Clarifications.

tasks/main.yml

@@ -31,18 +31,18 @@
 - name: Set the permissions of the Gitea binary
   ansible.builtin.file:
     path: /usr/local/bin/gitea
-    owner: root
+    owner: "{{ gitea_user }}"
     group: "{{ gitea_group }}"
-    mode: '0770'
+    mode: '0750'
 
 - name: Pause to generate and save the secrets in SOPS
   ansible.builtin.pause:
     prompt: |
       [SECURITY NOTICE]
       If this is a fresh install, generate these secrets:
-      1. gitea generate secret INTERNAL_TOKEN
-      2. gitea generate secret JWT_SECRET
-      3. gitea generate secret JWT_SECRET
+      1. gitea generate secret INTERNAL_TOKEN - for gitea_internal_token
+      2. gitea generate secret JWT_SECRET - for gitea_lfs_jwt_secret
+      3. gitea generate secret JWT_SECRET - for gitea_jwt_secret
       Copy the following keys into SOPS:
         - gitea_internal_token
         - gitea_lfs_jwt_secret