swiyu-verifier.tmpfiles (1057B)
1 # The environment file names the verifier's DID and its database; the two 2 # files under secrets/ hold the signing key and the database password. All of 3 # them are conffiles or operator-written, so "z" re-applies ownership and mode 4 # on every install and upgrade without touching the contents. 5 z /etc/swiyu-verifier/swiyu-verifier.env 0640 root swiyu-verifier - - 6 # The operator's own settings, if they made the file; no secrets belong in it 7 # either, but it is kept as tight as the shipped one. 8 z /etc/swiyu-verifier/local.env 0640 root swiyu-verifier - - 9 z /etc/swiyu-verifier/client_metadata.json 0644 root root - - 10 z /etc/swiyu-verifier/application.yml 0644 root root - - 11 z /etc/swiyu-verifier/secrets 0750 root swiyu-verifier - - 12 # The signing key (signing-key.yml) and the database password (db.env); both 13 # are written by the administrator or by swiyu-verifier-dbconfig, so the mode 14 # is re-applied rather than assumed. 15 Z /etc/swiyu-verifier/secrets/*.env 0640 root swiyu-verifier - - 16 Z /etc/swiyu-verifier/secrets/*.yml 0640 root swiyu-verifier - -