From 58ea20b2540961fcb68a8ec8f9d97e9d79536993 Mon Sep 17 00:00:00 2001
From: Les Aker <me@lesaker.org>
Date: Mon, 2 Dec 2024 21:06:06 -0500
Subject: [PATCH] now with fancier certs

---
 manifests/init.pp | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/manifests/init.pp b/manifests/init.pp
index 9ef542b..c2d4f01 100644
--- a/manifests/init.pp
+++ b/manifests/init.pp
@@ -27,6 +27,8 @@
   $hook_script =  "#!/usr/bin/env bash
 cp \$LEGO_CERT_PATH ${datadir}/certs/cert
 cp \$LEGO_CERT_KEY_PATH ${datadir}/certs/key
+chown root:1000 ${datadir}/certs/cert ${datadir}/certs/key
+chmod 0640 ${datadir}/certs/cert ${datadir}/certs/key
 /usr/bin/systemctl restart container@influxdb"
 
   file { [$datadir, "${datadir}/data", "${datadir}/certs"]: