From baedc8dc0683a7d101aafd32e9ca1fd7ad89c67b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Aur=C3=A9lien=20Bompard?= <aurelien@bompard.org>
Date: Wed, 22 Oct 2025 17:25:02 +0200
Subject: [PATCH] IPA-tuura: SELinux again
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
---
 roles/ipatuura/tasks/main.yml | 24 ++++++++++++++----------
 1 file changed, 14 insertions(+), 10 deletions(-)

diff --git a/roles/ipatuura/tasks/main.yml b/roles/ipatuura/tasks/main.yml
index 12bde46fbe..8efe144f2d 100644
--- a/roles/ipatuura/tasks/main.yml
+++ b/roles/ipatuura/tasks/main.yml
@@ -116,11 +116,11 @@
     virtualenv: /srv/venv
     virtualenv_command: /usr/bin/python3 -m venv
     name:
-      - psycopg2
-      - setuptools
-      - packaging
-      # https://pagure.io/freeipa/issue/9708
-      - "cryptography<44.0"
+    - psycopg2
+    - setuptools
+    - packaging
+    # https://pagure.io/freeipa/issue/9708
+    - "cryptography<44.0"
   tags:
   - ipatuura
 
@@ -136,8 +136,8 @@
   ansible.builtin.command:
     cmd: /root/install-venv.sh {{item}} /srv/venv
   loop:
-    - ipalib
-    - sssdconfig
+  - ipalib
+  - sssdconfig
   tags:
   - ipatuura
 
@@ -199,7 +199,7 @@
     group: root
     mode: 0644
   notify:
-    - Restart apache
+  - Restart apache
   tags:
   - ipatuura
 
@@ -211,7 +211,7 @@
     group: root
     mode: 0644
   notify:
-    - Reload apache
+  - Reload apache
   tags:
   - ipatuura
 
@@ -228,8 +228,12 @@
 
 - name: Apply selinux type to the wsgi file
   ansible.builtin.file:
-    dest: /srv/*
+    dest: /srv/{{item}}
     setype: httpd_sys_content_t
+  loop:
+  - ipa-tuura
+  - venv
+  - wsgi.py
   tags:
   - ipsilon
   - selinux