make sure .filter are 0600

ansible/playbook.yml

@@ -5,11 +5,13 @@
       git:
         repo: https://src.mehl.mx/mxmehl/autoreply-editor.git
         dest: autoreply-editor
+      notify: restart supervisord
 
     - name: Deploy config file
       template:
         src: config.py.j2
         dest: autoreply-editor/config.py
+      notify: restart supervisord
 
     - name: Install specified python requirements
       pip:
@@ -46,3 +48,5 @@
     - name: update supervisord
       command: supervisorctl update
       listen: reload supervisord
+    - name: restart supervisord
+      command: supervisorctl restart autoreply-editor

ansible/templates/autoreply-editor.ini.j2

@@ -1,4 +1,4 @@
 [program:autoreply-editor]
 directory=/home/{{ ansible_user_id }}/autoreply-editor
 command=gunicorn --bind 0.0.0.0:{{ port }} wsgi:app
-startsecs=60
+startsecs=5

autoreply_editor/main.py

@@ -51,7 +51,9 @@ def qmail_status(user):
 
 def check_user(user):
     """Check if user exists"""
-    fulluser = [item for item in app.config.get("USERS") if item[1].split('@')[0] == user]
+    fulluser = [
+        item for item in app.config.get("USERS") if item[1].split("@")[0] == user
+    ]
     if not fulluser:
         return False
     else:
@@ -60,7 +62,13 @@ def check_user(user):
 
 def get_messagefile(user):
     """Return message file of user, and create if necessary"""
-    filepath = f"message-{user}.txt"
+    # Path of the project
+    gitpath = str(Path(app.root_path).parent)
+    # File name of the message
+    filename = f"message-{user}.txt"
+    # Combine path
+    filepath = os.path.join(gitpath, filename)
+
     if not os.path.isfile(filepath):
         Path(filepath).touch()
 
@@ -95,6 +103,9 @@ def get_filterfile(user):
             with open(filepath, "w", encoding="utf-8") as filterfile:
                 filterfile.write(filterconfig)
 
+            # Change permissions to 0600
+            os.chmod(filepath, 0o600)
+
     return filepath
 
 
@@ -123,6 +134,7 @@ def index():
         users=app.config.get("USERS"),
     )
 
+
 @app.route("/user/<user>")
 def user_status(user):
     """Status for specific user"""
@@ -130,9 +142,7 @@ def user_status(user):
     if not check_user(user):
         abort(404)
 
-    with open(
-        get_messagefile(user), "r", encoding="utf-8"
-    ) as messagefile:
+    with open(get_messagefile(user), "r", encoding="utf-8") as messagefile:
         message = messagefile.read()
 
     return render_template(
@@ -151,9 +161,7 @@ def user_update(user):
 
     if request.form["action"] == "message":
         input_message = request.form["message"]
-        with open(
-            get_messagefile(user), "w", encoding="utf-8"
-        ) as messagefile:
+        with open(get_messagefile(user), "w", encoding="utf-8") as messagefile:
             messagefile.write(str(input_message))
             result = "Success: The autoreply message has been updated!"
 
@@ -169,7 +177,6 @@ def user_update(user):
         with fileinput.FileInput(
             get_qmailfile(user),
             inplace=True,
-            backup=".bak",
         ) as qmailfile:
             for line in qmailfile:
                 print(
@@ -182,9 +189,12 @@ def user_update(user):
     try:
         return render_template("update.html", user=user, result=result)
     except UnboundLocalError:
-        return render_template("update.html", user=user, result="Something went terribly wrong!")
+        return render_template(
+            "update.html", user=user, result="Something went terribly wrong!"
+        )
 
 
 @app.errorhandler(404)
-def page_not_found(e):
-    return render_template('error.html', error=e), 404
+def page_not_found(error):
+    """Error for 404"""
+    return render_template("error.html", error=error), 404