Fix secret permissions

[perso/Immae/Config/Nix.git] / nixops / modules / websites / aten / aten.nix

diff --git a/nixops/modules/websites/aten/aten.nix b/nixops/modules/websites/aten/aten.nix
index ac102c9d5d26e59b7bf7f7c6f7628d8a88319d04..6059eb6b85fd64eb07ae1d59c0054b1be88c9d83 100644 (file)
--- a/nixops/modules/websites/aten/aten.nix
+++ b/nixops/modules/websites/aten/aten.nix
@@ -34,7 +34,7 @@ let
       destDir = "/run/keys/webapps";
       user = apache.user;
       group = apache.group;
-      permissions = "0700";
+      permissions = "0400";
       text = ''
         SetEnv APP_ENV      "${environment}"
         SetEnv APP_SECRET   "${config.secret}"