make home for service and copy

roles/httpd/tasks/html.yml

@@ -43,6 +43,16 @@
   with_fileglob:
         - html/assets/*
 
+# copy all services, even if not permissioned elsewhere
+- name: Copy services files
+  copy: src={{ item }}
+        dest={{ doc_root }}/common/services
+        mode=0644
+        owner=root
+        group=root
+  with_fileglob:
+        - html/services/*
+
 - name: Create symlink from assets to iiab.ini
   file: src=/etc/iiab/iiab.ini
         dest={{ doc_root }}/common/assets/iiab.ini

roles/httpd/tasks/main.yml

@@ -161,3 +161,9 @@
   template: src=020_apache_poweroff.j2
             dest=/etc/sudoers.d/020_apache_poweroff
             mode=0755
+  when: allow_apache_sudo
+
+- name: Remove apache_user permission for poweroff
+  file: dest=/etc/sudoers.d/020_apache_poweroff
+        state=absent
+  when: not allow_apache_sudo