From 949163ca599cc063b7d9b377db4aaa7defe992bd Mon Sep 17 00:00:00 2001
From: Tunui Franken <tfranken@protonmail.com>
Date: Sat, 13 Apr 2024 22:46:00 +0200
Subject: [PATCH] Make forgejo conf file non group readable

---
 roles/forgejo/tasks/start.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/roles/forgejo/tasks/start.yml b/roles/forgejo/tasks/start.yml
index 44dfa65..1f58536 100644
--- a/roles/forgejo/tasks/start.yml
+++ b/roles/forgejo/tasks/start.yml
@@ -19,7 +19,7 @@
     dest: "{{ forgejo_conf_dir }}/app.ini"
     owner: git
     group: git
-    mode: 0640
+    mode: 0600
   notify:
     - Restart forgejo service