Retrying mongodb keyfile auth.

ansible/playbooks/setup_www.yml

@@ -16,6 +16,5 @@
     - {role: 'consul', tags: 'consul'}
     - {role: 'consul-client', tags: 'consul'}
     - {role: 'node-exporter', tags: ['node-exporter', 'metrics']}
-    - {role: 'monitor', tags: 'monitor'}
     - {role: 'letsencrypt', tags: 'letsencrypt'}
     - {role: 'haproxy', tags: 'haproxy'}

ansible/roles/mongo/tasks/main.yml

@@ -7,10 +7,14 @@
     path: /var/log/mongodb
 
 - name: Copy MongoDB keyfile
+  become: yes
   copy:
     content: "{{ mongodb_keyfile }}"
     dest: /srv/newsblur/config/mongodb_keyfile.key
+    owner: root
     mode: 0400
+  tags:
+    - keyfile
 
 - name: Make docker network for newsblurnet
   become: yes

ansible/roles/mongo/templates/mongo.conf

@@ -27,9 +27,10 @@ net:
 processManagement:
   timeZoneInfo: /usr/share/zoneinfo
 
-#security:
-#  keyFile: /srv/newsblur/config/mongodb_keyfile.key
-  # authorization: enabled # No RBAC
+security:
+  keyFile: /srv/newsblur/config/mongodb_keyfile.key
+  authorization: enabled
+  transitionToAuth: true
 
 operationProfiling:
   mode: slowOp