pi-hole/advanced/Templates
MichaIng e70981d80f
Do not overwrite TLS cert/key mode
FTL correctly creates the cert and especially private key with 0600 mode. But the prestart scripts changes it to 0660.

After removing the dedicated webserver from Pi-hole setups, the pihole group has no purpose anymore, and files should not be writable to any other user than pihole itself, and the private TLS key not reasable to anyone else either.

Additionally, this commit consolidates the chmod calls, applying 0755 to all directories and 0640 to all files, but the TLS key and cert.

Signed-off-by: MichaIng <micha@dietpi.com>
2025-02-24 17:29:58 +01:00
..
gravity.db.sql Merge branch 'development' into tweak/gravity_backup 2024-11-26 21:08:09 +01:00
gravity_copy.sql Remove remaining traces of audit log 2024-11-16 09:45:53 +01:00
logrotate Please editorconfig-checker 2024-07-02 20:57:28 +02:00
pihole-FTL-poststop.sh Remove obsolet getFTLPIDFile() 2024-07-27 22:00:52 +02:00
pihole-FTL-prestart.sh Do not overwrite TLS cert/key mode 2025-02-24 17:29:58 +01:00
pihole-FTL.service Remove obsolet getFTLPIDFile() 2024-07-27 22:00:52 +02:00
pihole-FTL.systemd Add CAP_SYS_TIME to FTL's ambient capabilities 2024-06-07 19:02:43 +02:00
pihole.cron Update local and remote versions at the same time 2022-10-06 12:36:17 +02:00