From 85f5ed68104de9edd8f8e532dc0c2de931e3ca1b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Isma=C3=ABl=20Bouya?= <ismael.bouya@normalesup.org>
Date: Tue, 16 Apr 2019 01:48:11 +0200
Subject: Fix secret permissions

---
 nixops/modules/websites/aten/aten.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'nixops/modules/websites/aten')

diff --git a/nixops/modules/websites/aten/aten.nix b/nixops/modules/websites/aten/aten.nix
index ac102c9..6059eb6 100644
--- a/nixops/modules/websites/aten/aten.nix
+++ b/nixops/modules/websites/aten/aten.nix
@@ -34,7 +34,7 @@ let
       destDir = "/run/keys/webapps";
       user = apache.user;
       group = apache.group;
-      permissions = "0700";
+      permissions = "0400";
       text = ''
         SetEnv APP_ENV      "${environment}"
         SetEnv APP_SECRET   "${config.secret}"
-- 
cgit v1.2.3