From b51601515e1acec6ff910b33e25d52397dbe13de Mon Sep 17 00:00:00 2001
From: Timo Makinen <tmakinen@foo.sh>
Date: Thu, 16 Sep 2021 19:48:44 +0000
Subject: [PATCH] nginx/server: Allow logsync user to copy logfiles

---
 roles/nginx/server/tasks/main.yml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/roles/nginx/server/tasks/main.yml b/roles/nginx/server/tasks/main.yml
index daf7775..767fb5d 100644
--- a/roles/nginx/server/tasks/main.yml
+++ b/roles/nginx/server/tasks/main.yml
@@ -60,6 +60,13 @@
     minute: "0"
     job: /usr/local/sbin/nginx-logrotate
 
+- import_role:
+    name: sftpuser
+  vars:
+    chroot: "{{ nginx_logdir }}"
+    user: logsync
+    publickeys: "{{ logsync_publickeys }}"
+
 # https://bugzilla.redhat.com/show_bug.cgi?id=1725248
 - block:
     - name: create drop-in directory for service