koji_hub: add a httpd drop in config to allow fedora-messaging plugin to work

The fedora messaging plugin needs to have MemoryDenyWriteExecute=no
The default is yes, and it causes it to not work at all.
We should probibly investigate and fix this if we can so we can enable
this protection someday.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>

roles/koji_hub/files/httpd-override.conf

@@ -0,0 +1,2 @@
+[Service]
+MemoryDenyWriteExecute=no

roles/koji_hub/tasks/main.yml

@@ -369,6 +369,26 @@
   - koji_hub
   when: ansible_distribution == "RedHat" and ansible_distribution_major_version|int == 7
 
+- name: make httpd override directory
+  file:
+    state: directory
+    path: /etc/systemd/system/httpd.service.d
+    owner: root
+    group: root
+    mode: "0755"
+  tags:
+  - service
+  - koji_hub
+
+- name: set httpd service override for fedora-messaging to work
+  copy: src=httpd-override.conf dest=/etc/systemd/system/httpd.service.d/override.conf
+  notify:
+  - reload httpd
+  tags:
+  - service
+  - koji_hub
+
+
 - name: Set httpd to run on boot
   service: name=httpd enabled=yes
   ignore_errors: true