websites: dustin.hatch.name: Deploy new site

Promoting the new site I have been working on at *dustin.hatch.is* to my
main domain, *dustin.hatch.name*.  The new site is just static content,
generated and uploaded by a Jenkins job.

Finally have a certificate for *dustin.hatch.name* now, too!

roles/websites/dustin.hatch.name/tasks/main.yml

@@ -1,36 +1,36 @@
-- name: ensure mod_wsgi is installed
-  package:
-    name=python3-mod_wsgi
-    state=present
-  notify: restart httpd
-  tags:
-  - install
-
 - name: ensure rsync is installed
   package:
-    name=rsync
-    state=present
+    name: rsync
+    state: present
   tags:
   - install
 
 - name: ensure app group exists
   group:
-    name=webapp.dchwww
-    state=present
+    name: webapp.dchwww
+    state: present
 - name: ensure app user exists
   user:
-    name=webapp.dchwww
-    group=webapp.dchwww
-    home=/srv/www/dustin.hatch.name
-    createhome=yes
-    state=present
+    name: webapp.dchwww
+    group: webapp.dchwww
+    home: /srv/www/dustin.hatch.name
+    createhome: true
+    state: present
 
 - name: ensure app home directory permissions are set
   file:
-    path=/srv/www/dustin.hatch.name
-    mode=0755
-    state=directory
+    path: /srv/www/dustin.hatch.name
+    mode: u=rwx,go=rx
+    state: directory
 
+- name: ensure app ssh home directory exists
+  file:
+    path: /srv/www/dustin.hatch.name/.ssh
+    mode: '0700'
+    owner: webapp.dchwww
+    group: webapp.dchwww
+    setype: ssh_home_t
+    state: directory
 - name: ensure publisher keys are trusted
   authorized_key:
     key: "{{ dchwww_publisher_keys|join('\n') }}"
@@ -39,22 +39,16 @@
 - name: ensure authorized_keys file permissions are correct
   file:
     path: /srv/www/dustin.hatch.name/.ssh/authorized_keys
-    mode: '0600'
+    mode: u=rw,go=
     owner: webapp.dchwww
     group: webapp.dchwww
     setype: ssh_home_t
 
-- name: ensure virtualenv exists
-  become: true
-  become_user: webapp.dchwww
-  pip:
-    name: pip
-    virtualenv: /srv/www/dustin.hatch.name/venv
-    virtualenv_command: /usr/bin/python3 -m venv
-
 - name: ensure apache is configured to serve dustin.hatch.name
   copy:
-    src=dustin.hatch.name.httpd.conf
-    dest=/etc/httpd/conf.d/dustin.hatch.name.conf
-    mode=0644
+    src: dustin.hatch.name.httpd.conf
+    dest: /etc/httpd/conf.d/dustin.hatch.name.conf
+    mode: u=rw,go=r
   notify: reload httpd
+  tags:
+  - httpd-config