From 85f5ed68104de9edd8f8e532dc0c2de931e3ca1b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Isma=C3=ABl=20Bouya?= <ismael.bouya@normalesup.org>
Date: Tue, 16 Apr 2019 01:48:11 +0200
Subject: Fix secret permissions

---
 nixops/modules/websites/tools/diaspora/diaspora.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

(limited to 'nixops/modules/websites/tools/diaspora/diaspora.nix')

diff --git a/nixops/modules/websites/tools/diaspora/diaspora.nix b/nixops/modules/websites/tools/diaspora/diaspora.nix
index 074dfb2..c7af9da 100644
--- a/nixops/modules/websites/tools/diaspora/diaspora.nix
+++ b/nixops/modules/websites/tools/diaspora/diaspora.nix
@@ -33,7 +33,7 @@ let
     destDir = "/run/keys/webapps";
     user = "diaspora";
     group = "diaspora";
-    permissions = "0700";
+    permissions = "0400";
     text = ''
       Diaspora::Application.config.secret_key_base = '${env.secret_token}'
     '';
@@ -42,7 +42,7 @@ let
     destDir = "/run/keys/webapps";
     user = "diaspora";
     group = "diaspora";
-    permissions = "0700";
+    permissions = "0400";
     text = ''
       configuration:
         environment:
@@ -121,7 +121,7 @@ let
     destDir = "/run/keys/webapps";
     user = "diaspora";
     group = "diaspora";
-    permissions = "0700";
+    permissions = "0400";
     text = ''
       postgresql: &postgresql
         adapter: postgresql
-- 
cgit v1.2.3