From fa26a5a6008735baad4eb982f5e4e09cd0fe22fe Mon Sep 17 00:00:00 2001
From: Johannes Löthberg <johannes@kyriasis.com>
Date: Wed, 23 Nov 2016 19:44:25 +0000
Subject: theos/certs: Set modes for /etc/letsencrypt/archive
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Necessary for eg. smtpd to be happy with the permissions.

Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
---
 theos/certs/init.sls | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/theos/certs/init.sls b/theos/certs/init.sls
index 0e8c750..9e6647b 100644
--- a/theos/certs/init.sls
+++ b/theos/certs/init.sls
@@ -3,4 +3,11 @@ include:
   - .xan_kyriasis_com
   - .git_kyriasis_com
 
+/etc/letsencrypt/archive:
+  file.directory:
+    - makedirs: True
+    - dir_mode: 711
+    - file_mode: 640
+    - recurse:
+      - mode
 # vim: set ft=yaml et:
-- 
cgit v1.2.3-70-g09d2