           Host shell??.foo.sh
             CheckHostIP no
         dest: /root/.ssh/config
-        mode: 0600
+        mode: "0600"
         owner: root
         group: "{{ ansible_wheel }}"

playbooks/collab.yml

@@ -38,7 +38,7 @@
       ansible.builtin.copy:
         content: "RedirectMatch permanent \"^/$\" /collab/\n"
         dest: "/etc/httpd/conf.local.d/redirects.conf"
-        mode: 0644
+        mode: "0644"
         owner: root
         group: "{{ ansible_wheel }}"
       notify: Restart apache
@@ -61,7 +61,7 @@
         dest: /srv/wikis/collab/htdocs/.htaccess
         owner: collab
         group: collab
-        mode: 0660
+        mode: "0660"
         seuser: _default
         setype: _default
 

playbooks/dna-gw.yml

@@ -27,7 +27,7 @@
       ansible.builtin.copy:
         dest: /etc/dhclient.conf
         content: "ignore domain-name-servers, domain-name;\n"
-        mode: 0644
+        mode: "0644"
         owner: root
         group: "{{ ansible_wheel }}"
 
@@ -53,7 +53,7 @@
       ansible.builtin.file:
         path: /srv/tftpboot/etc
         state: directory
-        mode: 0755
+        mode: "0755"
         owner: root
         group: "{{ ansible_wheel }}"
 
@@ -64,7 +64,7 @@
           stty com0 115200
           set tty com0
           boot tftp:bsd.rd
-        mode: 0644
+        mode: "0644"
         owner: root
         group: "{{ ansible_wheel }}"
 
@@ -73,7 +73,7 @@
         url: "https://ftp.eu.openbsd.org/pub/OpenBSD/7.3/amd64/pxeboot"
         checksum: sha1:161b36d4ae3d786aa98c4836abba25f2bca8979d
         dest: /srv/tftpboot/pxeboot
-        mode: 0644
+        mode: "0644"
         owner: root
         group: "{{ ansible_wheel }}"
 
@@ -82,7 +82,7 @@
         url: "https://ftp.eu.openbsd.org/pub/OpenBSD/7.3/amd64/bsd.rd"
         checksum: sha1:72b46ad8e97b2082d145a739264e818dcd154021
         dest: /srv/tftpboot/bsd.rd
-        mode: 0644
+        mode: "0644"
         owner: root
         group: "{{ ansible_wheel }}"
 
@@ -91,7 +91,7 @@
         url: "https://boot.foo.sh/openbsd/install.conf"
         checksum: sha1:f6270708dad3f759df02eefeab300d9b8670f3d4
         dest: /srv/tftpboot/install.conf
-        mode: 0644
+        mode: "0644"
         owner: root
         group: "{{ ansible_wheel }}"
 
@@ -113,7 +113,7 @@
               }
             }
           }
-        mode: 0644
+        mode: "0644"
         owner: root
         group: "{{ ansible_wheel }}"
       notify: Restart nginx
@@ -122,7 +122,7 @@
       ansible.builtin.copy:
         dest: "{{ tls_private }}/dns.home.foo.sh.key"
         src: "{{ item }}"
-        mode: 0600
+        mode: "0600"
         owner: root
         group: "{{ ansible_wheel }}"
       with_first_found:
@@ -135,7 +135,7 @@
       ansible.builtin.copy:
         dest: "{{ tls_certs }}/dns.home.foo.sh.crt"
         src: "{{ item }}"
-        mode: 0644
+        mode: "0644"
         owner: root
         group: "{{ ansible_wheel }}"
       with_first_found:
@@ -148,7 +148,7 @@
       ansible.builtin.copy:
         dest: "/var/unbound/db/{{ item }}"
         src: "/srv/dns/{{ item }}"
-        mode: 0644
+        mode: "0644"
         owner: root
         group: "{{ ansible_wheel }}"
       tags: dns

playbooks/fsol-gw.yml

@@ -32,14 +32,14 @@
       ansible.builtin.copy:
         dest: /etc/dhclient.conf
         content: "ignore domain-name-servers, domain-name;\n"
-        mode: 0644
+        mode: "0644"
         owner: root
         group: "{{ ansible_wheel }}"
     - name: Create pfsync interface
       ansible.builtin.copy:
         dest: /etc/hostname.pfsync0
         content: "up syncdev vio1\n"
-        mode: 0600
+        mode: "0600"
         owner: root
         group: "{{ ansible_wheel }}"
 

playbooks/include/deploy-kvm-guest.yml

@@ -75,7 +75,7 @@
           echo '{{ root_pubkey }}' > /root/.ssh/authorized_keys
           %end
         dest: "{{ tmpdir.path }}/include.ks"
-        mode: 0600
+        mode: "0600"
         owner: root
         group: "{{ ansible_wheel }}"
       delegate_to: "{{ vmhost }}"

playbooks/nas.yml

@@ -51,7 +51,7 @@
           /export/roles  172.20.30.0/24(rw,root_squash,secure,sec=krb5p) \
                          @nfsclients-rw(rw,root_squash,secure) \
                          @nfsclients-ro(ro,root_squash,secure)
-        mode: 0644
+        mode: "0644"
         owner: root
         group: "{{ ansible_wheel }}"
       notify: Restart nfs-server

playbooks/nms.yml

@@ -49,7 +49,7 @@
       ansible.builtin.copy:
         dest: "/var/lib/unbound/{{ item }}"
         src: "/srv/dns/{{ item }}"
-        mode: 0644
+        mode: "0644"
         owner: root
         group: "{{ ansible_wheel }}"
       tags: dns

playbooks/print.yml

@@ -29,7 +29,7 @@
       ansible.builtin.copy:
         dest: "/var/lib/unbound/{{ item }}"
         src: "/srv/dns/{{ item }}"
-        mode: 0644
+        mode: "0644"
         owner: root
         group: "{{ ansible_wheel }}"
       tags: dns

playbooks/shell.yml

@@ -98,6 +98,6 @@
         content: |
           Host *.home.foo.sh !gw.home.foo.sh
             ProxyJump root@gw.home.foo.sh
-        mode: 0644
+        mode: "0644"
         owner: root
         group: "{{ ansible_wheel }}"

playbooks/static.yml

@@ -48,7 +48,7 @@
             AllowOverride AuthConfig FileInfo Indexes Limit
             Require all granted
           </Directory>
-        mode: 0644
+        mode: "0644"
         owner: root
         group: "{{ ansible_wheel }}"
       notify: Restart apache

playbooks/zm.yml

@@ -45,7 +45,7 @@
       ansible.builtin.copy:
         dest: "/var/lib/unbound/{{ item }}"
         src: "/srv/dns/{{ item }}"
-        mode: 0644
+        mode: "0644"
         owner: root
         group: "{{ ansible_wheel }}"
       tags: dns
@@ -80,7 +80,7 @@
             AuthName        "Password Required"
             Require         valid-user
           </Location>
-        mode: 0644
+        mode: "0644"
         owner: root
         group: "{{ ansible_wheel }}"
       notify: Restart apache