From d42e456024b2f495067b0d203383f86b6be225a1 Mon Sep 17 00:00:00 2001
From: Fabien Wernli <github@faxmodem.org>
Date: Thu, 7 Jul 2022 14:56:33 +0200
Subject: [PATCH] Use safer file permissions for configuration.py

---
 manifests/config.pp | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/manifests/config.pp b/manifests/config.pp
index e9ce50e..d255d15 100644
--- a/manifests/config.pp
+++ b/manifests/config.pp
@@ -229,7 +229,8 @@
     }),
     owner        => $user,
     group        => $group,
-    mode         => '0644',
+    mode         => '0640',
+    show_diff    => false,
     validate_cmd => "${venv_dir}/bin/python -m py_compile %",
     notify       => Exec['collect static files'],
   }