Nginx: file permissions

2016-11-22 17:01:29 +01:00 · 2016-11-22 17:01:29 +01:00 · 3c65bce95e
parent 1ed948d9e8
commit 3c65bce95e
1 changed files with 8 additions and 2 deletions
--- a/nginx/tasks/main.yml
+++ b/nginx/tasks/main.yml
@ -17,12 +17,18 @@
  tags:
    - nginx

+# TODO: verify that those permisisons are correct :
+# not too strict for private_ipaddr_whitelist
+# and not too loose for private_htpasswd
+
 - name: Copy snippets
  copy:
    src: nginx/snippets/
    dest: /etc/nginx/snippets/
-    directory_mode: 0644
-    mode: 0644
+    owner: www-data
+    group: www-data
+    directory_mode: 0640
+    mode: 0640
    # force: yes
  notify: reload nginx
  tags: