diff options
author | Jesse Luehrs <doy@tozt.net> | 2018-11-18 19:21:24 -0500 |
---|---|---|
committer | Jesse Luehrs <doy@tozt.net> | 2018-11-18 19:21:24 -0500 |
commit | f7dbe54564e3f5fd8d35dd0467625099b269b7d7 (patch) | |
tree | db6ae7ac2d074377f49bacc4327421d2d5660d03 /modules | |
parent | 23ce2b677b57b5d1e9f56448d5303d215d2fd9f1 (diff) | |
download | puppet-tozt-f7dbe54564e3f5fd8d35dd0467625099b269b7d7.tar.gz puppet-tozt-f7dbe54564e3f5fd8d35dd0467625099b269b7d7.zip |
make duplicati configs only readable by root
they do have secrets in them
Diffstat (limited to 'modules')
-rw-r--r-- | modules/duplicati/manifests/backup.pp | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/modules/duplicati/manifests/backup.pp b/modules/duplicati/manifests/backup.pp index 3c8e19d..b47c0ca 100644 --- a/modules/duplicati/manifests/backup.pp +++ b/modules/duplicati/manifests/backup.pp @@ -3,6 +3,7 @@ define duplicati::backup($content) { file { "/etc/duplicati/$name.json": content => $content, + mode => '0600', require => File['/etc/duplicati']; } |