Tighten permissions on API file

19493ced · Chris Croome · fef370a6 · 19493ced
Commit 19493ced authored 7 years ago by Chris Croome
--- a/roles/api/tasks/main.yml
+++ b/roles/api/tasks/main.yml
@@ -10,7 +10,9 @@
    template:
      src: templates/mail-receiver-environment.json.j2
      dest: /etc/exim4/mail-receiver-environment.json
-      mode: 0644
+      mode: 0640
+      group: Debian-exim
+      owner: root

  when: mail_receiver_environment.stat.exists == False