From dc8d1a0ef80cac56b132071f063d3aba800136c3 Mon Sep 17 00:00:00 2001
From: nazunalika <tucklesepk@gmail.com>
Date: Wed, 25 May 2022 12:17:46 -0700
Subject: [PATCH] python 3.9 is used for noggin

---
 files/var/www/mantisbt/signup_page.php |  4 ++++
 tasks/mantispatch.yml                  | 24 +++++++++---------------
 tasks/noggin.yml                       |  6 +++---
 vars/mantis.yml                        |  4 ++--
 4 files changed, 18 insertions(+), 20 deletions(-)
 create mode 100644 files/var/www/mantisbt/signup_page.php

diff --git a/files/var/www/mantisbt/signup_page.php b/files/var/www/mantisbt/signup_page.php
new file mode 100644
index 0000000..fa13652
--- /dev/null
+++ b/files/var/www/mantisbt/signup_page.php
@@ -0,0 +1,4 @@
+<?php
+header("Location: https://accounts.rockylinux.org");
+exit;
+?>
diff --git a/tasks/mantispatch.yml b/tasks/mantispatch.yml
index bca8bcb..c16a80e 100644
--- a/tasks/mantispatch.yml
+++ b/tasks/mantispatch.yml
@@ -2,21 +2,15 @@
 # Patch up various pieces of mantis to customize it. We do not rely on local
 # bug tracker accounts. We are doing regex instead of just replacing the
 # file as a whole. Should make it easier to deal with upgrades in theory.
-- name: Change signup_page.php to Account Services
-  ansible.builtin.replace:
-    path: "/var/www/mantisbt-{{ mantis_version }}/{{ item }}"
-    regexp: 'signup_page.php'
-    replace: 'https://accounts.rockylinux.org'
-  with_items:
-    - core/print_api.php
-    - lost_pwd_page.php
-    - login_page.php
-
-- name: Change special signup_page.php reference
-  ansible.builtin.replace:
-    path: "/var/www/mantisbt-{{ mantis_version }}/core/layout_api.php"
-    regexp: "' . helper_mantis_url( 'signup_page.php' ) . '"
-    replace: 'https://accounts.rockylinux.org'
+- name: Overwrite signup page
+  ansible.builtin.copy:
+    src: "var/www/mantisbt/signup_page.php"
+    dest: "/var/www/mantisbt-{{ mantis_version }}/signup_page.php"
+    owner: apache
+    group: apache
+    mode: '0664'
+  tags:
+    - harden
 
 - name: Remove LDAP from checks for signup button
   ansible.builtin.lineinfile:
diff --git a/tasks/noggin.yml b/tasks/noggin.yml
index 37817f7..9f60899 100644
--- a/tasks/noggin.yml
+++ b/tasks/noggin.yml
@@ -2,8 +2,8 @@
 - name: Ensure python is installed
   ansible.builtin.dnf:
     name:
-      - python3
-      - python3-pip
+      - python39
+      - python39-pip
     state: present
 
 - name: Ensure noggin user exists
@@ -31,7 +31,7 @@
 - name: Noggin user must install poetry
   pip:
     name: poetry
-    executable: pip3
+    executable: pip3.9
   become: true
   become_user: noggin
 
diff --git a/vars/mantis.yml b/vars/mantis.yml
index 1172950..af4e657 100644
--- a/vars/mantis.yml
+++ b/vars/mantis.yml
@@ -1,7 +1,7 @@
 ---
 # mantis vars
-mantis_version: 2.25.2
-mantis_checksum: "sha256:8b087e71594fd70d2d2e39d2d2e1285b47a9919d8d8fd268df009df76ebc3671"
+mantis_version: 2.25.3
+mantis_checksum: "sha256:e74db914ecd369f80f52a8672c7c85dafcd4b824bea00e2b4d8ba12f8c55a2fc"
 mantis_pkg:
   - php
   - php-ldap