From a5c1015e0f5d32f3363b1ec4ba85af8ad233b83b Mon Sep 17 00:00:00 2001
From: Robert Kaussow <mail@geeklabor.de>
Date: Sun, 20 Jan 2019 15:13:39 +0100
Subject: [PATCH] restict fs mode for cert file

---
 tasks/tls.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tasks/tls.yml b/tasks/tls.yml
index b1613f0..3ec00c9 100644
--- a/tasks/tls.yml
+++ b/tasks/tls.yml
@@ -22,7 +22,7 @@
         mode: "{{ item.mode }}"
       with_items:
         - { src: "{{ matrix_tls_key_source }}", dest: '{{ matrix_tls_key_path }}', mode: '0600' }
-        - { src: "{{ matrix_tls_cert_source }}", dest: '{{ matrix_tls_cert_path }}', mode: '0750' }
+        - { src: "{{ matrix_tls_cert_source }}", dest: '{{ matrix_tls_cert_path }}', mode: '0650' }
       loop_control:
         label: "{{ item.dest }}"