cleanup: fixed role execution order and directory chmod permissions

deploy.yaml

@@ -1,5 +1,6 @@
 ---
 - hosts: jellyfin
   roles:
+    - acme.sh
     - nginx
-  
+    - jellyfin

provision.yaml

@@ -57,8 +57,21 @@
       state: started
       enabled: true
 
+   - name: Enable podman auto updates
+     ansible.builtin.systemd_service:
+      name: podman-auto-update.timer
+      state: started
+      enabled: true
+
    - name: Add /srv dir
      ansible.builtin.file:
-      path: /src
+      path: /srv
       state: directory
-      mode: '0644'
+      mode: '0755'
+
+   - name: Add /secrets dir
+     ansible.builtin.file:
+       path: /secrets
+       state: directory
+       mode: '0755'
+