Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix Nginx related permission #1003

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Conversation

Sjors
Copy link
Contributor

@Sjors Sjors commented Nov 11, 2022

Without this permission, when installing a fresh instance on Ubuntu 22.10, I'm unable to load any assets and the nginx error log goes like this:

2022/11/11 20:40:20 [crit] 1552814#1552814: *1 stat() "/home/mastodon2/live/public/" failed (13: Permission denied), client: 2a02:a44b:5cf9:1:6d61:dcd8:5606:9390, server: mastodon.sprovoost.nl, request: "GET / HTTP/2.0", host: "mastodon.sprovoost.nl"

That said, a more narrow permission would be nicer.

@aaaaalbert
Copy link
Contributor

See also #1128 and the linked PRs.

@vmstan vmstan requested a review from a team December 11, 2023 23:04
@vmstan
Copy link
Sponsor Contributor

vmstan commented Dec 11, 2023

Closes #1128 #1132 #1055

@andypiper andypiper self-assigned this Dec 12, 2023
@aaaaalbert
Copy link
Contributor

That said, a more narrow permission would be nicer.

I second the OP's suggestion.

#1055 has a proposal in that direction: instead of allowing all other users on the machine to access the mastodon home dir, only add the www-data user to the mastodon group, and allow group-read/execute mode on mastodon's home dir. (I'm not sure the read bit is even necessary.)

Anyway, restricting other's access would be prudent, especially on shared servers.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants