The generated WireGuard config contains the server private key and client preshared keys, so it is now written with mode 0600 by default instead of inheriting a umask-dependent (often world-readable) mode. The mode is configurable via the global settings UI or WGUI_CONFIG_FILE_MODE. The file is still written in place so the container inotify restart watch keeps working. |
||
|---|---|---|
| .. | ||
| jsondb | ||
| store.go | ||