From 6d9d020857a8ee357424247a4639ca85e3be77cc Mon Sep 17 00:00:00 2001
From: Dan Buch <dan@meatballhat.com>
Date: Thu, 13 Feb 2020 11:23:44 -0500
Subject: [PATCH] Ensure the key and cert are owned by spoke

---
 spoke-app-provision | 1 +
 1 file changed, 1 insertion(+)

diff --git a/spoke-app-provision b/spoke-app-provision
index f45e287..a042657 100755
--- a/spoke-app-provision
+++ b/spoke-app-provision
@@ -77,6 +77,7 @@ PGSETUP
   mv -v /tmp/spoke.crt /home/spoke/spoke.crt
   mv -v /tmp/spoke.key /home/spoke/spoke.key
   chmod 0600 /home/spoke/spoke.crt /home/spoke/spoke.key
+  chown spoke /home/spoke/spoke.crt /home/spoke/spoke.key
   cp -v /tmp/nginx-sites-default.conf /etc/nginx/sites-available/default
   ln -svf /etc/nginx/sites-available/default /etc/nginx/sites-enabled/default
   sha1sum /etc/nginx/sites-available/default