From b959c2ecb1a9813375853c77db53ea86242b58cc Mon Sep 17 00:00:00 2001
From: VC <veretcle+framagit@mateu.be>
Date: Fri, 5 Jul 2024 11:53:35 +0200
Subject: [PATCH] fix: various permissions

---
 roles/postgres/tasks/main.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/roles/postgres/tasks/main.yml b/roles/postgres/tasks/main.yml
index fe47185..3228d32 100644
--- a/roles/postgres/tasks/main.yml
+++ b/roles/postgres/tasks/main.yml
@@ -11,7 +11,7 @@
     owner: postgres
     group: postgres
     state: directory
-    mode: 0755
+    mode: 0700
 
 - name: Populate postgresql directory
   ansible.builtin.command:
@@ -32,7 +32,7 @@
   ansible.builtin.copy:
     src: files/pg_hba.conf
     dest: "/etc/postgresql/{{ pg_version }}/main/pg_hba.conf"
-    mode: 0644
+    mode: 0640
   notify: Restart postgres
 
 - name: Create backup dir