Make the systemd unit for kredits-github not world readable

This way the environment variables are kept secret. Only root can read `/proc/$ID/environ`
2019-04-23 14:12:55 +02:00 · 2019-04-23 14:12:55 +02:00 · 2cf611279b
commit 2cf611279b
parent f5051d6352
1 changed files with 1 additions and 1 deletions
--- a/site-cookbooks/kredits-github/recipes/default.rb
+++ b/site-cookbooks/kredits-github/recipes/default.rb
@ -72,7 +72,7 @@ application path_to_deploy do
    source 'nodejs.systemd.service.erb'
    owner 'root'
    group 'root'
-    mode '0644'
+    mode '0640'
    variables(
      user: deploy_user,
      group: deploy_group,