Unverified Commit 43df6e6f authored by Kerstin's avatar Kerstin Committed by GitHub
Browse files

mobilizon: fix permissions on /var/lib/mobilizon/uploads folder (#490247)

parents 49586e1e 71847497

nixos/modules/services/web-apps/mobilizon.nix

+3 −0
Original line number Diff line number Diff line
@@ -398,7 +398,10 @@ in 
    };



    systemd.tmpfiles.rules = [

      "d /var/lib/mobilizon 700 mobilizon mobilizon - -"

      "d /var/lib/mobilizon/sitemap 700 mobilizon mobilizon - -"

      "d /var/lib/mobilizon/uploads 700 mobilizon mobilizon - -"

      "d /var/lib/mobilizon/uploads/exports 700 mobilizon mobilizon - -"

      "d /var/lib/mobilizon/uploads/exports/csv 700 mobilizon mobilizon - -"

      "Z /var/lib/mobilizon 700 mobilizon mobilizon - -"

    ];

nixos/tests/mobilizon.nix

+6 −0
Original line number Diff line number Diff line
@@ -43,5 +43,11 @@ in 
    server.wait_for_unit("mobilizon.service")

    server.wait_for_open_port(${toString port})

    server.succeed("curl --fail https://${mobilizonDomain}/")



    # Verify ownership is set up correctly

    owner = server.succeed("stat -c '%U' /var/lib/mobilizon/sitemap").rstrip()

    assert owner == "mobilizon", f"unexpected owner: {owner}"

    owner = server.succeed("stat -c '%U' /var/lib/mobilizon/uploads").rstrip()

    assert owner == "mobilizon", f"unexpected owner: {owner}"

  '';

}