1  ---
 2  - name: Create service folders
 3    win_file:
 4      path: '{{ item }}'
 5      state: 'directory'
 6    with_items:
 7      - '{{ beacon_node_service_path }}'
 8      - '{{ beacon_node_config_path }}'
 9      - '{{ beacon_node_service_logs_path }}'
10      - '{{ beacon_node_data_path }}'
11  
12  - name: Fix service folder permissions
13    win_owner:
14      path: '{{ beacon_node_data_path }}'
15      user: '{{ beacon_node_service_user_name }}'
16  
17  # Remove all inherited access ACL and grant full access rights to user.
18  # https://github.com/status-im/nimbus-eth2/blob/unstable/scripts/makedir.sh
19  - name: Fix data folder permissions
20    become: true
21    become_user: '{{ beacon_node_service_user_name }}'
22    vars:
23      ansible_become_user: '{{ beacon_node_service_user_name }}'
24      ansible_become_pass: '{{ beacon_node_service_user_pass }}'
25    win_shell: |
26      icacls '{{ beacon_node_data_path }}' /inheritance:r /grant:r '{{ inventory_hostname_short }}\{{ beacon_node_service_user_name }}:(OI)(CI)(F)'
27  
28  - name: Create data folders
29    become: true
30    become_user: '{{ beacon_node_service_user_name }}'
31    vars:
32      ansible_become_user: '{{ beacon_node_service_user_name }}'
33      ansible_become_pass: '{{ beacon_node_service_user_pass }}'
34    win_file:
35      path: '{{ item }}'
36      state: 'directory'
37    with_items:
38      - '{{ beacon_node_era_dir_path }}'
39      - '{{ beacon_node_secrets_path }}'
40      - '{{ beacon_node_validators_path }}'
41      - '{{ beacon_node_service_bin_path }}'
42  
43  - name: Create JWT secret file (optional)
44    when: beacon_node_exec_layer_jwt_secret is defined
45    copy:
46      dest:    '{{ beacon_node_exec_layer_jwt_secret_path }}'
47      content: '{{ beacon_node_exec_layer_jwt_secret }}'
48  
49  - name: Fix JWT secret file permissions
50    when: beacon_node_exec_layer_jwt_secret is defined
51    win_owner:
52      path: '{{ beacon_node_exec_layer_jwt_secret_path }}'
53      user: '{{ beacon_node_service_user_name }}'
54  
55  - name: Create node config
56    win_template:
57      src:  'config.toml.j2'
58      dest: '{{ beacon_node_config_file_path }}'
59    register: beacon_node_config_file