From 065674de81c4a8308a61c66ba3a993447297e884 Mon Sep 17 00:00:00 2001
From: Alexandre <44178713+alexbelgium@users.noreply.github.com>
Date: Wed, 19 Nov 2025 20:26:53 +0100
Subject: [PATCH] Set strict perms on WireGuard IPv4 fallback config

---
 qbittorrent/rootfs/etc/s6-overlay/s6-rc.d/svc-qbittorrent/run | 1 +
 1 file changed, 1 insertion(+)

diff --git a/qbittorrent/rootfs/etc/s6-overlay/s6-rc.d/svc-qbittorrent/run b/qbittorrent/rootfs/etc/s6-overlay/s6-rc.d/svc-qbittorrent/run
index 3ee876ef7..e94daae7d 100644
--- a/qbittorrent/rootfs/etc/s6-overlay/s6-rc.d/svc-qbittorrent/run
+++ b/qbittorrent/rootfs/etc/s6-overlay/s6-rc.d/svc-qbittorrent/run
@@ -44,6 +44,7 @@ else
 
             ipv4_config="${WIREGUARD_STATE_DIR}/${wireguard_interface}-ipv4.conf"
             echo -n > "${ipv4_config}"
+            chmod 600 "${ipv4_config}" 2>/dev/null || true
 
             while IFS= read -r line; do
                 if [[ "${line}" =~ ^Endpoint ]]; then