summaryrefslogtreecommitdiffstats
path: root/modules
diff options
context:
space:
mode:
authorJesse Luehrs <doy@tozt.net>2018-11-18 19:21:24 -0500
committerJesse Luehrs <doy@tozt.net>2018-11-18 19:21:24 -0500
commitf7dbe54564e3f5fd8d35dd0467625099b269b7d7 (patch)
treedb6ae7ac2d074377f49bacc4327421d2d5660d03 /modules
parent23ce2b677b57b5d1e9f56448d5303d215d2fd9f1 (diff)
downloadpuppet-tozt-f7dbe54564e3f5fd8d35dd0467625099b269b7d7.tar.gz
puppet-tozt-f7dbe54564e3f5fd8d35dd0467625099b269b7d7.zip
make duplicati configs only readable by root
they do have secrets in them
Diffstat (limited to 'modules')
-rw-r--r--modules/duplicati/manifests/backup.pp1
1 files changed, 1 insertions, 0 deletions
diff --git a/modules/duplicati/manifests/backup.pp b/modules/duplicati/manifests/backup.pp
index 3c8e19d..b47c0ca 100644
--- a/modules/duplicati/manifests/backup.pp
+++ b/modules/duplicati/manifests/backup.pp
@@ -3,6 +3,7 @@ define duplicati::backup($content) {
file { "/etc/duplicati/$name.json":
content => $content,
+ mode => '0600',
require => File['/etc/duplicati'];
}