From ce85a23a39cf5ee5385e6cf01a1ba3a0c59b043e Mon Sep 17 00:00:00 2001
From: Alexandre Aubin <alex.aubin@mailoo.org>
Date: Sat, 16 Dec 2023 17:09:50 +0100
Subject: [PATCH] Zgrlbml

---
 manifest.toml   | 1 -
 scripts/install | 5 ++---
 scripts/upgrade | 3 +++
 3 files changed, 5 insertions(+), 4 deletions(-)

diff --git a/manifest.toml b/manifest.toml
index 2445633..61350c3 100644
--- a/manifest.toml
+++ b/manifest.toml
@@ -69,6 +69,5 @@ ram.runtime = "50M"
     [resources.apt]
     packages = "gunicorn, python3, python3-venv, libldap2-dev, libpq-dev, libsasl2-dev, libjpeg-dev, libxml2-dev, libxslt1-dev, libffi-dev, libpango1.0-0, postgresql, postgresql-contrib, postgresql-server-dev-13"
 
-
     [resources.database]
     type = "postgresql"
diff --git a/scripts/install b/scripts/install
index 8760d72..4037416 100644
--- a/scripts/install
+++ b/scripts/install
@@ -40,13 +40,12 @@ export prefix="${path#"/"}/"
 prefix=${prefix%"/"}
 ynh_render_template ../conf/local.py.j2 "$install_dir/coin/settings_local.py"
 ynh_store_file_checksum --file="$install_dir/coin/settings_local.py"
+chmod 400 "$install_dir/coin/settings_local.py"
+chown $app "$install_dir/coin/settings_local.py"
 
 # SERVE STATIC FILES IN PRODUCTION MODE
 ln -s $install_dir/$app/static $install_dir/static
 
-ls -l $install_dir
-ls -l $install_dir/coin
-
 pushd $install_dir
 	ynh_exec_warn_less venv/bin/python3 manage.py migrate --noinput
 	ynh_exec_warn_less venv/bin/python3 manage.py collectstatic --noinput
diff --git a/scripts/upgrade b/scripts/upgrade
index d5cf032..06bbca8 100644
--- a/scripts/upgrade
+++ b/scripts/upgrade
@@ -53,6 +53,9 @@ ynh_backup_if_checksum_is_different --file="$install_dir/coin/settings_local.py"
 ynh_render_template ../conf/local.py.j2 "$install_dir/coin/settings_local.py"
 ynh_store_file_checksum --file="$install_dir/coin/settings_local.py"
 
+chmod 400 "$install_dir/coin/settings_local.py"
+chown $app "$install_dir/coin/settings_local.py"
+
 ynh_add_config --template="../conf/gunicorn_config.py" --destination="$install_dir/gunicorn_config.py"
 chown $app:www-data "$install_dir/gunicorn_config.py"