From 43ea07294940e8fdb45148ba7dda9d4f1f1bc0e1 Mon Sep 17 00:00:00 2001 From: Mina Alber Date: Thu, 24 May 2018 15:45:41 +0200 Subject: [PATCH] Hotfix: use umask instead of chmod to change permissions of WireGuard keys --- tasks/main.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tasks/main.yml b/tasks/main.yml index efe6e33..9d3f296 100644 --- a/tasks/main.yml +++ b/tasks/main.yml @@ -75,7 +75,7 @@ - name: Generate WireGuard private and public keys - shell: wg genkey | tee /etc/wireguard/privatekey | wg pubkey > /etc/wireguard/publickey | chmod 600 /etc/wireguard/privatekey + shell: umask 077 && wg genkey | tee /etc/wireguard/privatekey | wg pubkey > /etc/wireguard/publickey - name: Register WireGuard private key as a variable