From bd5676222bb75c8b737e61169545fe7c3028c41c Mon Sep 17 00:00:00 2001
From: Maxim Devaev <mdevaev@gmail.com>
Date: Fri, 24 Jun 2022 18:25:08 +0300
Subject: [PATCH] fixed permissions again

---
 kvmd.install         | 11 ++++++++---
 scripts/kvmd-certbot |  2 +-
 2 files changed, 9 insertions(+), 4 deletions(-)

diff --git a/kvmd.install b/kvmd.install
index 2241db4a..6f3339e1 100644
--- a/kvmd.install
+++ b/kvmd.install
@@ -34,9 +34,14 @@ post_upgrade() {
 
 	for target in nginx vnc; do
 		chown root:root /etc/kvmd/$target/ssl
-		chown root:kvmd-$target /etc/kvmd/$target/ssl/*
-		chmod 440 /etc/kvmd/$target/ssl/server.key
-		chmod 444 /etc/kvmd/$target/ssl/server.crt
+		if [ -f /etc/kvmd/$target/ssl/server.key ]; then
+			chown root:kvmd-$target /etc/kvmd/$target/ssl/server.key
+			chmod 440 /etc/kvmd/$target/ssl/server.key
+		fi
+		if [ -f /etc/kvmd/$target/ssl/server.crt ]; then
+			chown root:kvmd-$target /etc/kvmd/$target/ssl/server.crt
+			chmod 444 /etc/kvmd/$target/ssl/server.crt
+		fi
 	done
 
 	echo "==> Patching configs ..."
diff --git a/scripts/kvmd-certbot b/scripts/kvmd-certbot
index 72adb8e2..54c6a570 100755
--- a/scripts/kvmd-certbot
+++ b/scripts/kvmd-certbot
@@ -62,7 +62,7 @@ if [ "$1" == "renew" ]; then
 			rm -rf '$new'
 			cp -a '$tmp' '$new'
 			rm '$new/updated'
-			chmod 750 '$new/config/'{archive,live}
+			chmod 755 '$new/config/'{archive,live}
 			chmod 640 '$new'/config/archive/*/privkey*.pem
 			sed -s -i -e 's| = $tmp/| = $cur/|g' '$new/config/renewal/'*
 			sync