kosmos/chef
kosmos/chef
8
3
Fork 0
Code Issues 30 Pull Requests 3 Projects 2 Activity

Make the systemd unit for kredits-github not world readable

Browse Source 
This way the environment variables are kept secret. Only root can read
`/proc/$ID/environ`
This commit is contained in:
Greg Karékinian 2019-04-23 14:12:55 +02:00
parent f5051d6352
commit 2cf611279b
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
site-cookbooks/kredits-github/recipes/default.rb
View File

@ -72,7 +72,7 @@ application path_to_deploy do
source 'nodejs.systemd.service.erb' source 'nodejs.systemd.service.erb'
owner 'root' owner 'root'
group 'root' group 'root'
mode '0644' mode '0640'
variables( variables(
user: deploy_user, user: deploy_user,
group: deploy_group, group: deploy_group,