From aa14c9d9d8e304a243640a32d164dfed9d2a74c8 Mon Sep 17 00:00:00 2001
From: m8in <m8in@gmx.de>
Date: Thu, 3 Sep 2026 19:47:14 +0200
Subject: [PATCH] Modifing access to 640 for cert files

---
 script/ssl/renewCerts.sh | 1 +
 1 file changed, 1 insertion(+)

diff --git a/script/ssl/renewCerts.sh b/script/ssl/renewCerts.sh
index 71e0258..aa16571 100755
--- a/script/ssl/renewCerts.sh
+++ b/script/ssl/renewCerts.sh
@@ -381,6 +381,7 @@ function single() {
         --fullchain-file "${_DOMAIN_FOLDER}fullchain.crt" \
         --key-file "${_DOMAIN_FOLDER}private.key" \
         && openssl pkcs12 -export -in "${_DOMAIN_FOLDER}fullchain.crt" -inkey "${_DOMAIN_FOLDER}private.key" -out "${_DOMAIN_FOLDER}bundle.pkx" -passout pass: \
+        && chmod 640 "${_DOMAIN_FOLDER}fullchain.crt" "${_DOMAIN_FOLDER}private.key" "${_DOMAIN_FOLDER}bundle.pkx" \
         && echo "Certificate of domain '${_PRETTY_DOMAIN}' was updated." \
         && tryGitPush "${_PRETTY_DOMAIN}" \
         && return 0