Merge pull request #98 from corvus-migratorius/fix-caddy-shell

Fix the shell path for the caddy user

.github/workflows/kics.yml

@@ -14,7 +14,7 @@ jobs:
         name: Check out source code
 
       - name: run a KICS scan
-        uses: checkmarx/kics-github-action@63fca4ca72e56edbb5a599ee756e6af1fdb1e785
+        uses: checkmarx/kics-github-action@05aa5eb70eede1355220f4ca5238d96b397e30a6
         with:
           path: .
           token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/linters.yml

@@ -13,7 +13,7 @@ jobs:
     steps:
       - uses: actions/checkout@v6
 
-      - uses: mamba-org/setup-micromamba@4d84239119b14cba1690b971f05c0bab912bea04
+      - uses: mamba-org/setup-micromamba@add3a49764cedee8ee24e82dfde87f5bc2914462
         with:
           micromamba-version: '2.4.0-0'
           environment-file: ci/conda.yml

.github/workflows/molecule.yml

@@ -16,7 +16,7 @@ jobs:
     steps:
       - name: Get PR files and build role matrix
         id: make-matrix
-        uses: actions/github-script@v8
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd
         with:
           script: |
             if (!context.payload.pull_request?.number) {
@@ -64,7 +64,7 @@ jobs:
           fetch-depth: 0
 
       - name: "Set up micromamba"
-        uses: mamba-org/setup-micromamba@4d84239119b14cba1690b971f05c0bab912bea04
+        uses: mamba-org/setup-micromamba@add3a49764cedee8ee24e82dfde87f5bc2914462
         if: ${{ matrix.role != '__no_role__' }}
         with:
           micromamba-version: '2.4.0-0'

roles/caddy/tasks/main.yml

@@ -3,7 +3,7 @@
   ansible.builtin.user:
     name: caddy
     comment: "Caddy web server"
-    shell: /bin/nologin
+    shell: /sbin/nologin
     home: /var/lib/caddy
     state: present
     system: true
@@ -80,3 +80,12 @@
     owner: root
     group: root
     mode: "0644"
+
+- name: "Create a directory for Caddy logs"
+  when: caddy_log_path is defined
+  ansible.builtin.file:
+    state: directory
+    path: "{{ caddy_log_path }}"
+    owner: caddy
+    group: caddy
+    mode: "0755"