From f90a61be00c1f9aebb1ba8c65b67a22d81e97f42 Mon Sep 17 00:00:00 2001
From: Linus Nordberg <linus@nordberg.se>
Date: Thu, 25 Nov 2021 16:44:04 +0100
Subject: user www-data needs to read the private key

---
 quickstart.sh | 1 +
 1 file changed, 1 insertion(+)

diff --git a/quickstart.sh b/quickstart.sh
index 6a3616d..d46a791 100755
--- a/quickstart.sh
+++ b/quickstart.sh
@@ -21,6 +21,7 @@ fi
 # Generate new certificates to use for JWT.
 if [ ! -f ${DOCKER_JWT_PUBKEY_PATH}/private.pem ] && [ ! -f ${DOCKER_JWT_PUBKEY_PATH}/public.pem ]; then
     openssl ecparam -genkey -name prime256v1 -noout -out ${DOCKER_JWT_PUBKEY_PATH}/private.pem
+    chmod 644 ${DOCKER_JWT_PUBKEY_PATH}/private.pem
     openssl ec -in ${DOCKER_JWT_PUBKEY_PATH}/private.pem -pubout -out ${DOCKER_JWT_PUBKEY_PATH}/public.pem
 fi
 
-- 
cgit v1.1