Securing setup files

diff --git a/manifests/init.pp b/manifests/init.pp
index 4331258c2a62a6a5defff180c93d79fd4c5c9160..9816cb5d5364bbdbe0db15065aab7d9132707b26 100644 (file)
--- a/manifests/init.pp
+++ b/manifests/init.pp
@@ -37,9 +37,9 @@ class ikiwiki {
         file { "/etc/ikiwiki/$name.setup":
           ensure  => present,
           content => template('ikiwiki/ikiwiki.setup.erb'),
-          owner   => root,
-          group   => root,
-          mode    => 644,
+          owner   => www-data,
+          group   => www-data,
+          mode    => 640,
           notify  => Exec["ikiwiki_refresh_${name}"],
         }