From 508d7889ba5fec05c082051396ca8ddea4c0fee3 Mon Sep 17 00:00:00 2001
From: Salt <rehashedsalt@cock.li>
Date: Thu, 20 Feb 2020 03:56:51 -0600
Subject: [PATCH] Fix permissions with https keys and certs

---
 roles/https/tasks/main.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/roles/https/tasks/main.yml b/roles/https/tasks/main.yml
index f177190..b2041c1 100644
--- a/roles/https/tasks/main.yml
+++ b/roles/https/tasks/main.yml
@@ -10,7 +10,6 @@
       file:
         path: "{{ item.dir }}"
         mode: "{{ item.mode }}"
-        recurse: yes
         owner: root
         group: www-data
         state: directory
@@ -26,6 +25,7 @@
     - name: Create certificate key
       openssl_privatekey:
         path: "/etc/pki/cert/private/{{ website_url }}.key"
+        mode: "0750"
     - name: Create CSR
       openssl_csr:
         path: "/etc/pki/cert/csr/{{ website_url }}.csr"