From 41dcd6a5bb2f8bf05ab6e4e26de99ef287a83ff1 Mon Sep 17 00:00:00 2001
From: Asif Bacchus <asif@asifbacchus.dev>
Date: Sat, 24 Jul 2021 02:12:44 -0600
Subject: [PATCH] refactor(entrypoint): mod permissions on fullchain

---
 build/entrypoint.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/build/entrypoint.sh b/build/entrypoint.sh
index 667c364..fd8de27 100644
--- a/build/entrypoint.sh
+++ b/build/entrypoint.sh
@@ -23,7 +23,7 @@ certificateGenerateNew() {
     # shellcheck disable=SC3028
     if [ -z "$CERT_HOSTNAME" ]; then export CERT_HOSTNAME="$HOSTNAME"; fi
     # create placeholder files to set permissions
-    touch /certs/fullchain.pem && chmod 664 /certs/fullchain.pem
+    touch /certs/fullchain.pem && chmod 644 /certs/fullchain.pem
     touch /certs/privkey.pem && chmod 640 /certs/privkey.pem
     # generate certificate
     if ! openssl req -new -x509 -days 365 -nodes -out /certs/fullchain.pem -keyout /certs/privkey.pem -config /etc/selfsigned.cnf; then