From 0fd05d496ebd4e62d15851284bf2b7bf96929d22 Mon Sep 17 00:00:00 2001
From: Alan Orth <alan.orth@gmail.com>
Date: Tue, 7 Sep 2021 17:10:35 +0300
Subject: [PATCH] roles/nginx: Set mode of downloaded acme.sh

---
 roles/nginx/tasks/letsencrypt.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/roles/nginx/tasks/letsencrypt.yml b/roles/nginx/tasks/letsencrypt.yml
index bde3025..5511da9 100644
--- a/roles/nginx/tasks/letsencrypt.yml
+++ b/roles/nginx/tasks/letsencrypt.yml
@@ -20,6 +20,7 @@
     get_url:
       url: https://raw.githubusercontent.com/acmesh-official/acme.sh/master/acme.sh
       dest: "{{ letsencrypt_acme_script }}"
+      mode: 0700
 
   - name: Prepare Let's Encrypt well-known directory
     file: