From 1694a083740c99516bf086340dde0b0e6f5bcce3 Mon Sep 17 00:00:00 2001
From: transcaffeine <transcaffeine@finally.coffee>
Date: Wed, 23 Apr 2025 15:36:47 +0200
Subject: [PATCH] fix(valkey): ensure config path is owned by root by default

---
 roles/valkey/defaults/main/main.yml | 2 ++
 roles/valkey/tasks/main.yml         | 2 ++
 2 files changed, 4 insertions(+)

diff --git a/roles/valkey/defaults/main/main.yml b/roles/valkey/defaults/main/main.yml
index 912f234..aad25ef 100644
--- a/roles/valkey/defaults/main/main.yml
+++ b/roles/valkey/defaults/main/main.yml
@@ -9,6 +9,8 @@ valkey_user: >-2
   valkey{{ valkey_instance_suffix }}
 
 valkey_config_path: "/etc/valkey"
+valkey_config_path_owner: "root"
+valkey_config_path_group: "root"
 valkey_config_file: >-2
   {{ valkey_config_path }}/valkey{{ valkey_instance_suffix }}.conf
 valkey_data_path: "/var/lib/valkey{{ valkey_instance_suffix }}"
diff --git a/roles/valkey/tasks/main.yml b/roles/valkey/tasks/main.yml
index b87ee81..d34d634 100644
--- a/roles/valkey/tasks/main.yml
+++ b/roles/valkey/tasks/main.yml
@@ -39,6 +39,8 @@
     mode: "{{ path.mode | default('0755') }}"
   loop:
     - name: "{{ valkey_config_path }}"
+      owner: "{{ valkey_config_path_owner }}"
+      group: "{{ valkey_config_path_group }}"
     - name: "{{ valkey_data_path }}"
   loop_control:
     loop_var: "path"