From db07992dc95859d695473afbec51cb2a1b4d7627 Mon Sep 17 00:00:00 2001
From: Isaac Good <github@isaacgood.com>
Date: Fri, 15 Aug 2025 21:25:19 -0700
Subject: [PATCH] Use mode 0700 for the config dir, not 0755; other users
 should not have access

---
 config/persister.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/config/persister.go b/config/persister.go
index 1ad046f0d..1b29dc720 100644
--- a/config/persister.go
+++ b/config/persister.go
@@ -25,7 +25,7 @@ func (p FilePersister) Save(v *viper.Viper, basename string) error {
 	v.SetConfigName(basename)
 
 	if _, err := os.Stat(p.Dir); os.IsNotExist(err) {
-		if err := os.MkdirAll(p.Dir, os.FileMode(0755)); err != nil {
+		if err := os.MkdirAll(p.Dir, os.FileMode(0700)); err != nil {
 			return err
 		}
 	}