use stricter file permissions for acme.json

opencrvs · Feb 9, 2024 · 30292b2 · 30292b2
1 parent 04fa572
commit 30292b2
Showing 1 changed file with 3 additions and 4 deletions.
diff --git a/infrastructure/server-setup/tasks/traefik.yml b/infrastructure/server-setup/tasks/traefik.yml
@@ -4,15 +4,14 @@
  state: touch
  owner: root
  group: application
- # Owner has rwx, group r, others no permissions
- mode: '0740'
+ # Owner has rw, others no permissions
+ mode: '0600'
 
 - name: 'Create certs directory for traefik'
  file:
  path: /data/traefik/certs
  state: directory
- mode: '700'
  owner: root
  group: application
  # Owner has rwx, group r, others no permissions
- mode: '0740'
+ mode: '0740'