From 6c3ca1f162bdb4aaa163258232e72cce1a68826d Mon Sep 17 00:00:00 2001
From: Stasiek Michalski <hellcp@opensuse.org>
Date: Apr 11 2020 11:32:18 +0000
Subject: Change read-only files' permissions


---

diff --git a/salt/profile/matrix/config.sls b/salt/profile/matrix/config.sls
index cae3e16..44d45e8 100644
--- a/salt/profile/matrix/config.sls
+++ b/salt/profile/matrix/config.sls
@@ -59,11 +59,13 @@ synapse_log_conf_file:
 /etc/matrix-synapse/signing.key:
   file.managed:
     - contents_pillar: profile:matrix:signing_key
-    - mode: 600
-    - user: synapse
+    - mode: 640
+    - user: root
+    - group: synapse
 
 /etc/matrix-synapse/irc_password.pem:
   file.managed:
     - contents_pillar: profile:matrix:appservices:irc:pass_enc_key
-    - mode: 600
-    - user: synapse
+    - mode: 640
+    - user: root
+    - group: synapse