mirror/ansible-nginx-hardening
1
0
Fork 0
mirror of https://github.com/dev-sec/ansible-nginx-hardening.git synced 2024-11-22 15:32:01 +01:00
Code Issues Releases Activity

move chmod to end, because of generated files

Browse Source 
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
This commit is contained in:
Martin Schurz 2020-08-24 10:59:25 +02:00
parent 1c1018d445
commit 3f3d1b27a8
1 changed files with 8 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
tasks/main.yml
View File

@ -1,12 +1,4 @@
---
- name: config should not be worldwide read- or writeable
file:
path: "/etc/nginx"
mode: "o-rw"
owner: "root"
group: "root"
recurse: true
- name: create additional configuration
template:
src: "hardening.conf.j2"
@ -97,3 +89,11 @@
args:
creates: "/etc/nginx/dh{{ nginx_dh_size }}.pem"
notify: restart nginx
- name: config should not be worldwide read- or writeable
file:
path: "/etc/nginx"
mode: "o-rw"
owner: "root"
group: "root"
recurse: true