Secure Koji setup: add koji user, fix NFS/SELinux, use CentOS Stream 10 repos

roles/kojira/tasks/main.yaml

@@ -26,9 +26,13 @@
     - { src: "kojira.key", dest: "/etc/pki/koji/kojira.key", mode: "0600" }
 
 - name: "Concatenate certificate and key into a PEM file"
-  ansible.builtin.copy:
-    content: "{{ lookup('file', '/etc/pki/koji/kojira.crt') }}\n{{ lookup('file', '/etc/pki/koji/kojira.key') }}"
-    dest: "/etc/pki/koji/kojira.pem"
+  ansible.builtin.shell: cat /etc/pki/koji/kojira.crt /etc/pki/koji/kojira.key > /etc/pki/koji/kojira.pem
+  args:
+    creates: /etc/pki/koji/kojira.pem
+
+- name: Set permissions on kojira PEM file
+  ansible.builtin.file:
+    path: /etc/pki/koji/kojira.pem
     mode: "0600"
 
 - name: Start and enable kojira service