fix(debian-ish): root owns the logs

Author: alxwr

openvpn/config.sls

@@ -169,7 +169,7 @@ openvpn_{{ type }}_{{ name }}_log_file:
     - name: {{ config.log }}
     - makedirs: True
     - replace: False
-    {{ _permissions(640) }}
+    {{ _permissions(640, map.log_user) }}
     - require_in:
       {%- if map.multi_services %}
       - service: openvpn_{{name}}_service
@@ -185,7 +185,7 @@ openvpn_{{ type }}_{{ name }}_log_file_append:
     - name: {{ config.log_append }}
     - makedirs: True
     - replace: False
-    {{ _permissions(640) }}
+    {{ _permissions(640, map.log_user) }}
     - require_in:
       {%- if map.multi_services %}
       - service: openvpn_{{name}}_service

openvpn/defaults.yaml

@@ -7,6 +7,8 @@ openvpn:
   external_repo_supported: []
   external_repo_version: stable
   group: nobody
+  # None, will default to 'user'
+  log_user:
   multi_services: False
   pkgs: ['openvpn']
   service: openvpn

openvpn/osfamilymap.yaml

@@ -4,6 +4,7 @@ Arch:
     - easy-rsa
 Debian:
   group: nogroup
+  log_user: root
 RedHat:
   pkgs:
     - openvpn