From 37de8a97187cd49e8aadaa9d0b07c6e0118b0abb 2015-05-10 01:13:52
From: Branko Majic <branko@majic.rs>
Date: 2015-05-10 01:13:52
Subject: [PATCH] MAR-5: Updated WSGI webserver role to have the website service running with correct umask.

---

diff --git a/roles/wsgi_website/templates/systemd_wsgi_website.service.j2 b/roles/wsgi_website/templates/systemd_wsgi_website.service.j2
index 7d22006393d5ee7e40c9c0f87cf1958264042469..fdd2f72148619d750e6f96285078a5366ad9b958 100644
--- a/roles/wsgi_website/templates/systemd_wsgi_website.service.j2
+++ b/roles/wsgi_website/templates/systemd_wsgi_website.service.j2
@@ -12,6 +12,7 @@ ExecStart={{ home }}/virtualenv/bin/gunicorn --bind unix:/run/wsgi/{{ fqdn }}.so
 ExecReload=/bin/kill -s HUP $MAINPID
 ExecStop=/bin/kill -s TERM $MAINPID
 PrivateTmp=true
+UMask=0007
 
 [Install]
 WantedBy=multi-user.target
\ No newline at end of file