From 02f1d62715b4d5f94811dd361f8934b199e6e5ba Mon Sep 17 00:00:00 2001
From: Robert Rapp <r.rapp@mygodel.de>
Date: Mon, 12 Oct 2026 20:26:20 +0200
Subject: [PATCH] =?UTF-8?q?infra-stack:=20Repo-Auszug=20f=C3=BCr=20Contain?=
 =?UTF-8?q?er-Benutzer=20lesbar=20machen=20(Clone=20auf=20ops=20ist=200600?=
 =?UTF-8?q?)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 platform/proxmox/ansible/roles/infra-stack/tasks/main.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/platform/proxmox/ansible/roles/infra-stack/tasks/main.yml b/platform/proxmox/ansible/roles/infra-stack/tasks/main.yml
index 1fbb3a9..91227dd 100644
--- a/platform/proxmox/ansible/roles/infra-stack/tasks/main.yml
+++ b/platform/proxmox/ansible/roles/infra-stack/tasks/main.yml
@@ -25,6 +25,8 @@
     dest: "{{ infra_repo_dir }}/"
     delete: true
     rsync_opts:
+      # Der Clone auf ops ist teils 0600/0700; Container-Benutzer (nobody, grafana, knaster) müssen lesen können
+      - "--chmod=go+rX,go-w"
       - "--exclude=__pycache__"
       - "--exclude=.pytest_cache"
       - "--exclude=*.egg-info"