Give mit-backup permission to read MySQL data files

Author: quentinmit

ansible/roles/sql-backup-ng/tasks/main.yml

@@ -12,3 +12,5 @@
     name: mit-backup
     system: yes
     home: /srv/backup
+    groups:
+      - mysql

ansible/roles/sql-mysql/tasks/main.yml

@@ -13,6 +13,7 @@
       content: |
         [Service]
         LimitNOFILE=32768
+        Environment="UMASK_DIR=0750" "UMASK=0640"
       dest: /etc/systemd/system/mariadb.service.d/99-scripts.conf
     register: override
     notify: restart mariadb