ansible-taler-exchange

commit aad67070d5b53f7746967b3b6d895a015be2b8f6
parent 6d2945497454d0e8b237e60286701930224c5955
Author: Florian Dold <florian@dold.me>
Date:   Fri,  3 Jul 2026 16:07:50 +0200

fix libeufin config permissions

Diffstat:
M
roles/libeufin-nexus/tasks/main.yml
 | 
8
++++++--

1 file changed, 6 insertions(+), 2 deletions(-)
diff --git a/roles/libeufin-nexus/tasks/main.yml b/roles/libeufin-nexus/tasks/main.yml
@@ -92,13 +92,17 @@
 - name: Libeufin-nexus force ansible to regather just created fact(s)
   ansible.builtin.setup:
 
+# FIXME:
+# Once the libeufin package has the proper config structure,
+# use a secrets include instead.
+
 - name: Place libeufin-nexus config
   ansible.builtin.template:
     src: templates/etc/libeufin/libeufin-nexus.conf.j2
     dest: "/etc/libeufin/libeufin-nexus.conf"
     owner: root
     group: root
-    mode: "0644"
+    mode: "0400"
 
 - name: Place libeufin-nexus EBICS config
   ansible.builtin.template:
@@ -106,7 +110,7 @@
     dest: "/etc/libeufin/libeufin-nexus-ebics.conf"
     owner: root
     group: libeufin-nexus
-    mode: "0640"
+    mode: "0400"
   when: use_ebics or configure_ebics
 
 - name: Setup libeufin database