defaults/main.yml

@@ -20,7 +20,7 @@ murmur_database:
   # port: 3306
   # prefix: "murmur_"
 murmur_ice: "tcp -h 127.0.0.1 -p 6502"
-# murmur_icesecret_read: "somesecret"
+# murmur_ice_secret_read: "somesecret"
 # murmur_ice_secret_write: "anothersecret"
 murmur_autoban_attempts: 10
 murmur_autoban_timeframe: 120

tasks/murmur.yml

@@ -4,6 +4,16 @@
     state: present
   register: murmur_installed
 
+- name: Append ssl-cert group to {{ murmur_owner }} user
+  user:
+    name: "{{ murmur_owner }}"
+    state: present
+    groups:
+    - "{{ acme_ssl_group }}"
+    append: yes
+    system: yes
+  notify: restart murmur
+
 - name: Copy Murmur config file
   template:
     src: mumble-server.ini.j2

templates/mumble-server.ini.j2

@@ -94,7 +94,7 @@ icesecretread={{ murmur_ice_secret_read | to_json }}
 {% if murmur_ice_secret_write is defined %}
 icesecretwrite={{ murmur_ice_secret_write | to_json }}
 {% else %}
-icesecretwrite=
+;icesecretwrite=
 {% endif %}
 
 ; If you want to expose Murmur's experimental gRPC API, you