Add restic_mode variable

It should be possible to allow all users to run the restic binary.
For that the variable restic_mode should be set to 0755 to set the
permissions of the file accordingly.

README.md

@@ -27,6 +27,7 @@ All variables which can be overridden are stored in [defaults/main.yml](defaults
 | `restic_group` | "root" | system group to run restic |
 | `restic_shell` | "/bin/false" | the shell for the restic user, change this if you want to be able to su to it |
 | `restic_install_path` | "/usr/local/bin" | directory where restic binary will be installed |
+| `restic_mode` | 0750 | permissions of the restic binary, change to 0755 if you want to allow all users to run restic |
 | `restic_cron_mailto` | restic_user | who to mail results of the restic crons to, set to "" to not mail |
 | `restic_cron_stdout_file` | null | what file to log restic output to, null means include in mailto, use /dev/null to discard |
 | `restic_cron_stderr_file` | null | what file to log restic errors to, null means include in mailto, use /dev/null to discard |

defaults/main.yml

@@ -5,6 +5,7 @@ restic_user: root
 restic_group: "{{ restic_user }}"
 restic_shell: "/bin/false"
 restic_home: "/var/lib/restic"
+restic_mode: 0750
 
 restic_install_path: '/usr/local/bin'
 

tasks/install.yml

@@ -64,7 +64,7 @@
   copy:
     src: "/tmp/restic_{{ restic_version }}_{{ go_arch_map[ansible_architecture] | default(ansible_architecture) }}"
     dest: '{{ restic_install_path }}/restic'
-    mode: '0750'
+    mode: '{{ restic_mode }}'
     owner: 'root'
     group: '{{ restic_group }}'