From 85f5ed68104de9edd8f8e532dc0c2de931e3ca1b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Isma=C3=ABl=20Bouya?= <ismael.bouya@normalesup.org>
Date: Tue, 16 Apr 2019 01:48:11 +0200
Subject: Fix secret permissions

---
 nixops/modules/websites/tools/dav/davical.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'nixops/modules/websites/tools/dav/davical.nix')

diff --git a/nixops/modules/websites/tools/dav/davical.nix b/nixops/modules/websites/tools/dav/davical.nix
index 4e464eb..32f5483 100644
--- a/nixops/modules/websites/tools/dav/davical.nix
+++ b/nixops/modules/websites/tools/dav/davical.nix
@@ -20,7 +20,7 @@ let
       destDir = "/run/keys/webapps";
       user = apache.user;
       group = apache.group;
-      permissions = "0700";
+      permissions = "0400";
       text = ''
         <?php
         $c->pg_connect[] = "dbname=${env.postgresql.database} user=${env.postgresql.user} host=${env.postgresql.socket} password=${env.postgresql.password}";
-- 
cgit v1.2.3