Merge pull request voxpupuli#119 from alphagov/fix-permissions

Fix SSL cert and key permissions

manifests/resource/vhost.pp

@@ -222,11 +222,13 @@
     # Check if the file has been defined before creating the file to
     # avoid the error when using wildcard cert on the multiple vhosts
     ensure_resource('file', "${nginx::params::nx_conf_dir}/${cert}.crt", {
-      mode   => '0644',
+      owner  => $nginx::params::nx_daemon_user,
+      mode   => '0444',
       source => $ssl_cert,
     })
     ensure_resource('file', "${nginx::params::nx_conf_dir}/${cert}.key", {
-      mode   => '0644',
+      owner  => $nginx::params::nx_daemon_user,
+      mode   => '0440',
       source => $ssl_key,
     })
   }