Make forgejo conf file non group readable

2024-04-13 22:46:00 +02:00 · 2024-04-13 22:46:00 +02:00 · 949163ca59
commit 949163ca59
parent dac63af2ec
1 changed files with 1 additions and 1 deletions
--- a/roles/forgejo/tasks/start.yml
+++ b/roles/forgejo/tasks/start.yml
@ -19,7 +19,7 @@
    dest: "{{ forgejo_conf_dir }}/app.ini"
    owner: git
    group: git
-    mode: 0640
+    mode: 0600
  notify:
    - Restart forgejo service