install.sh gives rw permissions to user over repo using groups

install.sh

@@ -40,6 +40,8 @@ fi
 if [ -z "$(grep "\bjoeac.net\b" /etc/group)" ]
 then
   sudo adduser -D -h /home/joeac.net joeac.net
+  sudo adduser joeac.net joeac.net
+  sudo adduser $(whoami) joeac.net
 fi
 
 cd /home/joeac.net
@@ -47,6 +49,7 @@ if ! [ -d joeac.net/.git ]
 then
   sudo -u joeac.net git clone https://git.joeac.net/joeac/joeac.net.git joeac.net
 fi
+sudo chown joeac.net:joeac.net joeac.net
 cd joeac.net
 
 if ! [ -h /usr/local/lib/joeac.net ]
@@ -60,7 +63,7 @@ then
   then
     read -sp "DIGITALOCEAN_TOKEN: " DIGITALOCEAN_TOKEN
   fi
-  echo ${DIGITALOCEAN_TOKEN} > DIGITALOCEAN_TOKEN
+  sudo -u joeac.net echo ${DIGITALOCEAN_TOKEN} > DIGITALOCEAN_TOKEN
 fi
 
 if ! ( podman secret exists remote_smtp_password )
@@ -73,6 +76,8 @@ then
   unset REMOTE_SMTP_PASSWORD
 fi
 
+sudo touch .env
+sudo chmod 772 .env
 while read line
 do
   if expr "${line}" : "^[[:alnum:]_]\+=" 1>/dev/null