Set mode for $archive_path to 0700.
Even for Debian recovery.conf has to be in postgresql::server::datadir.