mirror of
https://github.com/dev-sec/ansible-nginx-hardening.git
synced 2024-09-28 11:09:49 +02:00
imove chmod to end because of generated files (#31)
Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
This commit is contained in:
parent
29a43568e6
commit
57f7a15b51
@ -1,12 +1,4 @@
|
|||||||
---
|
---
|
||||||
- name: config should not be worldwide read- or writeable
|
|
||||||
file:
|
|
||||||
path: "/etc/nginx"
|
|
||||||
mode: "o-rw"
|
|
||||||
owner: "root"
|
|
||||||
group: "root"
|
|
||||||
recurse: true
|
|
||||||
|
|
||||||
- name: create additional configuration
|
- name: create additional configuration
|
||||||
template:
|
template:
|
||||||
src: "hardening.conf.j2"
|
src: "hardening.conf.j2"
|
||||||
@ -97,3 +89,11 @@
|
|||||||
args:
|
args:
|
||||||
creates: "/etc/nginx/dh{{ nginx_dh_size }}.pem"
|
creates: "/etc/nginx/dh{{ nginx_dh_size }}.pem"
|
||||||
notify: restart nginx
|
notify: restart nginx
|
||||||
|
|
||||||
|
- name: config should not be worldwide read- or writeable
|
||||||
|
file:
|
||||||
|
path: "/etc/nginx"
|
||||||
|
mode: "o-rw"
|
||||||
|
owner: "root"
|
||||||
|
group: "root"
|
||||||
|
recurse: true
|
Loading…
Reference in New Issue
Block a user