Traefik acme.json permissions in package wrong

Every time the traefik package gets an update the permissions and owner on the file /etc/traefik/acme.json get overwritten to something that traefik then complains about when trying to use the leresolver.

The error message in the traefik logs:

ERR The ACME resolve is skipped from the resolvers list error="unable to get ACME account: permissions 644 for /etc/traefik/acme.json are too open, please use 600" resolver=leresolver

The file should be owned by the traefik user+group and should have 600 permissions.


I guess one could just use a non-default storage location in ones custom config.

Which is maybe the better option anyway, because the file also gets its content overwritten, thus losing any previously stored certificates.

But from a package maintenance point maybe not overwriting this file if it exists already is better?

There is an ancient Bug report, seems no one cares.