From cdf2a6b72eab4c6b81fb6ee0df3b51d99859ae25 Mon Sep 17 00:00:00 2001
From: Adrian Cowan <othrayte@gmail.com>
Date: Tue, 14 Oct 2025 22:07:48 +1100
Subject: [PATCH] Fixup: traefik requires the certificate secrets to be
 protected. Made the same change on the actual storage host.

---
 2-nomad-config/traefik.nomad.hcl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/2-nomad-config/traefik.nomad.hcl b/2-nomad-config/traefik.nomad.hcl
index b630a13..e4f9b27 100644
--- a/2-nomad-config/traefik.nomad.hcl
+++ b/2-nomad-config/traefik.nomad.hcl
@@ -227,7 +227,7 @@ EOF
       attachment_mode = "file-system"
 
       mount_options {
-        mount_flags = ["uid=1000", "gid=1000"]
+        mount_flags = ["file_mode=0600", "uid=1000", "gid=1000"]
       }
     }