问如何在使用Ansible部署应用程序时确保正确的权限

EN

---
- hosts: pyapp
  become: true

  tasks:

  - name: Make sure packages are installed 
    yum:
      name: supervisor
      state: latest

  - name: Create group in local system
    group:
      name: pyapp
      gid: '1234'

  - name: Configure local account in system
    user:
      name: "pyapp"
      system: yes
      createhome: yes
      uid: '1234'
      group: '1234'
      shell: /sbin/nologin
      comment: "My Python App"
      state: present

  - name: Download and unpack
    unarchive:
      src: "https://{{ DOWNLOAD_URL }}/myPythonApp.tar.gz"
      dest: "/home/pyapp/"
      remote_src: yes
      owner: "pyapp"
      group: "pyapp"

  - name: Make sure log directory exists
    file:
      path: "/var/log/pyapp"
      state: directory
      owner: 'pyapp'
      group: 'pyapp'
    
  - name: Make sure supervisord config file is provided
    copy:
      src: "pyapp.ini"
      dest: "/etc/supervisord.d/pyapp.ini"
    
  - name: Make sure service becomes started and enabled
    systemd:
      name: supervisord
      state: started
      enabled: true
      daemon_reload: true

  - name: Make sure application is in started state
    supervisorctl:
      name: pyapp
      state: started

[program:pyapp]
directory=/home/pyapp
command=/usr/bin/python /home/pyapp/myPythonApp.py
user=pyapp
process_name=%(program_name)s
autorestart=true
stderr_logfile=/var/log/pyapp/stderr.log
stdout_logfile=/var/log/pyapp/stdout.log