From 9726c25907954ae29a5adfe8023ff46828109ada Mon Sep 17 00:00:00 2001
From: rootzoll <christian@geektank.de>
Date: Thu, 7 Oct 2021 14:32:07 +0200
Subject: [PATCH] set rights on lnd.conf

---
 home.admin/_provision.update.sh              | 11 +++--------
 home.admin/config.scripts/blitz.migration.sh |  5 +++++
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/home.admin/_provision.update.sh b/home.admin/_provision.update.sh
index 9ef50f61d..348f269a1 100755
--- a/home.admin/_provision.update.sh
+++ b/home.admin/_provision.update.sh
@@ -179,8 +179,9 @@ if [ "${lightning}" == "lnd" ]; then
   configExists=$(sudo ls /mnt/hdd/lnd/lnd.conf | grep -c '.conf')
   if [ ${configExists} -eq 1 ]; then
 
-    # backup old lnd conf
-    sudo cp /mnt/hdd/lnd/lnd.conf /home/admin/lnd.conf.prebackup
+    # make sure correct file permisions are set
+    sudo chown bitcoin:bitcoin /mnt/hdd/lnd/lnd.conf
+    sudo chmod 664 /mnt/hdd/lnd/lnd.conf
 
     # make sure additional values are added to [Application Options] since v1.7
     echo "- lnd.conf --> checking additional [Application Options] since v1.7" >> ${logFile}
@@ -245,17 +246,11 @@ if [ "${lightning}" == "lnd" ]; then
     echo "WARN: /mnt/hdd/lnd/lnd.conf not found" >> ${logFile}
   fi
 
-  # backup old lnd conf
-  sudo cp /mnt/hdd/lnd/lnd.conf /home/admin/lnd.conf.prebackup2
-
   # start LND service
   echo "Starting LND Service ..." >> ${logFile}
   sudo systemctl enable lnd >> ${logFile}
   sudo systemctl start lnd >> ${logFile}
 
-  # backup old lnd conf
-  sudo cp /mnt/hdd/lnd/lnd.conf /home/admin/lnd.conf.prebackup3
-
 elif [ "${lightning}" == "cl" ]; then
 
   echo "Install C-lightning on update" >> ${logFile}
diff --git a/home.admin/config.scripts/blitz.migration.sh b/home.admin/config.scripts/blitz.migration.sh
index 25c4b86d3..757062704 100755
--- a/home.admin/config.scripts/blitz.migration.sh
+++ b/home.admin/config.scripts/blitz.migration.sh
@@ -68,6 +68,11 @@ migrate_lnd_conf () {
   # start from fresh configuration template (user will set password B on recovery)
   sudo cp /home/admin/assets/lnd.bitcoin.conf /mnt/hdd/lnd/lnd.conf
   sudo sed -i "s/^alias=.*/alias=${nodename}/g" /mnt/hdd/lnd/lnd.conf
+
+  # make sure correct file permisions are set
+  sudo chown bitcoin:bitcoin /mnt/hdd/lnd/lnd.conf
+  sudo chmod 664 /mnt/hdd/lnd/lnd.conf
+
 }
 
 migrate_raspiblitz_conf () {