From 4154b5297a889529afb0b25b3b1a08a7b83601a2588761e2e3d26191b035c8b6 Mon Sep 17 00:00:00 2001
From: Heath Petersen <Heath@HPetersenFamily.com>
Date: Fri, 24 Jul 2026 16:55:53 -0500
Subject: [PATCH] x

---
 bootstrap.yml   | 2 +-
 scraps/TODO.txt | 6 ------
 2 files changed, 1 insertion(+), 7 deletions(-)

diff --git a/bootstrap.yml b/bootstrap.yml
index d66dc0c..c40a328 100644
--- a/bootstrap.yml
+++ b/bootstrap.yml
@@ -169,7 +169,7 @@
       state: directory
       owner: hpf-ans
       group: root
-      mode: ug=rwx,o=
+      mode: u=rwx,go=
 
 # - name: Create ansible-pull.sh crontab entry
 #   become: true
diff --git a/scraps/TODO.txt b/scraps/TODO.txt
index 693c0e7..88cd295 100644
--- a/scraps/TODO.txt
+++ b/scraps/TODO.txt
@@ -4,7 +4,6 @@
 * create production, development branches
 * have bootstrap.sh get ansible_pull_branch variable value
 
-* have bootstrap.yml use ansible.builtin.blockinfile to maintain /etc/skel/.profile
 
 
 
@@ -108,9 +107,4 @@ cron job for ansible-pull
 
 
 use tags to do things like allow selecting software updates, software cleanup, etc.
-ansible_os_family variable
-ansible galaxy
 
-have upgrade pip and ansible in ~hpf-ans/.ansible-venv
-hashicorp vault
-have ansible-pull.sh make sure only one copy is running
\ No newline at end of file