From 4756acbaf0ec52377ddcebe243e5ae709c0936d7 Mon Sep 17 00:00:00 2001
From: Timo Makinen <tmakinen@foo.sh>
Date: Fri, 20 Dec 2024 17:39:10 +0000
Subject: [PATCH] mosquitto: Fix warnings about config file perms

---
 roles/mosquitto/tasks/main.yml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/roles/mosquitto/tasks/main.yml b/roles/mosquitto/tasks/main.yml
index 5e29a25..2d09f14 100644
--- a/roles/mosquitto/tasks/main.yml
+++ b/roles/mosquitto/tasks/main.yml
@@ -39,8 +39,8 @@
   ansible.builtin.copy:
     dest: /etc/mosquitto/acl.conf
     src: "{{ ansible_private }}/files/mosquitto/acl.conf"
-    mode: "0640"
-    owner: root
+    mode: "0400"
+    owner: _mosquitto
     group: _mosquitto
   notify: Restart mosquitto
 
@@ -48,8 +48,8 @@
   ansible.builtin.copy:
     dest: /etc/mosquitto/passwd
     src: "{{ ansible_private }}/files/mosquitto/passwd"
-    mode: "0640"
-    owner: root
+    mode: "0400"
+    owner: _mosquitto
     group: _mosquitto
   notify: Restart mosquitto