ensure file permissions on certificate key is secure (#15)

sagansystems · Nov 2, 2023 · 9565984 · 9565984
1 parent aa452ab
commit 9565984
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/scripts/docker-entrypoint.sh b/scripts/docker-entrypoint.sh
@@ -6,6 +6,7 @@ fi
 
 if test -n "$DATABASE_CLIENT_KEY_B64"; then
   echo "$DATABASE_CLIENT_KEY_B64" | base64 -d >/tmp/client-key.pem
+  chmod 0600 /tmp/client-key.pem
 fi
 
 if test -n "$DATABASE_SERVER_CA_B64"; then