alxwolf / ubios-cert

Manage SSL / TLS certificates with acme.sh (Let's Encrypt, ZeroSSL) for Ubiquiti UbiOS firmwares
MIT License
170 stars 20 forks source link

Fix for evostreams being unable to access unifi-core.key, which breaks RTSPS feeds from protect. #41

Closed bfayers closed 1 year ago

bfayers commented 1 year ago

After using this I noticed that my rtsps feeds from protect (in use with home assistant) no longer functioned -- because these are served by the evostreams process which runs under the unifi-protect user the 600 permissions are not enough to allow access and those streams will never work, 644 is the minimum for functionality.

alxwolf commented 1 year ago

That's a great find, @bfayers! Using Protect as well but not with HA...

I plan to implement this, but as SSH keys should have '0600' permissions, I will make this an option to be selected for those who need it.

For the meantime, I wrote a short wiki entry here.

bfayers commented 1 year ago

keys should have '0600' permissions, I will make this an option to be selected for those who need it.

for what it's worth, the default behaviour of the appliances is 644.