From b58ef7ab840655f168a2415ca225cbd161006ba0 Mon Sep 17 00:00:00 2001
From: mustard <sussybaka@homelab0ne.xyz>
Date: Tue, 14 Oct 2025 00:21:16 +0200
Subject: [PATCH] cleanup: fixed role execution order and directory chmod
 permissions

---
 deploy.yaml    |  3 ++-
 provision.yaml | 17 +++++++++++++++--
 2 files changed, 17 insertions(+), 3 deletions(-)

diff --git a/deploy.yaml b/deploy.yaml
index a3e8d3d..da9b6e9 100644
--- a/deploy.yaml
+++ b/deploy.yaml
@@ -1,5 +1,6 @@
 ---
 - hosts: jellyfin
   roles:
+    - acme.sh
     - nginx
-  
+    - jellyfin
diff --git a/provision.yaml b/provision.yaml
index ded0f3d..c3d2d9d 100644
--- a/provision.yaml
+++ b/provision.yaml
@@ -57,8 +57,21 @@
       state: started
       enabled: true
 
+   - name: Enable podman auto updates
+     ansible.builtin.systemd_service:
+      name: podman-auto-update.timer
+      state: started
+      enabled: true
+
    - name: Add /srv dir
      ansible.builtin.file:
-      path: /src
+      path: /srv
       state: directory
-      mode: '0644'
+      mode: '0755'
+
+   - name: Add /secrets dir
+     ansible.builtin.file:
+       path: /secrets
+       state: directory
+       mode: '0755'
+