From 891ad79a252ca329d625e7b479c33027ddc0cdf9 Mon Sep 17 00:00:00 2001
From: CoolDuke <me@coolduke.com>
Date: Fri, 29 Jun 2018 23:35:44 +0200
Subject: [PATCH] adds file mode setting to private key

---
 deploy/exim4.sh | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/deploy/exim4.sh b/deploy/exim4.sh
index 573f762b..01673493 100644
--- a/deploy/exim4.sh
+++ b/deploy/exim4.sh
@@ -35,6 +35,10 @@ exim4_deploy() {
     _err "Error: write key file to: $_real_key"
     return 1
   fi
+  if ! chmod 600 "$_real_key"; then
+    _err "Error: set mode 600 on: $_real_key"
+    return 1
+  fi
   _real_fullchain="$_ssl_path/exim4.pem"
   if ! cat "$_cfullchain" >"$_real_fullchain"; then
     _err "Error: write key file to: $_real_fullchain"