Fix cert rights
diff --git a/salt/files/_peer.conf b/salt/files/_peer.conf
index be3f8a7..11a3b28 100644
--- a/salt/files/_peer.conf
+++ b/salt/files/_peer.conf
@@ -3,4 +3,4 @@
peer:
{%- for peer_name,peer_rules in master.peer.items() %}
{{ peer_name }}: {{ peer_rules }}
-{%- endfor %}
\ No newline at end of file
+{%- endfor %}
diff --git a/salt/minion/cert.sls b/salt/minion/cert.sls
index 65958f7..1953390 100644
--- a/salt/minion/cert.sls
+++ b/salt/minion/cert.sls
@@ -8,6 +8,13 @@
x509.private_key_managed:
- bits: 4096
+{{ cert.common_name }}_rights:
+ file.managed:
+ - name: /etc/ssl/private/{{ cert.common_name }}.key
+ - mode: 600
+ - require:
+ - x509: /etc/ssl/private/{{ cert.common_name }}.key
+
/etc/ssl/certs/{{ cert.common_name }}.crt:
x509.certificate_managed:
- ca_server: {{ cert.host }}