Is the Nginx config baking or frying?

[Francis Gulotta]

I've been thinking that the nginx config is as mutable as the application itself. Each app has it's own web server requirements and is in it's rights to change them between releases. However our deploy playbook doesn't pay attention to nginx and it requires root to change the config. (Ideally it wouldn't require root to deploy our apps.)

Thoughts?

[Tyler Kellen]

For the majority of our use-cases we don't need nginx config to be passed over for every deploy. If your particular use-case does, you can add that role to the deploy playbook. For disambiguation, I think it's fine for the deploy process to require root access, but anything that winds up running on the machine as a result shouldn't be running as root.