Lock down conf file permissions to 644

[jhanggi]

No description provided.

[pturley]

That looks correct to me, but I will let @phoolish or @vandrijevik be the real approver. I dont know this code super well.

[vandrijevik]

Looks good to me! I might change the test name to say something about the executability bit (since these files are not executable, and to me that’s the real fix) but go with your ❤️!

[jhanggi]

@phoolish I'll probably need some help getting this rolled out. I don't know all the steps that'll be involved to get it into core env and then the main repo.

[vandrijevik]

@jhanggi When you merge this PR into master, a new release of the nginx_conf cookbook will be released to our Chef server. Afterwards, in chef-core_env (which depends on the cookbook) you can run bundle exec berks update nginx_conf, which will pick up the new version and update Berksfile.lock.

Finally, when you merge the PR for that update in chef-core_env, it will first update core_staging, and after manually approving that workflow in CircleCI, the change will propagate to core_production.

Hope that helps!