CHANGELOG.md

@@ -54,6 +54,7 @@ The **patch** part changes is incremented if multiple releases happen the same m
 * nagios-nrpe: Fix check opendkim for recent change in listening port
 * varnish: fix missing state, that blocked the task
 * proftpd: Fix format of public key files controlled by ansible
+* proftpd: Fix mode of public key directory and files (they have to be accessible by proftpd:nobody)
 
 ### Removed
 

proftpd/tasks/accounts.yml

@@ -65,7 +65,7 @@
   template:
     dest: "/etc/proftpd/sftp.authorized_keys/{{ _proftpd_account.name }}"
     src: authorized_keys.j2
-    mode: 0600
+    mode: 0644
   loop: "{{ proftpd_accounts_final }}"
   loop_control:
     loop_var: _proftpd_account

proftpd/tasks/main.yml

@@ -52,7 +52,7 @@
   file:
     path: /etc/proftpd/sftp.authorized_keys/
     state: directory
-    mode: "0700"
+    mode: "0755"
     owner: root
     group: root
   notify: restart proftpd