add quotes around octal values

YAML loaders will load them as strings, providing a consistent behavior. This is also safer as JSON does not support octal values either.

roles/webserver/tasks/nginx.yml

@@ -4,7 +4,7 @@
   template:
     src: "{{ item.src }}"
     dest: "{{ item.dest }}"
-    mode: 0644
+    mode: "0644"
   loop:
     - {src: "nginx.conf.j2", dest: "/etc/nginx/nginx.conf"}
     - {src: "cert.conf.j2", dest: "/etc/nginx/global/cert.conf"}
@@ -17,7 +17,7 @@
   template:
     src: "{{ item }}"
     dest: /etc/nginx/conf.d/{{ item | basename | regex_replace('\.j2$', '') }}
-    mode: 0644
+    mode: "0644"
   with_fileglob: "../templates/conf.d/*.j2"
   notify: reload nginx
 
@@ -27,7 +27,7 @@
   file:
     path: "{{ webserver_nginx_cert_path }}"
     state: directory
-    mode: 0755
+    mode: "0755"
 
 - name: Copy SSL certificates for {{ webserver_domain }}
   copy:
@@ -37,19 +37,19 @@
     dest: "{{ webserver_nginx_cert_path }}/{{ webserver_domain }}.{{ item }}"
     owner: root
     group: root
-    mode: 0600
+    mode: "0600"
   loop: [crt, key, issuer.crt]
   notify: reload nginx
 
 - name: Create nginx.service.d directory
   file:
     path: /etc/systemd/system/nginx.service.d
-    mode: 0755
+    mode: "0755"
     state: directory
 
 - name: Increase max open files
   template:
     src: nginx_systemd.conf.j2
     dest: /etc/systemd/system/nginx.service.d/nginx.conf
-    mode: 0644
+    mode: "0644"
   notify: restart nginx

roles/webserver/tasks/rclone.yml

@@ -3,6 +3,6 @@
   template:
     src: "rclone.conf.j2"
     dest: "{{ rclone_config_file }}"
-    mode: 0600
+    mode: "0600"
     # rclone config file changes while using to force update via ansible use rclone_config_force
     force: "{{ rclone_config_force }}"