kych.tmpfiles (547B)
1 # kych.conf holds the database connection string and the OAuth 2.0 client 2 # secrets, so it must not be world-readable. It is a conffile owned by the 3 # package (hence root:root 0644 on unpack); "z" re-applies ownership and mode 4 # on every install and upgrade without touching the contents. 5 z /etc/kych/kych.conf 0640 root kych - - 6 # Where an administrator puts files pulled in with @inline-secret@. Shipped 7 # empty, so the mode is set here rather than by dpkg. 8 z /etc/kych/secrets 0750 root kych - - 9 Z /etc/kych/secrets/*.conf 0640 root kych - -