From 24eb3ce449ad8b497d6a6699f21e102d36af4463 Mon Sep 17 00:00:00 2001
From: Zack Wong <coffee@ucc.asn.au>
Date: Sun, 24 Feb 2019 18:17:10 +0800
Subject: [PATCH] set permissions on config

---
 .gitlab-ci.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 19d2236..c23cb2c 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -32,6 +32,7 @@ deploy_testing:
     - rm -f /etc/uwsgi/vassals/$CI_COMMIT_REF_NAME.ini
     - mkdir .db
     - envsubst < src/gms/settings_local.example.py > src/gms/settings_local.py
+    - chmod 600 src/gms/settings_local.py
     - ln -srT ./ /var/www/test/$CI_COMMIT_REF_NAME
     - python src/manage.py collectstatic
     - python src/manage.py makemigrations
@@ -57,6 +58,7 @@ deploy_staging:
     - rm -f /etc/uwsgi/vassals/stage.ini
     - ln -srT ./ /services/$CI_PROJECT_NAME
     - envsubst < src/gms/settings_local.example.py > src/gms/settings_local.py
+    - chmod 600 src/gms/settings_local.py
     - python src/manage.py collectstatic
     - python src/manage.py makemigrations
     - python src/manage.py migrate --run-syncdb
@@ -79,4 +81,4 @@ stop_testing:
     - master
   script:
     - rm -f /var/www/test/$CI_COMMIT_REF_NAME
-    - rm -f /etc/uwsgi/vassals/$CI_COMMIT_REF_NAME.ini
\ No newline at end of file
+    - rm -f /etc/uwsgi/vassals/$CI_COMMIT_REF_NAME.ini
-- 
GitLab