improve .env handling

This commit is contained in:
2026-03-22 12:38:17 +01:00
parent 1fed3dde51
commit f3eea007f7

View File

@@ -72,6 +72,14 @@ for svc in nextcloud gitea monitoring; do
fi
done
# ------------------------------------------------------------------
# Lock down .env files (readable only by root)
# ------------------------------------------------------------------
echo "==> Securing .env files..."
for envfile in "$REPO_ROOT"/.env "$REPO_ROOT"/*/.env; do
[ -f "$envfile" ] && chmod 600 "$envfile" && chown root:root "$envfile"
done
# ------------------------------------------------------------------
# Start all stacks
# ------------------------------------------------------------------