gador/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

mobilizon: fix permissions on /var/lib/mobilizon and its folders

Browse Source 
Image uploads were broken due to /var/lib/mobilizon/uploads being root-owned.

The root cause is that systemd doesn't always process tmpfiles rules in the
listed order. The "Z" rule is actually applied first, so it didn't have any
effect on first run (when the directory doesn't exist). The other rules
would then proceed to create the directory structure, but any parent
directories that aren't explicitly listed would be root-owned.

The fix is to explicitly list parent directories with the proper owner.
This commit is contained in:
Tony Wasserka
2026-02-15 16:17:23 +01:00
parent cacd319551
commit 718474975b
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
nixos/modules/services/web-apps/mobilizon.nix
+3
View File
@@ -398,7 +398,10 @@ in
};
systemd.tmpfiles.rules = [
"d /var/lib/mobilizon 700 mobilizon mobilizon - -"
"d /var/lib/mobilizon/sitemap 700 mobilizon mobilizon - -"
"d /var/lib/mobilizon/uploads 700 mobilizon mobilizon - -"
"d /var/lib/mobilizon/uploads/exports 700 mobilizon mobilizon - -"
"d /var/lib/mobilizon/uploads/exports/csv 700 mobilizon mobilizon - -"
"Z /var/lib/mobilizon 700 mobilizon mobilizon - -"
];