ansible/roles/ssmtp/tasks/main.yml

- name: Install SSMTP
  aur: name=ssmtp skip_installed=yes
  become_user: aur_builder


- name: Set up ssmtp.conf
  template:
   src: ssmtp_conf.j2
   dest: /etc/ssmtp/ssmtp.conf
   owner: root
   group: mail
   mode: 0640
  become: yes

- name: Set up revaliases
  template: 
    src: revaliases.j2 
    dest: /etc/ssmtp/revaliases
    owner: root
    group: mail
    mode: 0640
  become: yes

- name: set right on /usr/sbin/ssmtp
  file:
      path: /usr/sbin/ssmtp # required. Path to the file being managed.
      group: mail # not required. Name of the group that should own the file/directory, as would be fed to I(chown).
      mode: 2711 # not required. Mode the file or directory should be. For those used to I(/usr/bin/chmod) remember that modes are actually octal numbers. You must either add a leading zero so that Ansible's YAML parser knows it is an octal number (like C(0644) or C(01777)) or quote it (like C('644') or C('1777')) so Ansible receives a string and can do its own conversion from string into number.  Giving Ansible a number without following one of these rules will end up with a decimal number which will have unexpected results. As of version 1.8, the mode may be specified as a symbolic mode (for example, C(u+rwx) or C(u=rw,g=r,o=r)).
      owner: root # not required. Name of the user that should own the file/directory, as would be fed to I(chown).
  become: yes      

#sudo chown root:mail /usr/sbin/ssmtp /etc/ssmtp{,/{ssmtp.conf,revaliases}}
#sudo chmod 2711 /usr/sbin/ssmtp
#sudo chmod o-rwx /etc/ssmtp /etc/ssmtp/ssmtp.conf;