In a website's user space I have made a system that will collect the latest configs from routers of our clients.
I can go to a password protected https website and access those configurations.
To access those routers I have a folder with config files containing credentials.
At this moment they are
I fully understand that these files don't go with the backup.
I could put those maybe in the ignore as I don't really need a backup of them, but I don't want to give those normal read access in case the website gets hacked.
I can also place them outside of the userspace or use symbolic links.
What is the bare minimum of read access, so it will be backed up?
This maybe?
I don't feel comfortable with giving it the username of the webspace, but maybe that's overthinking.
I can go to a password protected https website and access those configurations.
To access those routers I have a folder with config files containing credentials.
At this moment they are
Code:
rw....... root root
I could put those maybe in the ignore as I don't really need a backup of them, but I don't want to give those normal read access in case the website gets hacked.
I can also place them outside of the userspace or use symbolic links.
What is the bare minimum of read access, so it will be backed up?
This maybe?
Code:
rw.r..... root psaserv
I don't feel comfortable with giving it the username of the webspace, but maybe that's overthinking.