#14 ensure mode 600 for ansible_ssh_private_key_file

KarmaComputing · Oct 20, 2024 · fd9201b · fd9201b
1 parent febc1c7
commit fd9201b
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/src/vpn/playbooks/create-rebuild-vpn-server.yml b/src/vpn/playbooks/create-rebuild-vpn-server.yml
@@ -15,6 +15,7 @@
       ansible.builtin.template:
         src: templates/ssh/ssh_private_key_server_bootstrap.j2
         dest: "{{ ansible_ssh_private_key_file }}"
+        mode: '0600'
       delegate_to: localhost
       tags:
         - 'ssh'