now with fancier certs

halyard · Dec 3, 2024 · 58ea20b · 58ea20b
1 parent 885bffc
commit 58ea20b
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/manifests/init.pp b/manifests/init.pp
@@ -27,6 +27,8 @@
   $hook_script =  "#!/usr/bin/env bash
 cp \$LEGO_CERT_PATH ${datadir}/certs/cert
 cp \$LEGO_CERT_KEY_PATH ${datadir}/certs/key
+chown root:1000 ${datadir}/certs/cert ${datadir}/certs/key
+chmod 0640 ${datadir}/certs/cert ${datadir}/certs/key
 /usr/bin/systemctl restart container@influxdb"
 
   file { [$datadir, "${datadir}/data", "${datadir}/certs"]: