ansible: restrict mode on internal certificate private key to user

[lttng-ci.git] / automation / ansible / roles / common / tasks / certs.yml

diff --git a/automation/ansible/roles/common/tasks/certs.yml b/automation/ansible/roles/common/tasks/certs.yml
index eeb1bfa9657fb1fc44885afb2d00ad5206531bd0..fc79947292d13d6284d89583a756dc8464090c79 100644 (file)
--- a/automation/ansible/roles/common/tasks/certs.yml
+++ b/automation/ansible/roles/common/tasks/certs.yml
@@ -10,7 +10,7 @@
 - name: Deploy internal certificate key
   ansible.builtin.copy:
     dest: "{{common_certificate_key_path_prefix}}/internal.efficios.com.key"
-    mode: '0640'
+    mode: '0600'
     owner: 'root'
     group: 'root'
     content: "{{lookup('community.general.bitwarden', 'TLS Certificate internal.efficios.com', collection_id='35c5d8b1-2520-4450-a479-aef50131b930')[0]['notes'] }}"