Commit d5cd31eb authored by nimrod's avatar nimrod
Browse files

Match the permissions of the private key. 

In the renew-certs playbook the permissions are 444, but 644 in the
debian_server role. Settle on 444.
parent f68537ea

roles/debian_server/tasks/main.yml

+1 −1
Original line number Diff line number Diff line
@@ -177,7 +177,7 @@ 


- name: Make sure the private key is accessible

  file:

    mode: 0o0644

    mode: 0o0444

    path: /var/ssl/site.key

    state: file