fix: disable cron access (supabase#103)

darora · web-flow · commit af1f8339990f · 2021-11-22T23:13:48.000+08:00
diff --git a/ansible/files/cron.deny b/ansible/files/cron.deny
@@ -0,0 +1,2 @@
+ubuntu
+postgres
diff --git a/ansible/playbook.yml b/ansible/playbook.yml
@@ -104,6 +104,11 @@
         src: files/logrotate-postgres-csv
         dest: /etc/logrotate.d/postgres-csv
 
+    - name: Disable cron access
+      copy:
+        src: files/cron.deny
+        dest: /etc/cron.deny
+
     - name: Configure logrotation to run every hour
       shell:
         cmd: |
@@ -112,12 +117,6 @@
             systemctl reenable logrotate.timer
       become: yes
 
-    - name: restart crond
-      systemd:
-        state: restarted
-        name: cron
-      become: yes
-
     - name: Enhance fail2ban
       import_tasks: tasks/setup-fail2ban.yml
 
