aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorGravatar Joe Banks <[email protected]>2024-06-06 21:27:46 +0100
committerGravatar Joe Banks <[email protected]>2024-06-06 21:27:46 +0100
commit754625bfa2bbb2c2dfcf03289162983abad4a371 (patch)
tree520f3e3c876d463d156c77420c35ba05cddf51b4
parentuse host issued certs for postgres server instead of snakeoil's (diff)
Update directory permissions of certbot generated certificates
-rw-r--r--ansible/roles/certbot/tasks/main.yml3
1 files changed, 2 insertions, 1 deletions
diff --git a/ansible/roles/certbot/tasks/main.yml b/ansible/roles/certbot/tasks/main.yml
index 8eba4ea..8aeae92 100644
--- a/ansible/roles/certbot/tasks/main.yml
+++ b/ansible/roles/certbot/tasks/main.yml
@@ -37,7 +37,8 @@
state: directory
owner: root
group: cert-users
- mode: "0750" # User rwx, Group rx
+ # User read/write/dir execute (list), group read/dir execute (list)
+ mode: "u=rwX,g=rX"
with_items:
- /etc/letsencrypt/live
- /etc/letsencrypt/archive