From 181dd0ff2a82dcac10c8d46981c78e3a772638dc Mon Sep 17 00:00:00 2001
From: Simon Ruderich <simon@ruderich.org>
Date: Sat, 5 Dec 2015 14:52:40 +0100
Subject: [PATCH] use umask 077 to protect private keys

---
 letsencrypt.sh | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/letsencrypt.sh b/letsencrypt.sh
index 8e6e231..51249f2 100755
--- a/letsencrypt.sh
+++ b/letsencrypt.sh
@@ -4,6 +4,9 @@ set -eu
 
 . ./config.sh
 
+umask 077 # paranoid umask, we're creating private keys
+
+
 urlbase64() {
   base64 -w 0 | sed -r 's/=*$//g' | tr '+/' '-_'
 }
-- 
2.47.2