Fix Nginx related permission
Without this permission, when installing a fresh instance on Ubuntu 22.10, I'm unable to load any assets and the nginx error log goes like this:
2022/11/11 20:40:20 [crit] 1552814#1552814: *1 stat() "/home/mastodon2/live/public/" failed (13: Permission denied), client: 2a02:a44b:5cf9:1:6d61:dcd8:5606:9390, server: mastodon.sprovoost.nl, request: "GET / HTTP/2.0", host: "mastodon.sprovoost.nl"
That said, a more narrow permission would be nicer.
See also #1128 and the linked PRs.
Closes #1128 #1132 #1055
That said, a more narrow permission would be nicer.
I second the OP's suggestion.
#1055 has a proposal in that direction: instead of allowing all other users on the machine to access the mastodon home dir, only add the www-data user to the mastodon group, and allow group-read/execute mode on mastodon's home dir. (I'm not sure the read bit is even necessary.)
Anyway, restricting other's access would be prudent, especially on shared servers.