Correct permissions of generated certificates

entrypoint.sh

@@ -14,3 +14,10 @@ fi
 certbot certonly --agree-tos --cert-name "${DOMAIN}" \
         --email "$EMAIL" --expand --non-interactive \
         --domain "$DOMAIN" --standalone $STAGING
+
+# Correct permissions for multi user container/pod deployments
+# if not indicated otherwise
+if [ -z "$LEAVE_PERMISSIONS_AS_IS" ]; then
+    find /etc/letsencrypt -type d -exec chmod 0755 {} \;
+    find /etc/letsencrypt -type f -exec chmod 0644 {} \;
+fi